Privacy policy

AhtiWeb ("we", "us") builds and hosts websites for small businesses. This policy explains what information we collect when you use ahtiweb.com, the client portal and the site builder, and what we do with it. The short version: we collect what we need to run your website and your billing, we never sell it, and we don't run advertising trackers.

What we collect

• Account details: your name, email address, password (stored only as a secure hash by our authentication provider), and the business name and phone number you choose to add.
• Billing status: your subscription plan and its state (active, cancelled, and so on), mirrored from PayPal. Payments are processed entirely by PayPal; we never see or store your card or bank details.
• Domain registrant details: when a domain is registered as part of your purchase, the contact details you enter (name, address, email, phone) are kept on record as required by domain-registration rules (ICANN). They are visible only to you and us, and WHOIS privacy is enabled on the domain so they are not published in the public directory.
• Your site content: the text, images and settings you put into your website. It's yours; we store it to host your site.
• Messages you send us: contact-form submissions and emails, so we can reply.
• Basic technical logs: our hosting providers keep standard server logs (IP address, request time) for security and abuse prevention.

What we use it for

To provide the service: hosting your website, running your account and billing, registering and connecting your domain, answering support requests, and preventing abuse. Nothing else. We don't sell or rent personal information, and we don't use it for third-party advertising.

Where it lives

We use a small set of service providers to run the platform, each receiving only what it needs:

• Supabase: account authentication, our database and image storage.
• Netlify: website hosting and delivery.
• PayPal: all payments (subject to PayPal's own privacy policy).
• Porkbun: domain registration for domains purchased through us.
• Zoho: mailbox hosting, only if you buy the email add-on.

Cookies & analytics

• The client portal uses session cookies to keep you logged in. That's their only job.
• We use no advertising or cross-site tracking cookies, ever.
• Websites we host for you get no tracking injected by us. What you publish on your own site is under your control. If you add your own advertising or analytics IDs (Google, Meta or TikTok) in the site builder, we place that provider's tracking code on your site at your request — it runs for your visitors under your responsibility, and this policy doesn't cover it.
• If we measure traffic on our own marketing site, we use privacy-friendly, cookieless analytics.

Ad Insights (advertising statistics on hosted sites)

If you subscribe to the Ad Insights add-on, we count two things on your hosted website, entirely on our servers: visits (a page being served, including which ad campaign link brought it) and contact actions (a visitor clicking your site's WhatsApp, call, email or payment link). This works without any cookies, tracking scripts or pixels on your site. What we store about a visitor is deliberately minimal:

• No IP addresses. To avoid counting the same visitor twice in a row we keep a scrambled code (a hash) derived from the IP address with a key that changes every day — it cannot be turned back into the address, and codes from different days can't be connected.
• No names, no emails, no message contents — ever. We record the page visited, the campaign that linked to it, and the time.
• Raw visit records are deleted after about 90 days.
• Anonymous benchmarks: we compute typical values (medians) across all AhtiWeb-hosted sites from these counts — for example "a typical site gets N visits a week" — and show them to subscribers for comparison. These are aggregates only: no business's individual numbers are ever shown to anyone else, and benchmarks only appear once enough sites contribute to keep them anonymous.
• What the AI sees: AI-written reports receive your own visit/contact counts and those anonymous aggregates — never visitor data (there is none to give), never another business's identifiable numbers, and never data from your ad-platform accounts.

How long we keep it

For as long as your account is active. If you close your account, we delete your personal information and site content within a reasonable period, keeping only what we're legally required to retain (for example, billing records for tax purposes).

Your rights

You can ask us at any time to show you the personal information we hold about you, correct it, or delete it. Email hello@ahtiweb.com and we'll take care of it.

Changes to this policy

If we change how we handle your information, we'll update this page and, for significant changes, email account holders before they take effect.

Contact

Questions about privacy? Email hello@ahtiweb.com and a person reads it.