Privacy Policy

Positivity Tools ("we," "us," or "our") respects your privacy. This policy explains what information we collect, how we use it, and your rights.

Data controller. TFT Group LLC, a Florida limited liability company, operating under the registered fictitious name "Positivity Tools" (collectively, "Positivity Tools," "we," "us," or "our"), is the data controller responsible for personal information collected through positivitytools.com, weddings.positivitytools.com, and related Positivity Tools-branded surfaces.

How to contact us about your data:

• Email: privacy@positivitytools.com
• Postal mail: Positivity Tools, 453 S Spring Street Ste 400, PMB 1534, Los Angeles, CA 90013

1. Information We Collect

1.1 Information You Provide

• Account information — name, email address, and password when you create an account
• Onboarding information — business name, website URL, industry, design preferences, and other project details you submit
• Payment information — processed securely by Stripe. We do not store your credit card number, CVV, or full card details on our servers.
• Communications — emails, messages, and support requests you send us

1.2 Information Collected Automatically

• Usage data — pages visited, time spent, clicks, and interactions on our website
• Device data — browser type, operating system, screen resolution, and IP address
• Cookies — we use essential cookies for site functionality, analytics cookies to understand how visitors use our site, and advertising cookies (including the Google Ads tag) to measure the performance of our marketing campaigns
• Advertising measurement — when you complete a purchase, our Google Ads conversion tag (AW-18099835079) fires with a hashed version of your email address so we can measure which marketing campaigns drive sales. Only a cryptographic hash is transmitted to Google; your email is never sent in plaintext.

2. How We Use Your Information

• To deliver the services you purchased (web redesign, themes, membership)
• To communicate with you about your project or account
• To process payments through Stripe
• To improve our website and services
• To send service-related updates (not marketing, unless you opt in)
• To comply with legal obligations

3. We Do Not Sell Your Data

We will never sell, rent, or trade your personal information to third parties. Period.

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing (stripe.com/privacy)
• Vercel — website hosting
• Supabase — database and authentication
• Google Workspace — email communications
• Google Ads — advertising campaign delivery and conversion measurement via the Google Ads tag and, where approved, the Google Ads API used to manage our own owned advertising accounts. Google's handling of this data is governed by Google's privacy policy at policies.google.com/privacy.
• Resend — transactional email delivery
• Anthropic — the AI model behind our AI Tools (see section 4A)
• Cloudflare — Turnstile bot protection on the website chat

Each service has its own privacy policy governing their use of your data.

4A. AI Tools: Front Desk website chat, Search Booster and Growth

This section covers our AI Tools. It applies to the businesses that subscribe to them and to the people who chat with those businesses through our website chat ("visitors").

Who is responsible for chat data

When a visitor chats with a business through Front Desk, that business is the controller of the conversation and decides what it is used for. Positivity Tools is the processor (or "service provider"): we store and process chat data only to run the service for that business, on its instructions and under these terms. We do not sell chat data, use it for our own marketing, or share it with other businesses. Visitors who want to access, correct or delete their information should contact the business they chatted with; we help businesses answer those requests, and visitors can also write to privacy@positivitytools.com. For the business's own account and billing information, Positivity Tools is the controller.

What the chat processes

• Messages visitors type and the assistant's replies, and any replies the business sends from its inbox.
• Contact details a visitor chooses to give (name, phone number, email) and a short note of what they asked for, when they ask to be contacted or to speak with a person.
• Abuse protection data: a salted, one-way hash of the visitor's IP address (stored per business, so it can't be used to follow a visitor from one business to another), the website the chat was opened on, and a random visitor identifier kept in the chat window's own storage. The chat does not set cookies on the business's website.

Visitors should not share medical, health or payment details in the chat. The chat shows this notice, and assistants for med spas and dental offices are set up to refuse health details. Our AI Tools are not HIPAA compliant and we do not sign business associate agreements, so they must not be used to collect protected health information.

How long chat data is kept

• Conversations are deleted automatically after the business's retention period: 90 days by default, which the business can set anywhere from 30 to 365 days. Contact details in requests to speak with a person are cleared on the same schedule.
• Leads (contact details a visitor left so the business can call or email them back) are kept until the business deletes them. Businesses can delete one lead or all of them at any time.
• Businesses can export all chat data and delete all transcripts at any time from their settings.
• When a business cancels, all of its data, leads included, is deleted 30 days after cancellation. Records we must keep for tax and accounting (such as invoices) are kept as the law requires; they contain no chat data.

AI processing

Chat replies, the evening summary and website imports are generated by Anthropic's Claude models through the Anthropic API. Anthropic processes this data to return a response and, under its commercial terms, does not train its models on API data by default. Search Booster asks ChatGPT (OpenAI), Gemini (Google) and Perplexity questions about the subscribing business's category and city; those questions contain only the business's public details, never visitor messages.

Sub-processors for the AI Tools

• Supabase — database and sign-in (chat data is stored here)
• Vercel — hosting for the website, the chat and our servers
• Anthropic — AI model that writes chat replies, summaries and Search Booster pages
• Resend — email delivery (lead alerts, daily summaries, reports, sign-in links)
• Cloudflare — Turnstile bot protection when a chat starts
• Stripe — subscription payments (business customers only)
• Firecrawl — reads a business's own public website when the owner uses "Import from my website"
• OpenAI, Google and Perplexity — Search Booster visibility checks (business details only)

If we add Instagram and Facebook messaging, Meta will be added to this list before it is switched on. We will update this list before adding a new sub-processor that handles chat data.

5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records). AI Tools chat data follows the retention rules in section 4A.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Export your data in a portable format

To exercise any of these rights, email mark@positivitytools.com.

7. Cookies and Tracking

We use three categories of cookies and similar tracking technologies:

• Essential cookies — required for site functionality (authentication, preferences)
• Analytics cookies — help us understand how visitors use our site (anonymized)
• Advertising cookies — set by Google Ads (via gtag.js with tag AW-18099835079) to measure the effectiveness of our advertising campaigns and to build remarketing audiences from visitors to our site. These cookies do not contain personally identifiable information on their own; they contain a pseudonymous identifier that Google correlates with its own signed-in user data on its systems.

You can disable cookies in your browser settings, but some features may not function properly. You can also opt out of personalized advertising across the Google ecosystem at adssettings.google.com.

8. Advertising, Analytics, and the Google Ads API

Positivity Tools runs advertising campaigns on Google Ads to reach prospective customers. To measure which campaigns drive sales, we use:

• Google Ads conversion tracking — the gtag.js script on our site fires a conversion event when you reach our post-purchase /welcome page. This event carries a Stripe transaction identifier and a cryptographic hash of your email address so Google can match conversions without receiving your email in plaintext.
• Google Ads API — we are developing an internal tool that uses the Google Ads API to manage our own owned advertising accounts more efficiently (reporting, keyword planning, and campaign management). This tool does NOT process Google Ads user data on behalf of any third party, does not expose Google Ads data to any external user, and is used only by Positivity Tools staff. See our Advertising Disclosures page for a full description of the tool and its data flow.
• No sale of user data to advertisers — we do not sell, rent, or transfer the personal data described in this policy to third-party advertising networks for purposes unrelated to our own marketing measurement.

If you have questions about how we use advertising data or want to request removal of your hashed conversion record, contact dave@positivitytools.com.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact

For privacy questions or concerns, contact us at mark@positivitytools.com. For advertising and Google Ads data questions specifically, contact dave@positivitytools.com.