Overview

This policy explains what information Tilazo collects, how we use it, and the choices and rights you have. It covers our customers (business owners) and visitors to sites we host.

Information we collect

• Account information you provide — name, business details, email, and phone.
• Site content you ask us to publish — services, hours, photos, and copy.
• Leads and messages submitted through your site’s forms, bookings, or concierge.
• Visitor analytics — first-party, cookieless measurement of visits, sources, and on-site actions. We do not use third-party ad-tracking cookies.
• Payment information — processed by Stripe; we do not store full card numbers.

How we use information

To build, host, and maintain your site; to deliver the features on your plan; to route leads to you; to measure and improve performance; to provide support; and to comply with legal obligations.

Legal basis and consent

We process information to perform our contract with you, for legitimate business interests, and with consent where required. Durable visitor identification and multi-touch attribution are used only where a visitor has given consent through the on-site consent banner; a visitor can decline or withdraw at any time.

Cookies and tracking

Our analytics are first-party and cookieless. Where features require storage that needs consent (for example, durable visitor identity), we ask for it through the consent banner and honor the choice.

Sharing and subprocessors

We do not sell personal information. We share it only with service providers that help us run the Service, under contract, including categories such as: payment processing (Stripe), hosting and infrastructure, email delivery, Google Business Profile and search features, and AI providers that power drafting and the concierge. A current subprocessor list is available on request.

AI features

On eligible plans, the AI concierge processes visitor messages to answer questions from the business’s own information and to capture leads with consent. AI providers process this data on our behalf under contract and do not use it to train their models except as permitted by our agreements. We disclose AI use and keep a human in the loop for published marketing content.

Data retention

We keep information for as long as needed to provide the Service and to meet legal, accounting, or reporting requirements, then delete or anonymize it.

Your rights

Subject to applicable law, you may request to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Site visitors may withdraw consent for durable identification at any time. To make a request, email [email protected]; we will verify and respond within the timeframe the law requires.

Children’s privacy

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children.

Security and breach notification

We use reasonable technical and organizational measures to protect information. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify affected parties and regulators as required by law.

International transfers

Information may be processed in countries other than yours. Where required, we use appropriate safeguards for such transfers.

Changes to this policy

We may update this policy and will post the updated version here with a new “last updated” date.

Contact

Questions or privacy requests? Email [email protected].