Privacy Policy.

Pylon Solutions Group ("PSG", "we", "us") is a founder-led web design studio based in Denver, Colorado. This policy covers psg.dev, our account and website-builder application, and the customer websites we generate and host. By using our services you agree to this policy.

1Information we collect

Information you give us

• Account details — your email address and, optionally, your business name. We use passwordless sign-in, so we never collect or store a password.
• Project content — answers you provide in our intake and audit flows, and any files you upload (logos, images) or text you submit to build or refine your site.
• Communications — messages you send us (e.g. support email).

Information we collect automatically

• Authentication — one-time sign-in tokens (stored hashed) and a single essential session cookie (psg_session) that keeps you signed in.
• Product analytics — how our app and pages are used (pages viewed, features used, approximate location and device derived from your IP address, and an automated bot-likelihood score). We use this to run and improve the service, not to build advertising profiles.
• Payment status — for paid plans, we store your subscription state and related metadata. Card numbers are handled by our payment processor; we never see or store your full card details.

Visitors to the sites we host

When we host a website for a customer, we process basic analytics and any information a visitor submits through that site's forms (for example, a contact request), so the site owner can respond. The site owner is responsible for how they use that information.

2How we use information

• To provide, operate, and secure our services — creating your account, generating and hosting your site, processing edits.
• To process payments and manage subscriptions.
• To communicate with you about your account, builds, and support requests.
• To improve our services, including learning aggregate, de-identified patterns across many sites to make the product better. Taste and design judgments remain ours; your private content is not exposed to other customers.
• To detect abuse and fraud, and to comply with legal obligations.

3AI processing

We use AI models to generate and refine websites. Content you provide for a build (intake answers, uploads, edit instructions) is processed by our AI provider to produce your site. This processing is to deliver the service to you; your content is not sold, and is not used to train third-party foundation models beyond what is necessary to return your result under our providers' terms.

4Cookies

We keep cookies to a minimum and use them for function, not advertising:

• psg_session — an essential session cookie that keeps you signed in to our app.
• psg_vid — on the customer websites we host, a functional cookie (lasting up to one year) that keeps a visitor's experience consistent when the site owner is running an A/B design test. It is a random identifier and is not used for advertising or cross-site tracking.

We also use first-party product analytics to understand and improve the service. We do not currently use third-party advertising or cross-site tracking cookies. If we introduce advertising features in the future, we will update this policy, honor recognized opt-out signals (including Global Privacy Control), and provide clear controls before any such tracking runs.

5Who we share information with

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, to run the service:

Provider	Purpose
Cloudflare	Hosting, storage (databases and files), content delivery, security
Anthropic	AI generation of site content
Stripe	Payment processing
Resend	Transactional and notification email
PostHog	Product analytics

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the public.

6Data retention

We keep account and project information for as long as your account is active or as needed to provide the service. Sign-in tokens expire quickly. We retain billing records as required by law. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is legally required. See Data deletion.

7Security

We protect your information with passwordless authentication, hashed sign-in tokens, secure (HttpOnly) session cookies, and encryption in transit. No system is perfectly secure, but we work to safeguard your data and limit access to it.

8Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any of these, email [email protected] or see Data deletion.

US state privacy rights (including California): you may request access to or deletion of your personal information, and you may opt out of any "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell or share personal information in this way; we also honor Global Privacy Control signals. We will not discriminate against you for exercising your rights.

9Children

Our services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18.

10International users

We are based in the United States and our providers operate globally. By using our services, you understand your information may be processed in the United States and other countries.

11Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for material changes, provide a more prominent notice.

12Contact

Questions or requests: [email protected], Pylon Solutions Group, Denver, Colorado, USA.