Privacy policy

Who is responsible for your data

Tools for People, Inc., a Delaware corporation (“Starjay,” “we,” or “us”), operates the Starjay website and website-building service. We are the controller of personal information we collect to operate our website, accounts, billing, and service. For privacy questions or requests, email support@starjay.com.

When a Starjay customer collects information from visitors through a site they publish—such as a form submission or customer-added analytics—the customer decides why that information is collected. In that situation, the customer is normally the controller and Starjay processes the information to provide the service. For published websites, we process traffic information and, where enabled, form submissions to provide hosting, usage reporting, and form delivery, and to prevent abuse.

Information we collect

• Account information: name, email address, authentication identifiers, workspace membership, and session information supplied through our identity provider.
• Customer content: site source and settings, prompts, AI responses, uploaded assets, collections, form configuration, and form submissions stored for your sites.
• Usage and device information: product actions, AI usage and cost records, IP address, browser and device details, diagnostic logs, security events, and site traffic measurements.
• Billing information: customer, subscription, invoice, and payment-status identifiers from our payment provider. Starjay does not store full payment-card numbers.
• Communications: support messages, abuse reports, and other information you choose to send us.

Why we use information

• Provide, personalize, maintain, and troubleshoot the product.
• Authenticate users, keep workspaces separate, prevent abuse, and investigate security events.
• Process payments, measure AI usage, enforce plan limits, and maintain transaction records.
• Run AI features by sending prompts, relevant site content, uploaded assets, and tool results to the provider used for that feature. Some features use a provider or model selected by Starjay, which may differ from the model selected for a chat.
• Communicate about the service and respond to support, privacy, legal, and abuse requests.
• Meet legal obligations and establish, exercise, or defend legal claims.

Where law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the service, compliance with law, and consent where we specifically ask for it.

Starjay uses AI to help create and edit sites, but it does not use solely automated processing to make legal or similarly significant decisions about people.

Cookies and local storage

Starjay uses necessary session cookies for login, security, and account continuity. The product also stores interface preferences such as theme choices in the browser. We do not use product cookies or customer content for third-party advertising.

Starjay does not currently change its practices in response to browser “Do Not Track” signals. Third-party payment services such as Stripe may collect information about activity over time and across websites to provide payments and prevent fraud, as described in Stripe’s Privacy Policy.

A customer-published site may include analytics, embeds, or other technology selected by that customer. The customer is responsible for any visitor notice and consent those additions require.

When information is shared

We share information only as needed to operate the service, follow your instructions, complete a business transaction, comply with law, or protect people and the platform. Our current service-provider categories include:

• Identity: WorkOS.
• Hosting, compute, storage, networking, and databases: Fly.io, Cloudflare, and Neon.
• AI processing: Anthropic, OpenAI, Google, or Moonshot AI, depending on the model used for a request.
• Payments: Stripe.
• Transactional email: Resend.
• Operational logging and monitoring: Axiom.

We may disclose information when reasonably necessary to comply with a valid legal process, address fraud or abuse, protect rights or safety, or complete a merger, financing, acquisition, or sale. We do not sell personal information or share it for cross-context behavioral advertising.

Retention and deletion

We retain information as needed to provide the service, maintain account history, address security and abuse, and meet legal and financial obligations. Retention depends on the type of information, whether the account or site is active, deletion requests, and those purposes. Stored AI conversation history and form submissions do not currently have automatic expiration; customers can delete submissions they no longer need and contact Support about other data.

Deleting a site starts cleanup of its active source, published resources, assets, submissions, and stored checkpoints. Some billing, security, audit, and usage records may remain where needed for fraud prevention, legal compliance, dispute resolution, or financial recordkeeping. Copies in provider logs and backups may persist under those providers’ retention processes.

Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information. You may also withdraw consent where processing relies on consent and complain to your local data-protection authority.

Email support@starjay.com from the address on your Starjay account. State whether you want access, export, correction, or deletion and identify the workspace or sites involved. We may verify your identity and authority before fulfilling a request. We handle requests within the time required by applicable law.

We may limit a request when law allows or when fulfilling it would expose another person’s information, compromise security, or conflict with a legal retention duty. If that happens, we will explain the reason where permitted.

Security and international processing

We use access controls and other technical measures to protect information. No online service can guarantee absolute security.

Starjay and its providers may process information in the United States and other countries where they operate, which may have different data-protection laws. Contact support@starjay.com with questions about processing locations and safeguards relevant to your information.

Children and policy changes

Starjay is a business and creator tool, not a service directed to children. You must be at least 18 years old to create an account.

We may update this notice as the beta changes. We will change the date on this page and provide additional notice before a material change when required. Our practices must match the promises in the notice that applies when information is collected.