Privacy Policy

Effective Date: May 27, 2026

1. Introduction

Aeopic LLC (“we”, “us”, “our”) operates the website aeopic.com and provides custom software development, AI-integrated platform, digital marketing, and eCommerce services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy is provided in compliance with the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, and other applicable data protection laws.

Aeopic LLC, 1919 Taylor St, Ste F, Houston, TX 77007. Email: privacy@aeopic.com.

2. Information We Collect

2.1 Personal Data You Provide

• Contact information: Name, email address, phone number, and business details submitted through contact forms, project inquiry forms, and our chatbot.
• Account information: Login credentials for client platforms we build and manage.
• Business records: Project details, invoices, communications, and documents shared during service delivery.
• Payment information: Billing details processed through Stripe. We do not store payment card numbers on our systems.

2.2 Information Collected Automatically

• IP address, browser type, device information, operating system
• Pages visited, time spent on pages, referring URL
• Website analytics collected via Google Analytics (ID: G-61GKHKPRVG)

2.3 Information from Third Parties

When clients authorize us to manage their social media accounts, we may receive account data from platforms such as Meta (Facebook/Instagram), Google, and TikTok.

2.4 Sensitive Personal Data

Under the TDPSA, “sensitive data” includes precise geolocation, racial or ethnic origin, religious beliefs, health data, biometric data, and data of known children. We do not intentionally collect sensitive personal data through our website. If our services require processing sensitive data on behalf of a client (such as health information for a healthcare platform), we do so only with explicit written consent and under the terms of a separate Data Processing Agreement.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve our services (custom web development, AI-integrated platforms, digital marketing, eCommerce)
• Communicate about projects and services
• Manage social media accounts on clients' behalf (with explicit authorization)
• Send marketing communications (with consent; opt-out available in every message)
• Analyze website traffic and improve user experience
• Process payments and maintain billing records
• Comply with legal obligations

4. Artificial Intelligence in Our Services

Aeopic uses AI technology (Anthropic Claude) in the delivery of certain services, including AI-integrated operating systems built for clients and internal development assistance. Here is how we handle data in AI features:

• What data is sent to AI providers: Only the prompts and context necessary to generate responses. We do not send entire client databases or customer lists to AI providers.
• Data retention by AI providers: Our primary AI provider (Anthropic) offers zero data retention options for sensitive workloads. Data sent via the API is not used to train AI models.
• Human oversight: AI outputs are used to assist, not replace, human judgment. All AI-generated content or decisions are subject to human review.
• No autonomous decisions: AI does not make autonomous decisions about individuals or their personal data without human involvement.
• Client opt-out: Clients may request that their platform data not be processed through AI features. Contact us to discuss alternative service delivery.

5. Social Media Management

When clients authorize Aeopic to manage their social media presence on platforms including Facebook, Instagram, TikTok, and Google Business Profile, we access those accounts solely to create, schedule, publish, and manage content on the client's behalf.

We do not sell or share client social media data with third parties. Clients may revoke access at any time by providing written notice.

6. Cookies and Tracking Technologies

We use Google Analytics to analyze website traffic and usage patterns. We use essential cookies required for basic site functionality. We do not use third-party advertising cookies and we do not sell data to advertisers.

Global Privacy Control (GPC): We recognize and honor the Global Privacy Control signal. If your browser or device sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal data and targeted advertising, as required by the TDPSA.

7. Data Sharing and Disclosure

We do not sell your personal data. We do not share your personal data for targeted advertising purposes.

We share information with service providers (subprocessors) who assist in operating our business, including:

• Supabase (database and authentication infrastructure)
• Vercel (application hosting and CDN)
• Stripe (payment processing)
• Twilio (SMS communications)
• Resend (transactional email delivery)
• Anthropic (AI processing)
• Google Analytics (website analytics)

A complete list of our subprocessors, including their purposes, locations, and compliance certifications, is available at aeopic.com/legal/subprocessors.

Each subprocessor is contractually bound to maintain appropriate data protection standards. We may also disclose information when required by law, court order, or to protect our legal rights.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions: Retained for 2 years from submission, then deleted unless a business relationship is established.
• Client project data: Retained for the duration of the service agreement plus 1 year after termination, unless the client requests earlier deletion.
• Payment and billing records: Retained for 7 years as required by tax and accounting regulations.
• Website analytics data: Google Analytics data is retained for 14 months per Google's default retention settings.
• Marketing communications: Contact information is retained until you opt out, at which point it is removed within 30 days.

9. Data Security

We implement technical and organizational security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls with multi-factor authentication for administrative access
• Row-level security on database records
• Regular security assessments of infrastructure and subprocessors
• Subprocessors with independent security certifications (SOC 2 Type II, ISO 27001)

No method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Rights Under the TDPSA

If you are a Texas resident, the Texas Data Privacy and Security Act provides you with the following rights:

• Right to access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to correction: You may request that we correct inaccurate personal data.
• Right to deletion: You may request that we delete your personal data.
• Right to data portability: You may request a copy of your personal data in a portable, readily usable format.
• Right to opt out of targeted advertising: We do not engage in targeted advertising. If we begin doing so in the future, we will provide a clear opt-out mechanism.
• Right to opt out of data sales: We do not sell your personal data.
• Right to opt out of profiling: We do not engage in profiling that produces legal or similarly significant effects.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at privacy@aeopic.com. We will respond to verified requests within 45 days. If we need additional time, we will notify you within the initial 45-day period and may extend by up to 45 additional days.

11. Right to Appeal

If we decline to take action on your privacy request, you have the right to appeal that decision. To submit an appeal, email privacy@aeopic.com with the subject line “Privacy Appeal” and include a description of the original request and the reason for your appeal.

We will respond to appeals within 60 days. If we deny the appeal, we will provide a written explanation and instructions for how to contact the Texas Attorney General if you wish to file a complaint.

12. Data Protection Assessments

As required by the TDPSA, Aeopic conducts data protection assessments for processing activities that present a heightened risk of harm to consumers, including processing of sensitive data and processing for purposes of targeted advertising or profiling. Assessment records are maintained internally and made available to the Texas Attorney General upon request.

13. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will provide notice through our website or by email to active clients. Your continued use of our website and services after changes are posted constitutes acceptance of the updated policy.

15. Related Documents

• Data Processing Agreement
• Subprocessor List
• Terms of Service

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: