Privacy Policy

Effective date: 2026-11-14

This Privacy Policy describes how Attract Brands LLC ("Attract," "we," "us," or "our") collects, uses, and shares information when you use useattract.ai, its subdomains, and the Attract web and desktop applications (collectively, the "Services"), purchase from us, or otherwise interact with us. Attract Brands LLC operates from Las Vegas, Nevada, United States.

1. Information We Collect

We collect information in three ways: information you give us, information collected automatically, and information from third parties.

Information you provide directly:

• Contact details (name, email address, phone number, business name)
• Project details and brand information you share during intake or onboarding
• Communications you send to us via email, chat, or contact forms
• Account credentials if you create a customer account
• Website content, files, prompts, and other workspace information you provide when using the editor, assets, messaging, or AI features

Information collected automatically:

• Device and browser information (browser type, operating system, device identifiers, IP address)
• Usage data (pages viewed, links clicked, time spent, referring URLs)
• Cookie and similar tracking-technology data — see our Cookie Policy

Information from third parties:

• Payment information processed by Stripe (we never see or store full card numbers)
• Email delivery and engagement metrics from Resend
• Analytics data from analytics providers we use to operate the Services

Google sign-in

When you choose Google sign-in, Google supplies basic account information through our authentication provider, Clerk: your Google account identifier, email address and verification status, and available profile information such as your name and profile image. We use this information to create or identify your Attract account, authenticate you, display your account profile, and protect account access. We do not receive your Google password.

Google sign-in requests the OpenID, email, and profile permissions. Signing in by itself does not authorize access to your Gmail messages, Drive files, Calendar events, or other Google service content. Connecting an additional service is a separate action with its own permission request and explanation of the feature it supports.

Basic account and profile information is stored with our authentication provider and associated Attract account records. Authentication session credentials allow the app to maintain your signed-in session. We share the information with service providers as needed to operate authentication, account storage, and security, as described below. Account information is retained under the retention section of this policy.

You can revoke Google access through Google Account connections. Revoking access stops that connection; it does not automatically delete your Attract account or content already stored. To request deletion of account information, contact info@attractbrands.com.

AI features and connected services

When you ask an AI feature to work with content, relevant prompts, files, conversation context, or connected-service information may be sent to the configured AI and integration providers to perform that request. The provider and processing depend on the feature and connections you use. Do not submit information you are not authorized to share. Additional Google service permissions and their data handling must be disclosed before those features access that data.

2. How We Use Information

We use information to:

• Deliver and operate our Services, including website editing, workspace assets, messaging, AI-assisted tasks, and the connected features you use
• Process payments and manage subscriptions
• Communicate with you about projects, invoices, support, and product updates
• Improve the Services (analytics, debugging, product research)
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information.

3. How We Share Information

We share information only as needed to operate the Services:

• Service providers used to operate the features you access — including Clerk (authentication), Convex (application backend), Stripe (payments), Resend (email), Vercel and Cloudflare (hosting and delivery), and configured AI and integration providers. Information shared depends on the feature and providers in use.
• Professional advisors (lawyers, accountants) under confidentiality
• Legal compliance if required by law, court order, or to protect our rights, users, or the public
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice to you

4. Data Retention

We keep your information for as long as your account is active, as needed to provide the Services, or as required by law (typically up to 7 years for financial records). When information is no longer needed, we delete or anonymize it.

5. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information ("right to erasure")
• Export your information in a portable format
• Object to or restrict certain processing
• Opt out of marketing communications

To exercise any of these rights, email info@attractbrands.com. We respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and to opt out of any sale of personal information. We do not sell personal information.

EU/UK residents have rights under GDPR/UK GDPR. The legal bases on which we rely are: performance of a contract, your consent, legitimate interests, and legal obligations.

6. Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest where supported, access controls, and regular reviews. No system is completely secure — if we learn of a breach affecting your data, we will notify you in line with applicable law.

7. Children

The Services are not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe we have collected such information, contact info@attractbrands.com and we will delete it.

8. International Users

We are based in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. By using the Services, you consent to that transfer.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this page with a new "Effective date" and, where appropriate, by direct notice to you.

10. Contact

Questions about this policy or your data:

Attract Brands LLC Email: info@attractbrands.com Las Vegas, Nevada, United States