Last updated October 24, 2026
Privacy Policy
website10x is a website builder for small businesses. Businesses use it to build and host their websites with the help of AI, collect form answers in an Inbox, and, if they choose, have an AI assistant answer their website chat, phone calls, and text messages. This policy explains what information website10x handles, why, who we share it with, and the choices people have. website10x is based in Canada.
1. Who this covers, and our role
- Businesses using website10x and their team members. website10x is responsible for this information.
- Visitors and customers of those businesses: people who visit a website built with website10x, fill in its forms, chat with it, or call or text the business's website10x number. website10x handles this information on behalf of that business, following its settings. The business decides how it's used and is responsible for its own privacy practices, so questions about it are best directed to the business first.
- Visitors to website10x.com.
2. Information we collect
Businesses and team members
- Account details: name, email address, and password (stored only as a secure hash).
- Workspace details: team members, their roles, and invitations.
- Business and website content: business details (such as name, address, phone, and hours), pages, text, photos, collections, settings, domains, and the requests made to the AI.
- Billing: plan, subscription, and invoice records. Card details are collected and stored by Stripe, not by website10x.
- Usage, such as AI credits, chat replies, call minutes, and text replies, used for billing and plan limits.
Visitors and customers of businesses
- Form answers: whatever a business's form asks for, often a name, email, phone number, and message.
- Website chats: the conversation, including replies written by the AI, and any details the person gives. A chat is anonymous unless the person shares their details.
- Calls: phone numbers, times, and duration; recordings, transcripts, and summaries of calls answered by the AI assistant; and voicemail recordings. Callers are told at the start of the call that they're speaking with an AI and that the call may be recorded.
- Text messages to and from the business's website10x number, including replies written by the AI.
- Consent records: whether and when someone agreed to receive texts, and opt-outs such as replying STOP.
- Contacts: the business's record of each person, matched by email or phone, with their forms, chats, calls, and texts.
- Technical information used to protect forms and chats from spam and abuse, such as IP address and browser type.
Visitors to website10x.com
- Standard server logs from our hosting providers, such as IP address, browser type, and pages requested, used for security and reliability.
- If you email us, your email and what you write, used only to reply to you.
3. Cookies and similar technologies
- The website10x app uses cookies to keep team members signed in. It doesn't use advertising cookies.
- website10x.com doesn't use analytics or advertising cookies unless you accept them. If we add analytics or advertising measurement in the future, a banner will ask first, nothing will load until you accept, and you can change your choice at any time from "Cookie settings" in the footer.
- Websites built with website10x may keep a chat conversation in the browser so it survives a page change. A business may also add analytics or other tracking code to its site on its own domain. Those sites show a cookie banner and load nothing until the visitor accepts. The business chooses those tools and is responsible for them; website10x doesn't receive or use the information they collect.
4. How we use information
- To provide the service: build, edit, host, and publish websites; deliver form answers to the Inbox; answer chats, calls, and texts; and notify the business's team.
- To bill businesses and measure usage against plan limits.
- To provide support, keep the service secure, prevent spam, fraud, and abuse, and fix problems.
- To comply with the law.
We do not sell personal information, and we do not use the information of businesses' visitors and customers for advertising.
5. Artificial intelligence
website10x uses Anthropic's Claude models. When a business builds or edits its website, its request, its business details, and the relevant website content are sent to Anthropic to produce the change. The AI may search the web for general facts and ideas, and search a stock photo library, using search words, not personal information.
When the assistant answers a chat, call, or text, the conversation and the business's published website content (such as services, prices, hours, and policies) are sent to Anthropic to generate a reply. Calls are converted between speech and text by Twilio and the speech providers it works with. Under its commercial terms, Anthropic does not use this information to train its models. website10x keeps transcripts and summaries so the business can review conversations.
AI can make mistakes. Businesses can review every conversation in their Inbox and every change to their website before it's published.
6. Text messaging
Businesses use website10x to send and receive text messages with their customers. Reply STOP to stop receiving texts from a business, and HELP for help. Message and data rates may apply.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the providers that deliver the messages on our behalf.
7. Who we share information with
We share information only as needed to run the service:
- With the business a visitor or customer interacts with, which can see that information in website10x.
- With the service providers below, who process it on our behalf under contract.
- When required by law, or to protect the rights, safety, and security of people and the service.
- If website10x is involved in a merger, acquisition, or sale of assets, under commitments that protect it as described here.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database hosting | Canada |
| Fly.io | Hosting of the website10x app and the websites built with it | Canada (Toronto) |
| Anthropic | AI that builds and edits websites, and the assistant that answers chats, calls, and texts | United States |
| Twilio | Phone numbers, calls, text messages, voicemail, call recordings, and speech recognition and voice for AI calls | United States |
| Stripe | Subscription billing and payments for website10x plans | United States and other countries |
| Resend | Email delivery: account emails, team notifications, and email replies to Inbox conversations | United States |
| Cloudflare | Content delivery for websites, when used | United States and other countries |
| Google Analytics and Tag Manager on website10x.com, only if we turn them on and you accept cookies | United States and other countries |
8. Where information is stored
website10x's database is in Canada. Some of our providers, listed above, process information in the United States or other countries, where it may be accessible to authorities under local law. We rely on our providers' contractual and security commitments when information is transferred.
9. How long we keep information
We keep information for as long as the business's website10x account is open, so it can see its history. Businesses can delete conversations, contacts, and content themselves. When a business closes its account, or asks us to delete information, we delete it, except where we need to keep records for legal, tax, accounting, or security reasons.
10. Security
Information is encrypted in transit (HTTPS) and at rest by our hosting providers. Access within website10x is limited by role, passwords are stored only as secure hashes, and card details never touch website10x's servers. Websites built with website10x don't run third-party plugins or custom scripts, which removes a common source of breaches. No system is perfectly secure, and we'll notify affected businesses and people of a breach as required by law.
11. Your choices and rights
- Visitors and customers of a business can ask that business to see, correct, or delete their information, and can contact us if they need help. Reply STOP to any text to stop texts from that business.
- Businesses and team members can update their information in the app, export their website and contacts, and ask us for a copy of their information or to delete it.
- Depending on where you live, including under Canada's privacy laws, you may have rights to access, correct, or delete your information, or to withdraw consent. Contact us athello@website10x.com and we'll respond within the time the law requires.
12. Children
website10x is for businesses and is not directed to children under 16. We don't knowingly collect their information; if we learn we have, we'll delete it.
13. Changes to this policy
We'll post any changes here with a new date. If a change is significant, we'll let businesses using website10x know before it takes effect.
14. Contact us
Questions or requests about privacy: hello@website10x.com.