Privacy Policy

DeGenito Innovations, LLC ("we," "us," or "our") operates the website at degenito.ai and provides AI-powered organic growth services including website development, SEO content generation, and AI search optimization. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Information You Provide Directly

We collect personal information through the following forms and interactions:

• Contact form: First name, last name, email address, phone number, platform, budget, and message.
• Partner application: Name, email, agency name, website URL, number of clients, and message.
• Newsletter signup: Email address and name.
• Client onboarding (34 fields): Business name, services offered, logo, photos, owner details (name, title, photo, bio), Google Business Profile, social media links, hours of operation, service areas, tagline, mission statement, unique selling propositions, testimonials, FAQ entries, and additional business identifiers needed to build and optimize your website.

Information Collected Automatically

• IP address and device/browser information: Collected automatically when you visit our site.
• Cloudflare Web Analytics: We use Cloudflare's privacy-first analytics, which does not use cookies and does not collect personally identifiable information. Aggregate traffic data only.

Payment Information

All payments are processed by Stripe. We do not collect, store, or have access to your credit card numbers or other payment details. Stripe handles all payment processing securely. See Stripe's Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

• Build, maintain, and optimize your website
• Generate SEO content targeting your keywords
• Optimize your visibility on Google and AI search platforms
• Send performance reports and service communications
• Respond to inquiries and support requests
• Process payments via Stripe
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your business data to train AI models. Your content and data are yours.

3. Sub-Processors

We share data with the following sub-processors to deliver our services:

Sub-processor	Purpose	Data Shared
Stripe	Payment processing	Billing information (no CC storage by us)
Cloudflare Pages / Workers / KV	Hosting, CDN, and edge storage	All site data and form submissions
Anthropic Claude API	AI content generation	Content topics and keywords only — Anthropic does not train on customer data
Resend	Transactional email delivery	Email address and message content
Google APIs (PageSpeed, Search Console, Indexing, Ads)	Performance analysis and search rankings	Site URL and public performance data
IndexNow	Search engine URL submission	Site URL only
image.thum.io	Website screenshot generation	Site URL only
api.qrserver.com	QR code generation	URL to encode only
rdap.org	Domain WHOIS lookup	Domain name only

4. Data Retention

We retain your data according to the following schedule:

• Onboarding files (images, logos, photos): 90-day TTL in edge storage.
• Onboarding records: 180-day TTL.
• Google Search Console history: 30 days.
• Audit data: 90 days.
• Lead submissions (contact forms): 90 days.
• Client schemas, articles, and keywords: Purged immediately upon cancellation.

5. Your Rights — GDPR (EEA and UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, email legal@degenito.ai. We will respond within 30 days.

6. Your Rights — CCPA/CPRA (California Residents)

California residents have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Request disclosure of what personal information we collect, use, and disclose.
• Right to Delete: Request deletion of personal information we hold about you.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt out of the sale or sharing of personal information. We do not sell or share personal information. See our Do Not Sell or Share My Personal Information page.

To exercise any of these rights, email legal@degenito.ai with the subject line "CCPA Request." We will respond within 30 days.

7. International Data Transfers

Our services are primarily operated in the United States. If you are located outside the United States, your personal information may be transferred to and processed in the United States. Where required by applicable law (including GDPR), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to provide appropriate safeguards for international transfers.

8. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, contact us at legal@degenito.ai and we will delete it promptly.

9. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• Cloudflare's global CDN with DDoS protection and edge security
• No payment card data stored — all handled by Stripe
• Access controls limiting data access to authorized personnel only

10. Contact

Questions about this Privacy Policy or to submit a data request, contact us at:

• Email: legal@degenito.ai
• Mail: DeGenito Innovations, LLC, 30 N Gould St., Ste R, Sheridan, WY 82801
• Phone: (561) 600-0399

We will respond to all data requests within 30 days. We may update this Privacy Policy from time to time. We will notify active subscribers of material changes by email and update the "Last updated" date at the top of this page.