[Version 2026-09-27]
GLEED
- [City]Brooklyn, New York
- [Address]1650 68th Street, 2FL, Brooklyn, NY 11204
- [E-mail]hello@gleed.studio
- [Phone]+1 (646) 818-4503
This privacy policy explains how Gleed (“we”, “us”, “the studio”) collects, uses, shares and protects personal information when you visit gleed.studio, create an account, order a website or a Care plan, or use a website, chat, phone line or other service we operate for one of our clients.
Our services are for businesses. Where we handle personal information about a client’s own customers — for example an enquiry sent through a client’s website — we do so on that client’s behalf and on its instructions, as its service provider (section 7).
This policy is part of our offer (section 15). If you have a question, write to the studio address at the top of this page.
[01 · WHAT WE COLLECT]
WHAT WE COLLECT, AND WHERE IT COMES FROM
- [1.1]Account and contact information you give us: your name, business name, email address, phone number and password (which we store only as a salted cryptographic hash, never in readable form).
- [1.2]Order and brief information: your business’s address, hours, services and prices, the answers you give in our brief, your choices of design, and your messages to us in your order chat and design chat.
- [1.3]Content you upload for your site: photos, videos, logos, texts and menus. Photos may show people; please upload photos of people only with their permission.
- [1.4]Payment and billing records: amounts, dates, methods, invoice details and bank references. We do not receive or store full card numbers; when card payments are enabled, cards are handled by the payment processor.
- [1.5]Information from visitors to our clients’ sites, on our clients’ behalf: what a visitor types into an enquiry or booking form (for example name, email, phone number and message), conversations with a client’s AI chat assistant, and — where a Care plan includes a phone manager — the caller’s phone number, the call and its transcript or summary.
- [1.6]Information from visitors to gleed.studio: questions typed into our pricing assistant, and the audio of a voice demo you choose to start, which is processed live and of which only the assistant’s side is kept as text.
- [1.7]Technical information collected automatically: IP address, browser and device type, pages requested and times, in our hosting provider’s security logs and in the counters that protect our forms from abuse. We do not use advertising or analytics cookies, pixels or trackers on gleed.studio.
[02 · HOW WE USE IT]
WHY WE USE IT
- [2.1]To provide our services: to build, host and operate your website and Care plan, to deliver your site’s enquiries and messages to you, to let the AI assistant answer on your behalf where your plan includes it, and to support you.
- [2.2]To run our business: to open and secure your account, send you your preview, invoices and service messages, keep our books, and meet our legal, tax and accounting obligations.
- [2.3]To keep our services safe: to prevent and detect fraud, spam, abuse and security incidents, and to enforce our offer.
- [2.4]To improve our services, using information about how our services are used; we do not use your or your customers’ content to train AI models of our own, and the AI providers we use are engaged under terms that do not permit them to train their models on it.
- [2.5]To send you marketing about our own services, only if you agreed to it; you can unsubscribe at any time.
[03 · SHARING & SERVICE PROVIDERS]
WHO HELPS US, AND WHO SEES WHAT
- [3.1]WE DO NOT SELL PERSONAL INFORMATION, AND WE DO NOT SHARE IT FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.
- [3.2]We share personal information with service providers that process it on our instructions and under contract, only as needed for the service they provide: Cloudflare (hosting, database, file storage, security, bot protection and email routing); Resend (email delivery); Anthropic and OpenAI (AI tools our team uses for text, chat and voice); fal (AI tools our team uses to prepare and edit images and video for your site); Google (maps, and Google Business Profile where you give us access); Square and Stripe (payments, when card payments are enabled); Twilio and SignalWire (telephone calls and text messages for Care plans); Ayrshare (publishing to social media for Care Max); Telegram (internal notices to our team); and the provider of our build server in the United States.
- [3.3]Within the studio, only the people who work on your order, and the studio’s owners, can see your order’s details. Notices to our team about enquiries from your site do not contain your customers’ personal information.
- [3.4]We also share information when the law requires it or to respond to lawful requests from public authorities; to protect our rights, property or safety, or those of our clients or others; and in connection with a merger, sale or reorganization of our business, in which case this policy continues to apply to the information transferred.
[04 · COOKIES & SIMILAR TECHNOLOGIES]
ONE COOKIE, TO KEEP YOU SIGNED IN
- [4.1]gleed.studio sets one cookie, which keeps you signed in to your account. It is strictly necessary for the service and is not used for tracking or advertising. Your browser may also store an unsent brief or a draft on your device until you send it.
- [4.2]Some forms and the voice demo use Cloudflare Turnstile to tell people from bots; Cloudflare processes technical information about your browser for that check. Websites we build for our clients may show maps, booking or payment tools from other companies, which may set their own cookies under their own policies.
- [4.3]Because we do not track you across sites, we treat a Global Privacy Control signal as a request not to sell or share, which we already honor for everyone.
[05 · HOW LONG WE KEEP IT]
HOW LONG WE KEEP IT
- [5.1]Account, order and brief information: while you have an account with us, and for up to 3 years after our last order or plan with you ends, to support you and resolve any dispute.
- [5.2]Invoices, payments and other financial records: 7 years, as tax and accounting law requires.
- [5.3]Content for your site: while we host or support your site, and afterwards until you or we delete it; your archive stays available to you on request.
- [5.4]Enquiries and messages from visitors to a client’s site: 24 months, unless the client deletes them sooner or instructs us otherwise. AI assistant and phone transcripts for a client: 90 days.
- [5.5]Questions to our pricing assistant and the text of a voice demo: 30 days. Abuse-prevention counters that use IP addresses: minutes to hours. Security logs: as long as our hosting provider keeps them, which is short.
- [5.6]When a retention period ends we delete the information or make it anonymous, except where the law requires us to keep it longer or it is needed for a legal claim.
[06 · YOUR RIGHTS & CHOICES]
SEE, CORRECT OR DELETE YOUR DATA
- [6.1]You can ask us to tell you what personal information we hold about you and to give you a copy of it; to correct it; or to delete it. You can also change your account details yourself in your account. We answer within 30 days, or tell you within that time if we need longer as the law allows.
- [6.2]To protect you, we verify a request before acting on it, usually by confirming it from the email address on your account. You may use an authorized agent if you give them written permission and we can verify it.
- [6.3]Residents of California and other US states with consumer privacy laws have these rights to the extent those laws apply to us, including the right to know, to delete, to correct and to opt out of the sale or sharing of personal information — which we do not do — and the right not to be discriminated against for exercising them.
- [6.4]We keep what the law requires us to keep, such as invoices, even after a deletion request, and we tell you what we kept and why.
- [6.5]If you are a customer of one of our clients and want to see, correct or delete an enquiry, message or call record, contact that business; you may also contact us, and we will pass your request to the business and act on its instructions.
[07 · OUR CLIENTS’ CUSTOMERS]
WHEN WE ACT FOR A BUSINESS
- [7.1]When a website, assistant or phone line we operate for a client collects information about that client’s customers, the client decides why and how it is used, and we process it only to provide our services to the client, under the confidentiality and security obligations in our offer.
- [7.2]Messages and calls our services send to a client’s customers — reminders, confirmations, review requests, newsletters — are sent on the client’s behalf, and the client is responsible for having the consent the law requires. Every marketing text lets you reply STOP, and every marketing email has an unsubscribe link; we honor these automatically.
- [7.3]A client may add Google Analytics or a Meta Pixel to the live website we host for them, with their own account IDs. Those tags then run on the client’s pages and send page-view data to Google or Meta under the client’s account; the client is responsible for disclosing them in their own privacy notice and for any consent the law requires. We never add them to previews or to a clinic’s site, and we do not load them when your browser sends a Global Privacy Control signal. gleed.studio itself uses no advertising or analytics tags.
- [7.4]On the live websites we host, we count page views for the client without cookies or scripts: your IP address and browser are turned into a pseudonym that exists for one day and is then deleted, and we keep only the daily counts.
[08 · SECURITY]
HOW WE PROTECT IT
- [8.1]We maintain reasonable administrative, technical and physical safeguards designed to protect personal information, as the New York SHIELD Act requires — including encryption in transit, hashed passwords, access limited by role and protected by a second staff code, logging of who reads sensitive records, an append-only record of changes to money, and review of our service providers.
- [8.2]No system is perfectly secure. If a breach of the security of your personal information occurs, we will notify you and any authority as the law requires, including under New York General Business Law §899-aa, without unreasonable delay.
[09 · CHILDREN & LOCATION]
FOR BUSINESSES, IN THE UNITED STATES
- [9.1]Our services are for businesses and are not directed to children under 16. We do not knowingly collect their personal information; if you believe we have, contact us and we will delete it.
- [9.2]We are based in New York and store and process information in the United States and, through our service providers, in other countries where they operate, with appropriate safeguards.
[10 · CHANGES & CONTACT]
CHANGES, AND HOW TO REACH US
- [10.1]We may change this policy. A new version has a new date at the top; if a change materially affects how we use personal information we already hold, we tell account holders by email before it takes effect.
- [10.2]Questions, requests and complaints go to the studio address at the top of this page, or to your order chat.
[THE OFFER]