Privacy Policy

Last updated: June 21, 2026

This Privacy Policy explains how Intoria Inc. ("Intoria", "we", "us"), which operates the Herosite service ("Herosite" or the "Service"), collects, uses, and shares personal information. This Policy applies across our domains, including herosite.com and its subdomains, and myherosite.com (where we host customer websites — see "Hosted websites" below for those). By using Herosite, you agree to this Policy. For how we use cookies and how to control them, see our Cookie Settings.

1. Who we are

Herosite is a product of Intoria Inc., based in Alberta, Canada. For any privacy question, contact privacy@herosite.com.

2. Information we collect

Information you provide: account details such as your name, email, and business information; the answers, business details, text, and images you submit during the interview; communications you send us; and the payment information you provide when you purchase (processed by Stripe, see below).

Account and sign-in information: When you create a Herosite account, you can sign in with Google, Facebook, or Apple, or with an email sign-in link. If you choose a social sign-in, that provider sends us a limited set of profile information to create and identify your account — typically your name, email address, and a unique account identifier from that provider. We never receive your password for that account, and we do not post to it. Facebook and Apple let you hide your real email address when you sign in; if you do, we receive a relay or placeholder address instead, which still works to reach you. We use this information only to create your account, sign you in, and connect your account to the work you have saved with us.

Information collected automatically: your IP address, browser and device type, operating system, approximate location (city or region) derived from your IP address, your browser's preferred language, the screen size we served, how you arrived (such as the referring site or campaign tag), the pages you view, and how you interact with the Service, collected through cookies and similar technologies. We use these for our first-party analytics (governed by the Analytics control — see Section 5), and we also keep a record of the technical information and your activity within a session to prevent abuse of our free tools, as described under "Security" below.

Generated assets: the logos, copy, images, and websites that Herosite generates for you, which we store to provide and host your site.

3. How we use your information

We use your information to: provide the Service, including generating your logo, copy, and website and hosting your site; process payments; respond to you and provide support; operate, secure, and improve the Service and our AI; communicate with you, including marketing where permitted; and comply with our legal obligations.

4. Artificial intelligence

To generate your assets, Herosite transmits your interview answers and related inputs to third-party AI providers, including Google's Gemini and Imagen services. Those providers process your inputs to return generated results, subject to their own terms and privacy practices. We store the generated results, and we may use anonymized or aggregated data to improve our products. We do not authorize the use of your personal information to train third-party AI models on an identifiable basis.

5. Cookies, analytics, and tracking

We use cookies and similar technologies, including Google Tag Manager, Google Analytics, Microsoft Clarity, and the Meta Pixel, to understand how the Service is used and to measure and deliver advertising. Microsoft Clarity may also record anonymized session replays (such as clicks and scrolls). Unless you have opted out of personalization, we may also look up your approximate city from your IP address (using the ipwho.is geolocation service) to personalize on-screen examples; the result is kept only for your session and is never used to identify you. You can control analytics and personalization, and see the full list of cookies, on our Cookie Settings page.

To measure how well our advertising works, we also use Meta's Conversions API, which sends a small number of conversion events (such as a sign-up or a purchase) to Meta directly from our servers, alongside the in-browser Meta Pixel. Before any such event is sent, the information used to match it — such as your email address — is hashed (irreversibly scrambled) on our side; we also include your IP address, browser type, and the Meta advertising-cookie identifiers (_fbp / _fbc). Each event carries a shared identifier so that Meta counts the browser and server copies of the same action only once. We send these events on the same basis as the Meta Pixel — only when the Service is live and you have not opted out of personalization — and we describe how to opt out on our Cookie Settings page.

We also keep our own first-party analytics about how the wizards are used — the steps you reach and how long each takes, your device and operating system, your approximate region, the screen size we served, your browser's preferred language, and how you arrived (such as the referring site or a campaign tag). This is anonymous product-improvement data, not used to identify you, and it is governed by the Analytics control on our Cookie Settings page: if you turn Analytics off, we stop recording these details (they are kept as "Unknown"). This is separate from the limited technical information we keep to prevent abuse of our free tools, described under "Security" below.

6. Payments

Payments are processed by Stripe. We do not collect or store your full payment card details; Stripe handles that directly and processes your payment information under its own privacy policy. We receive limited information about your transactions, such as confirmation of payment and the last digits of your card.

7. How we share information

We do not sell your personal information. We share information only as follows:

8. Hosted websites

If you publish a website with Herosite, you are responsible for any personal information collected through your own website from your visitors, including providing your own privacy notice and complying with applicable laws.

9. Data storage and international transfers

We host data primarily in Canada (Amazon Web Services, ca-central-1 region). Some of our providers, including Google, Microsoft, Meta, and Stripe, may process information in the United States or other countries. Where we transfer personal information across borders, we rely on appropriate safeguards as required by applicable law.

10. Data retention

We keep personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain anonymized or aggregated data indefinitely. When information is no longer needed, we delete or anonymize it.

11. Your rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or port it, to object to or restrict certain processing, to opt out of targeted advertising or "sharing," and to withdraw consent. Canadian residents may request access to and correction of their information under PIPEDA. Residents of the EU and UK have rights under the GDPR. Residents of California and other US states have rights under their state laws, including the right to opt out of "sharing" for cross-context advertising, which you can do on our Cookie Settings page. To exercise any right, email privacy@herosite.com, and we will respond as required by law.

12. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

To protect the Service from spam and abuse, we use Google reCAPTCHA Enterprise. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Fraud prevention and abuse of free tools. Some of our tools, including the logo generator, are offered free of charge and are costly for us to run. To keep these tools available and fair, to enforce free-tier and usage limits, to detect and prevent fraud, automated abuse, and other misuse, and to protect the security and integrity of the Service, we collect and process technical information about each visit. This includes your IP address, approximate location derived from it (such as city and country, obtained through the ipwho.is geolocation service), your device and operating system, and a record of your activity within a session. Unlike the session-only personalization lookup described under "Cookies, analytics, and tracking" above, we store this information for as long as reasonably necessary to prevent abuse and secure the Service. We process it on the basis of our legitimate interest in operating a secure Service and preventing abuse, and we describe this collection in Section 7 (Acceptable use) of our Terms of Service.

13. Children's privacy

Herosite is a business service intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.

15. Contact

Questions about your privacy? Email privacy@herosite.com. Herosite is operated by Intoria Inc., Alberta, Canada.