Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains how Intoria Inc. ("Intoria", "we", "us"), which operates the Herosite service ("Herosite" or the "Service"), collects, uses, and shares personal information. This Policy applies across our domains, including herosite.com and its subdomains, and myherosite.com (where we host customer websites — see "Hosted websites" below for those). By using Herosite, you agree to this Policy. For how we use cookies and how to control them, see our Cookie Settings.

1. Who we are

Herosite is a product of Intoria Inc., based in Alberta, Canada. For any privacy question, contact privacy@herosite.com.

2. Information we collect

Information you provide: account details such as your name, email, and business information; the answers, business details, text, and images you submit during the interview; communications you send us; and the payment information you provide when you purchase (processed by Stripe, see below).

Information collected automatically: your IP address, browser and device type, approximate location (city or region), the pages you view, and how you interact with the Service, collected through cookies and similar technologies.

Generated assets: the logos, copy, images, and websites that Herosite generates for you, which we store to provide and host your site.

3. How we use your information

We use your information to: provide the Service, including generating your logo, copy, and website and hosting your site; process payments; respond to you and provide support; operate, secure, and improve the Service and our AI; communicate with you, including marketing where permitted; and comply with our legal obligations.

4. Artificial intelligence

To generate your assets, Herosite transmits your interview answers and related inputs to third-party AI providers, including Google's Gemini and Imagen services. Those providers process your inputs to return generated results, subject to their own terms and privacy practices. We store the generated results, and we may use anonymized or aggregated data to improve our products. We do not authorize the use of your personal information to train third-party AI models on an identifiable basis.

5. Cookies, analytics, and tracking

We use cookies and similar technologies, including Google Tag Manager, Google Analytics, Microsoft Clarity, and the Meta Pixel, to understand how the Service is used and to measure and deliver advertising. Microsoft Clarity may also record anonymized session replays (such as clicks and scrolls). You can control analytics and personalization, and see the full list of cookies, on our Cookie Settings page.

6. Payments

Payments are processed by Stripe. We do not collect or store your full payment card details; Stripe handles that directly and processes your payment information under its own privacy policy. We receive limited information about your transactions, such as confirmation of payment and the last digits of your card.

7. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers. With vendors who help us run Herosite, including Google (AI and analytics), Microsoft (analytics), Meta (advertising), Stripe (payments), and Amazon Web Services (hosting), who may process your information on our behalf.
• Competition verification (beta). By utilizing Herosite services during our beta launch phase (May - August 2026), you acknowledge and agree that anonymized transaction data, system execution logs, and high-level customer feedback may be securely shared with the XPRIZE Foundation and Devpost, Inc. exclusively for competition baseline verification and operational auditing purposes. No highly sensitive user passwords, private financial details, or unvetted corporate identifiers will be exposed outside of safe verification channels.
• Legal and safety. Where required by law, to respond to legal process, or to protect our rights, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets.

8. Hosted websites

If you publish a website with Herosite, you are responsible for any personal information collected through your own website from your visitors, including providing your own privacy notice and complying with applicable laws.

9. Data storage and international transfers

We host data primarily in Canada (Amazon Web Services, ca-central-1 region). Some of our providers, including Google, Microsoft, Meta, and Stripe, may process information in the United States or other countries. Where we transfer personal information across borders, we rely on appropriate safeguards as required by applicable law.

10. Data retention

We keep personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain anonymized or aggregated data indefinitely. When information is no longer needed, we delete or anonymize it.

11. Your rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or port it, to object to or restrict certain processing, to opt out of targeted advertising or "sharing," and to withdraw consent. Canadian residents may request access to and correction of their information under PIPEDA. Residents of the EU and UK have rights under the GDPR. Residents of California and other US states have rights under their state laws, including the right to opt out of "sharing" for cross-context advertising, which you can do on our Cookie Settings page. To exercise any right, email privacy@herosite.com, and we will respond as required by law.

12. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

13. Children's privacy

Herosite is a business service intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.

15. Contact

Questions about your privacy? Email privacy@herosite.com. Herosite is operated by Intoria Inc., Alberta, Canada.