Skip to content
2oozy

2oozy policies

Privacy Policy

Version 2026-10-20 · in effect since October 19, 2026

This Privacy Policy explains how 2oozy collects, uses, shares and protects personal information when you use 2oozy.com, app.2oozy.com, the website builder at the build page, customer accounts and dashboards, and the websites we host for our customers. "We" and "us" mean Airmecanx LLC, which provides the 2oozy service, as described in the Terms of Service; where this policy says that 2oozy does something, we do it.

1. Scope

This policy covers:

  • people who visit 2oozy.com or app.2oozy.com;
  • people who use the build page to create a private website preview;
  • our customers and the people who sign in to their accounts;
  • visitors to customer websites, to the limited extent described in Section 10.

Demonstration websites that 2oozy operates to show what the service can do use fictional or authorized content and are not customer websites; where one has a working form, its own notice explains how that information is used.

2. Information we collect

Information you give us when you build a website. The answers you give about a business, such as its name, what it does, its services and customers, where it works, its public contact details, hours, photos and anything else you add. If you send them, your change requests and an email address so we can follow up with you.

Account information. Your email address, which you use to sign in with a one-time code, and, if you set one, a password, which is stored only in hashed form by our sign-in provider. Your name and role (for example Owner, Manager or Authorized representative) when you approve a website for publication or turn on one-tap publishing.

Website and approval records. Every version of your website, the business claims you confirmed, the attestation you gave and when, and your change requests.

Payment information. Payments are handled by Stripe. We receive and store your plan, its status and dates, payment events such as renewals, failures, refunds and disputes, and Stripe's references for your customer record and subscription. We do not receive or store your full card number.

Communications. Messages you send to support and our replies.

Usage, log and security data. Like most online services, our servers and providers record technical information when you use the service, such as IP address, browser type, the pages requested, and the date and time. We keep a record of important actions on accounts for security and accountability. For rate limiting, we use a scrambled identifier derived from your connection, not the address itself, and delete it after a short window.

Bot-protection signals. Before we build a website from the build page, we use Cloudflare Turnstile to tell a person from an automated program. Cloudflare's widget runs in your browser and collects device and browser signals for that purpose. Our server sends Cloudflare the check result, our key and your IP address to confirm it.

Page-view counts on hosted websites. We count page views and button clicks on websites we host, without cookies. We store the website, the page, the event type, a general referrer category and the hour. We do not store IP addresses, browser identifiers or visitor identifiers for this purpose.

Cookies and similar technologies. We use only cookies that are strictly necessary for sign-in, the private preview and security. We do not use advertising or cross-site tracking cookies. See the Cookie and Tracking Disclosure.

We do not ask for sensitive personal information. Please do not include health, financial account, password or other sensitive information in your answers, change requests or messages.

3. How we use information

We use personal information to:

  • build, preview, revise, publish and host websites;
  • verify your email address, sign you in and confirm that you may act for a business;
  • take payments and manage subscriptions;
  • deliver visitor inquiries to our customers;
  • send transactional messages, such as sign-in codes, inquiry notifications and notices about your account, website and billing;
  • follow up about a website you asked us to build, using the contact details you gave us;
  • provide support and respond to requests;
  • protect the service, prevent fraud and abuse, and keep it secure;
  • keep records of what we published, what was approved and what was paid;
  • comply with the law and enforce our terms; and
  • understand and improve how the service works, using aggregated or de-identified information where we can.

We do not send marketing email without your separate consent.

4. AI processing

We use artificial intelligence to plan, write, revise and check websites. To do this, we send business information, your answers and change requests, and website text to our AI provider, Anthropic, through its commercial API. Anthropic processes this information to provide the service to us, under its commercial terms for API customers.

2oozy does not use your content to train AI models, and 2oozy does not sell your content. How Anthropic handles information it receives through its API is governed by Anthropic's commercial terms and policies.

5. How we share information

We share personal information only as described here.

Service providers (subprocessors). We use these providers to run 2oozy. Each processes information on our behalf to provide its service.

ProviderPurpose
AnthropicAI generation, revision and review of website content
VercelApplication and website hosting
SupabaseDatabase, sign-in and storage
StripePayments, subscriptions, receipts and the billing page
ResendEmail delivery, including sign-in codes and notifications
Cloudflare (Turnstile)Bot protection on the build page
Namecheap (Private Email)Our support and copyright mailboxes, which receive the messages you send us

With the business you represent. If you sign in to an account for a business, other authorized users of that business's account may see the website and related information.

Legal and safety reasons. We may disclose information if we believe in good faith that the law or legal process requires it, or to protect the rights, property or safety of 2oozy, our customers or others, including to investigate fraud or abuse.

Business transfers. If 2oozy is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy.

With your consent. We may share information when you ask us to or agree to it.

6. No sale of personal information

We do not sell personal information, and we do not sell sensitive personal data. We do not share personal information for cross-context behavioral advertising. We do not operate a lead marketplace: we do not sell, rent, auction or distribute the inquiries that visitors send to our customers' websites, and we do not use them for our own purposes.

7. Retention

We keep personal information for the purposes in this policy. Some information is removed automatically: for example, unclaimed previews expire 30 days after the last activity, and their answers, change requests and email address are deleted. Visitor inquiries lose the visitor's personal details when the customer's account is closed. Other information, such as account records, website content, billing records and security logs, is kept and not removed automatically; you can ask us to delete it, and we delete what we are not required to keep. The full schedule is in our Data Retention and Deletion Policy.

8. Security

We use administrative, technical and physical safeguards designed to protect personal information. These include encrypted connections, multi-factor authentication and role-based access for staff, sign-in by one-time code or password with limits on attempts, limited staff access, audit records of sensitive actions, and keeping card details with Stripe. No system is completely secure, and we cannot guarantee the security of information.

9. If there is a data breach

If we discover a breach of security affecting your personal information, we will investigate, take steps to contain it, and notify you and any regulators as required by law, including Florida's data security law. Where we hold information on behalf of a customer, we will notify that customer as described in the Customer Data Processing Terms.

10. Customer websites and visitor inquiries

The businesses that own the customer websites we host decide how to use the inquiries their visitors send. For those inquiries:

  • the business that owns the website is responsible for its own privacy practices and for any privacy notice its website needs;
  • 2oozy processes the inquiries on that business's behalf, to deliver them, store them for the business and protect the forms from abuse, as described in the Customer Data Processing Terms;
  • if you sent an inquiry through a customer website and have a question about it, please contact that business. If you contact us, we will forward your request to the business or help it respond.

Hosted customer websites do not set cookies for their visitors, other than for a business owner viewing a private preview.

11. Your choices and requests

You can:

  • ask us for access to, a copy of, correction of, or deletion of your personal information;
  • ask us to close your account, as described in the Data Retention and Deletion Policy;
  • choose not to receive marketing email, if we ever send it, using the unsubscribe link.

To make a request, email support@2oozy.com from the email address on your account. We will verify your identity, usually through that email address, and we will respond within 30 days. Some information we must keep, for example billing records and records of approvals, as explained in the Retention Policy. Depending on where you live, you may have additional rights under local law; we will honor them where they apply.

12. Do Not Track

Some browsers send a "Do Not Track" signal. There is no common standard for responding to it. 2oozy does not track you across other websites and does not allow third parties to do so through the services this policy covers, so our practices are the same whether or not your browser sends that signal.

13. Children

2oozy is a service for businesses. It is not directed to anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

14. Users outside the United States

2oozy is operated from the United States and is intended for businesses in the United States. We and our providers store and process information primarily in the United States. If you use 2oozy from another country, your information will be transferred to and processed in the United States.

15. Changes to this policy

We may update this policy. If we make a material change, we will notify customers in advance by email and in the dashboard, as described in Policy Updates and Change Notification. We will not use personal information we already collected in a materially different way without your consent. Every version of this policy is kept and available.

16. Contact

Airmecanx LLC (mailing address: 2637 E Atlantic Blvd. #1307, Pompano Beach, FL 33062)

Email: support@2oozy.com

Version history

  • Version 2026-10-20 — effective October 19, 2026 (in force): Explains password sign-in (an optional password, stored only in hashed form by our sign-in provider), the name and role recorded when you turn on one-tap publishing, and that sign-in uses limits on attempts.
  • Version 2026-10-15 — effective October 15, 2026: First published version.