Privacy Policy

Positivity Tools ("we," "us," or "our") respects your privacy. This policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

1.1 Information You Provide

• Account information — name, email address, and password when you create an account
• Onboarding information — business name, website URL, industry, design preferences, and other project details you submit
• Payment information — processed securely by Stripe. We do not store your credit card number, CVV, or full card details on our servers.
• Communications — emails, messages, and support requests you send us

1.2 Information Collected Automatically

• Usage data — pages visited, time spent, clicks, and interactions on our website
• Device data — browser type, operating system, screen resolution, and IP address
• Cookies — we use essential cookies for site functionality, analytics cookies to understand how visitors use our site, and advertising cookies (including the Google Ads tag) to measure the performance of our marketing campaigns
• Advertising measurement — when you complete a purchase, our Google Ads conversion tag (AW-18099835079) fires with a hashed version of your email address so we can measure which marketing campaigns drive sales. Only a cryptographic hash is transmitted to Google; your email is never sent in plaintext.

2. How We Use Your Information

• To deliver the services you purchased (web redesign, themes, membership)
• To communicate with you about your project or account
• To process payments through Stripe
• To improve our website and services
• To send service-related updates (not marketing, unless you opt in)
• To comply with legal obligations

3. We Do Not Sell Your Data

We will never sell, rent, or trade your personal information to third parties. Period.

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing (stripe.com/privacy)
• Vercel — website hosting
• Supabase — database and authentication
• Google Workspace — email communications
• Google Ads — advertising campaign delivery and conversion measurement via the Google Ads tag and, where approved, the Google Ads API used to manage our own owned advertising accounts. Google's handling of this data is governed by Google's privacy policy at policies.google.com/privacy.
• Resend — transactional email delivery

Each service has its own privacy policy governing their use of your data.

5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records).

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Export your data in a portable format

To exercise any of these rights, email mark@positivitytools.com.

7. Cookies and Tracking

We use three categories of cookies and similar tracking technologies:

• Essential cookies — required for site functionality (authentication, preferences)
• Analytics cookies — help us understand how visitors use our site (anonymized)
• Advertising cookies — set by Google Ads (via gtag.js with tag AW-18099835079) to measure the effectiveness of our advertising campaigns and to build remarketing audiences from visitors to our site. These cookies do not contain personally identifiable information on their own; they contain a pseudonymous identifier that Google correlates with its own signed-in user data on its systems.

You can disable cookies in your browser settings, but some features may not function properly. You can also opt out of personalized advertising across the Google ecosystem at adssettings.google.com.

8. Advertising, Analytics, and the Google Ads API

Positivity Tools runs advertising campaigns on Google Ads to reach prospective customers. To measure which campaigns drive sales, we use:

• Google Ads conversion tracking — the gtag.js script on our site fires a conversion event when you reach our post-purchase /welcome page. This event carries a Stripe transaction identifier and a cryptographic hash of your email address so Google can match conversions without receiving your email in plaintext.
• Google Ads API — we are developing an internal tool that uses the Google Ads API to manage our own owned advertising accounts more efficiently (reporting, keyword planning, and campaign management). This tool does NOT process Google Ads user data on behalf of any third party, does not expose Google Ads data to any external user, and is used only by Positivity Tools staff. See our Advertising Disclosures page for a full description of the tool and its data flow.
• No sale of user data to advertisers — we do not sell, rent, or transfer the personal data described in this policy to third-party advertising networks for purposes unrelated to our own marketing measurement.

If you have questions about how we use advertising data or want to request removal of your hashed conversion record, contact dave@positivitytools.com.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact

For privacy questions or concerns, contact us at mark@positivitytools.com. For advertising and Google Ads data questions specifically, contact dave@positivitytools.com.