Privacy Policy

Last updated: February 6, 2026

NapkinLands ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, application, and services (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Information You Provide

We collect information that you provide directly to us, including:

  • Account information: name, email address, and password when you register
  • Profile information: avatar, display name, and preferences
  • Payment information: billing details processed through our third-party payment provider (we do not store full payment card details)
  • Content: text prompts, website content, uploaded files, and brand assets you provide when using the Service
  • Communications: messages you send to us for support or feedback

Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

  • Usage data: pages visited, features used, actions taken, and time spent on the Service
  • Device information: browser type, operating system, device type, and screen resolution
  • Network information: IP address, approximate geographic location, and referring URL
  • Cookies and similar technologies: session cookies for authentication and preferences (see Section 5)

Analytics Data from Your Websites

When visitors access websites you create through the Service, we collect analytics data on your behalf, including page views, visitor counts, geographic data, referrer information, and technology breakdowns. This data is associated with your account and is accessible through your analytics dashboard.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process AI-powered website generation based on your prompts and assets
  • Host and serve the websites you create
  • Provide analytics about your website visitors
  • Process subscriptions and payments
  • Send you important service updates and notifications
  • Respond to your support requests and communications
  • Detect, prevent, and address fraud, abuse, and security issues
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Service providers: We share data with third-party providers who help us operate the Service, including cloud hosting (server infrastructure), email delivery (Postmark), AI processing (Anthropic/Claude, Google/Gemini), and payment processing
  • Team members: If you use workspace collaboration features, your workspace members can see shared content and workspace-level information
  • Legal requirements: We may disclose information if required by law, court order, or governmental regulation
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction

4. AI Processing

When you use the AI generation features, your prompts and uploaded brand assets are sent to third-party AI providers (currently Anthropic and Google) for processing. These providers process your data according to their respective privacy policies and data processing agreements. We do not use your prompts or generated content to train AI models.

5. Cookies and Tracking

We use the following types of cookies and similar technologies:

  • Essential cookies: Required for authentication and core functionality. These cannot be disabled.
  • Preference cookies: Store your settings, such as theme preferences (light/dark mode).

We do not use third-party advertising or tracking cookies. The analytics we provide for your websites use server-side tracking and do not place cookies on your visitors' browsers.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained while your account is active and for a reasonable period after deletion
  • Website content: Retained while your website exists on the platform
  • Analytics data: Retained according to your subscription plan's retention period (7 days to 1 year)
  • Payment records: Retained as required by tax and accounting laws

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL)
  • Secure password hashing
  • Access controls and authentication for all systems
  • Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at platform@napkinlands.com. We will respond within 30 days.

9. International Data Transfers

Your information may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international data transfers.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected personal data from a child, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: