← Back to home

PRETTY OS Privacy Policy

Effective 10/31/2026

The short version. We collect what we need to run PRETTY OS: your account details, what you tell the builder to create, your billing information, and basic information about how you use the Service. We send your prompts, files and sites to the technology providers that power the builder so they can build your site, and we do not use your content to train AI models. We do not sell your personal information for money. Our marketing website may use advertising and measurement tools, and you can opt out at any time (see Section 11). Your sites belong to you, and for the information your own site collects from your clients and visitors, you are in charge and we only process it for you. You can ask us to access, correct or delete your information at any time by emailing hello@myprettyos.com.

1. Who we are, scope and our roles

Steven Strazzullo, doing business as PRETTY OS (“PRETTY OS”, “we”, “us”), operates the PRETTY OS website and website builder. This policy explains how we collect, use, share and protect personal information when you visit our website, create an account, use the Service, buy plans or credits, or contact us. Terms in capitals, such as Service, Site and Credits, have the meaning given in our Terms of Service.

There are two different roles:

  • Information about you. For information about visitors to our website, account holders and people who contact us, we decide how and why it is used. We are the controller, or the “business” under US law, and this policy applies.
  • Information inside your Sites. When you publish a Site, it may collect information from your own clients and visitors, for example through booking links, contact forms or inquiry forms. For that information, you are the controller, or the “business”, and we act as your processor, or “service provider”, handling it only on your behalf to provide the Service. This policy does not cover it. Your Site needs its own privacy policy. If you are a client or visitor of a Site built with PRETTY OS and have a question about your information, please contact the owner of that Site.

Our contact details are in Section 18.

2. Information we collect

We collect the following, in the situations described. We do not knowingly collect more than this. Please do not send us sensitive information such as health records, government ID numbers or payment card numbers in prompts, files, forms or support messages.

When you visit our website

  • Your IP address and approximate location (country, region, city) derived from it, browser and device information, the pages you view, the website that referred you, and timestamps.
  • Cookies, pixels and similar technologies, including advertising and measurement identifiers, and the advertising click identifier (such as a Meta, Google or TikTok click ID) that comes with the link if you arrive from one of our ads, as described in Section 4.

When you create an account

  • Your name and email address, and your password (stored in scrambled, hashed form) or your Google account identifier if you sign in with Google.
  • Information we use to protect the Service from abuse, such as your IP address, device and browser information, and signals that help us detect multiple free accounts created by the same person.

When you use the Service

  • Your prompts and the conversation history for each Site, files and images you upload, and the Sites the builder generates for you, including their code, pages, content and settings.
  • Information about your Account activity, such as login history, credits used and remaining, version history, publishing, build and error logs, and domain settings.

When you pay

  • Billing details such as your name, billing address, plan, credit balance and purchase history, and the last four digits, brand and expiry date of your card. Payments are handled by Stripe. We never receive or store your full card number.

When you contact us

  • Your messages, attachments and contact details, and the Account details needed to help you.

Information we get from others

  • From Google if you sign in with Google (your name, email and profile picture) and from Stripe (the outcome of payments and fraud signals).

Sensitive information. The only sensitive information we deliberately collect is your account log-in credentials, which we use only to sign you in. We do not collect precise location.

3. How we use your information and why

Where the GDPR, UK GDPR or a similar law applies, we need a legal basis for each use. Here they are:

  • Provide the Service: create and manage your Account, run the builder on your prompts, host and publish your Sites, and give you support. *Basis: performing our contract with you.*
  • Take payments and keep records: process payments, manage plans and credits, issue receipts, prevent payment fraud, and meet tax and accounting rules. *Basis: contract, legal obligation and our legitimate interest in preventing fraud.*
  • Keep the Service safe: security monitoring, preventing abuse of the free plan, detecting fraud, and investigating incidents. *Basis: our legitimate interest in security, and legal obligation.*
  • Improve the Service: understand how people use PRETTY OS, measure which of our advertising and marketing works, show our ads to people who may be interested, fix errors and make the builder better. *Basis: our legitimate interest in improving the Service, and your consent for non-essential cookies where the law requires it.*
  • Send service emails: verification codes, receipts, renewal reminders, security alerts and changes to our terms or this policy. *Basis: contract and legal obligation.*
  • Send product news and marketing: *Basis: your consent, or our legitimate interest in telling existing customers about similar services, with an unsubscribe link in every message.*
  • Follow the law and protect rights: respond to legal requests, enforce our Terms, and establish or defend legal claims. *Basis: legal obligation and our legitimate interest.*
  • Business transfers: if we merge with, are acquired by or sell assets to another company. *Basis: our legitimate interest, and this policy will continue to apply.*

Automated decisions. We use automated tools to block sign-ups and activity that look fraudulent or abusive. None of them make decisions with legal or similarly significant effects on you without the possibility of human review. If an automated block stops you from using the Service, email hello@myprettyos.com and a person will review it.

4. Cookies and similar technologies

We use cookies and similar technologies that are needed for the Service to work, such as keeping you logged in and remembering your settings. We may also use analytics tools to understand how our website and the Service are used. Our advertising is aimed at people in the United States. If that changes, or where the law otherwise requires your consent for non-essential cookies, such as in the EEA, UK and Switzerland, we will ask for it first. You can control cookies in your browser settings, and blocking some may stop parts of the Service from working. Advertising and measurement. We advertise PRETTY OS on platforms such as Google, Meta (Facebook and Instagram) and TikTok, and we measure whether our ads lead to sign-ups and purchases. To do this, our website may use advertising pixels and tags from those companies. With your permission where the law requires it, they set identifiers in your browser and report your visits and actions on our website, such as viewing a page or signing up, to those companies, which may combine this with information they hold about you to show you our ads elsewhere and to measure them. When you sign up or buy, we may also send those platforms a conversion event from our servers containing your email address (scrambled with a one-way hash before sending), the advertising click identifier from the ad you clicked, your IP address and browser details, and for purchases the amount and currency. These companies act as independent controllers for what they do with the information afterwards and have their own privacy policies. You can opt out as described in Section 11. We use these tools only on our own marketing website and sign-up pages. They are not added to the Sites you build.

5. AI processing of your prompts, files and Sites

The builder is powered by artificial intelligence. To build and change your Site, your prompts, the relevant parts of your Site’s code and content, the files you attach, and your conversation history are sent to our Technology Providers, including the AI model providers and the platform that runs the builder. They process this information to provide the Service to us, under agreements that restrict how they can use it.

  • No AI training. We do not use your prompts, files, Sites or personal information to train artificial-intelligence models, and our providers are contractually restricted from using the data we send them to train their models.
  • What we keep. We store the conversation history for each Site so you can continue where you left off. We also keep logs of the builder’s activity to fix errors, investigate abuse, handle billing questions and improve reliability.
  • Other people’s information. If you put information about your clients or other people into a prompt, you are responsible for having the right to do so. Please do not paste sensitive information such as health records or payment card numbers.

6. Who we share information with

We share personal information only as described here. We do not sell personal information for money, and we do not share it with data brokers. We do share limited information with advertising platforms (such as Google, Meta and TikTok) for the advertising and measurement described in Section 4.

  • Service providers (processors) who work for us and follow our instructions, in these categories: AI model providers; the platform and cloud hosting that run the builder and your Sites; content delivery and storage; payment processing (Stripe); email delivery; bot protection and sign-in; analytics; and support tools. We choose providers that protect information appropriately. The names of the providers are available on request at hello@myprettyos.com.
  • Authorities and other parties when required: to follow the law, a court order or a valid government request; to enforce our Terms; to detect, prevent or address fraud, abuse or security problems; or to protect the rights, property or safety of PRETTY OS, our users or others.
  • A buyer or successor in a merger, acquisition, financing or sale of assets, who must keep honoring this policy.
  • People you choose. When you publish a Site, anything on it is public. If you connect a third-party service, such as a booking app, to your Site, information goes to that service under its own policies.

7. International transfers

PRETTY OS is operated from the United States, and information is processed in the United States and in other countries where we and our providers operate. Published Sites may be served from locations around the world. When information protected by the GDPR, UK GDPR or Swiss law is transferred to a country without an adequacy decision, we rely on safeguards such as the Standard Contractual Clauses approved by the European Commission, the UK addendum, or the EU-US Data Privacy Framework where the provider is certified. You can ask for details of the safeguards we use at hello@myprettyos.com.

8. How long we keep information

  • Account information: for as long as your Account is open. When you close your Account, we delete or anonymize your profile information within 90 days, except what we must keep, as described below.
  • Sites and content: until you delete them or close your Account. After you close your Account we may delete your Sites and Your Content 30 days later, and remove them from our backups within a further 90 days.
  • Billing records: for as long as tax, accounting and legal rules require, typically up to 7 years.
  • Security and abuse logs: up to 12 months, longer if needed for an open investigation or legal claim.
  • Builder activity logs: up to 2 years.
  • Support conversations: up to 3 years after the last message.
  • Records of consent, opt-outs and terms acceptance: as long as needed to prove them, up to 5 years after the relationship ends.
  • Cookies: for the time stated in your browser, typically up to 12 months.

We may keep information longer where the law requires it or to deal with a dispute.

9. Security and breach notification

We use reasonable technical and organizational measures to protect information, including encrypted connections, encryption of stored data, separation between Accounts, controls on who can access information, hashed passwords and monitoring. No system is completely secure, so we cannot promise absolute security. You are responsible for keeping your password safe and for the security of your own Site.

If we discover a breach that affects your personal information, we will notify you and the authorities as the law requires, for example within 72 hours to the supervisory authority where the GDPR applies, and to you without undue delay and within the deadlines set by US state laws. To report a security problem, email hello@myprettyos.com.

10. Your rights and how to use them

Depending on where you live, you may have some or all of these rights. We honor them for everyone as far as we reasonably can.

  • Access: know whether we process your information and get a copy of it.
  • Correction: fix information that is wrong or incomplete. Most profile and billing details can be changed in your Account settings.
  • Deletion: ask us to delete your information, subject to what we must keep by law (see Section 8).
  • Portability: get your Account information in a common format. You can also download your Site’s code and data from your Account.
  • Objection and restriction: object to certain uses, including direct marketing, or ask us to limit them.
  • Withdrawal of consent: withdraw a consent you gave at any time, without affecting earlier uses.
  • Opt out of sale, sharing and targeted advertising. You can opt out of the sharing of your information with advertising platforms for targeted advertising, and we do not sell it for money (see Section 11).
  • No discrimination: we will not treat you worse for using your rights.
  • Appeal and complaint: appeal a decision we make about your request, or complain to a data protection authority (see Sections 12 and 13).

How to ask. Email hello@myprettyos.com from the address on your Account and tell us which right you want to use. We may ask you to verify your identity, usually by confirming you control your Account email, and, if someone is making a request for you, to show their authority. We reply within 30 days where the GDPR applies, within 45 days under US state laws (we may extend once by 45 days and will tell you why), or sooner where your local law requires. Requests are free unless they are clearly unfounded or excessive. If we deny your request, you can appeal by replying to our decision. We respond to appeals within 45 days, or 60 days where state law allows, and explain how to complain to your state attorney general or data protection authority.

11. Your privacy choices

  • Opting out of advertising and sharing. We do not sell personal information for money. Sharing identifiers and website activity with advertising platforms for our ads, as described in Section 4, counts as “sharing” for cross-context behavioral advertising, or as a “sale”, under some US state laws. You can opt out at any time by sending a Global Privacy Control signal from your browser, by turning off personalized ads in your settings on Google, Meta and TikTok, or by emailing hello@myprettyos.com with the subject “Do not sell or share”. If you opt out, we stop sending your information to advertising platforms. We do not knowingly sell or share the personal information of anyone under 16.
  • Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal from your browser as a valid request to opt out of sale, sharing and targeted advertising. There is no common standard for Do Not Track signals, so we do not respond to them.
  • Limit use of sensitive information. We use sensitive personal information (log-in credentials) only to sign you in, so there is nothing to limit.
  • Marketing emails. Every marketing email has an unsubscribe link. You can also email us. Service emails such as receipts, security alerts and renewal reminders continue while you have an Account.

12. Additional information for US state residents

This section applies to residents of California and other US states with privacy laws, including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. We honor these rights for all US residents.

Categories of personal information we collected in the past 12 months, from the sources and for the purposes in Sections 2 and 3, and disclosed for business purposes to the service providers in Section 6:

  • Identifiers: name, email address, IP address, Account and device identifiers.
  • Customer records: billing name and address, and payment details handled by Stripe.
  • Commercial information: plan, purchases, credits and usage history.
  • Internet and network activity: pages viewed, usage logs, prompts and Site content, conversation history.
  • Approximate location: country, region and city from your IP address.
  • Sensitive personal information: Account log-in credentials, used only to sign you in.

We have not sold personal information for money. For advertising and measurement, we share identifiers (such as hashed email, IP address and advertising click identifiers), commercial information (purchase events), internet activity on our website, and approximate location with advertising platforms such as Google, Meta and TikTok, which counts as “sharing” under California law. We do not collect the other categories listed in the California Consumer Privacy Act, such as biometric data, health data or precise location.

Your state rights are the ones listed in Section 10. To use them, email hello@myprettyos.com. Because we operate online, email is our designated method and we do not provide a toll-free number. If you disagree with the result of an appeal, you can contact your state attorney general, for example the California Privacy Protection Agency (cppa.ca.gov).

State-specific notes. Minnesota residents may ask for a list of the specific third parties to which we have disclosed their personal data, and may question the result of any profiling. Connecticut residents: we do not use personal data to train large language models. Nevada residents: we do not sell covered information for money, and you may still send us an opt-out request.

13. Additional information for the EEA, UK and Switzerland

  • Legal bases are listed with each purpose in Section 3. Where we rely on our legitimate interests, you can object at any time, and we will stop unless we can show compelling reasons to continue.
  • Provision of data. Your name and email, and billing details for paid plans, are needed for us to provide the Service. Everything else is optional.
  • Contact. You can contact us directly about this policy at hello@myprettyos.com.
  • Complaints. You can complain to the data protection authority in your country, the UK Information Commissioner’s Office (ico.org.uk), or the Swiss Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concern first.

14. Other countries

PRETTY OS is mainly aimed at customers in the United States. If you use the Service from another country, your information will be processed in the United States as described in this policy. If the law of your country gives you rights in addition to those described here, we will honor them on request. You can exercise them by emailing hello@myprettyos.com.

15. Children

The Service is for adults. We do not knowingly collect personal information from anyone under 18, and we never knowingly collect it from children under 13. If you believe a child has given us personal information, email hello@myprettyos.com and we will delete it. If you build a Site for children, you are responsible for following children’s privacy laws for that Site.

16. Marketing communications

We send marketing emails only with your consent or, for existing customers, about similar services with an opt-out in every message, as the law allows. Every marketing email identifies us, includes our mailing address and a working unsubscribe link, and we honor opt-outs within 10 business days. We do not sell or rent our mailing list.

17. Changes to this policy

We may update this policy when our practices, providers or the law change. If a change is material, we will email Account holders and post a notice on our website at least 30 days before it takes effect. If a change needs your consent, we will ask for it. The effective date is at the top of this page, and earlier versions are available on request.

18. Contact

Steven Strazzullo, doing business as PRETTY OS 4877 16th Ave NW, Rochester, MN 55901 Privacy requests, security reports and general questions: hello@myprettyos.com