Privacy Policy — Active Digit AI
2026-10-12
Who we are
Active Digit ("we") operates Active Digit AI — an independent portal and a ChatGPT app that create websites, landing pages and demo CRM workspaces. Privacy contact: support@activedigit.co.il.
What we collect
Account details: name, email, optional phone and a hashed password — only if you sign up.
Project content: your request, business name, texts, products and images you provide.
Enquiry details: name, phone, email, business name, service and message — only when you submit a contact form and consent.
Consents: contact consent and a separate marketing consent, with time and wording version.
Technical data: a keyed hash (HMAC) of your IP address, used only for abuse prevention and rate limiting. System logs do not store IP addresses.
Using the app in ChatGPT
When you use the app in ChatGPT we receive only the parameters needed to perform the action (e.g. a description of the business to build the site).
We do not collect personal details from your ChatGPT account, do not read the conversation beyond what is sent to a tool, and do not use conversations for marketing.
Account linking uses OAuth: ChatGPT never receives your password, and you can disconnect at any time.
How we use data
To create, store and display your projects and preview links.
To run trials, operational notifications and paid-plan requests.
To have a representative handle your enquiry — only if you agreed to be contacted.
To send marketing — only with your separate consent.
For security, abuse prevention and legal compliance.
Sharing
Active Digit's internal CRM — for enquiries where you agreed to be contacted.
Infrastructure providers (server hosting, Cloudflare) acting on our behalf.
Stock photos: generated sites show stock photos from Unsplash, loaded directly from Unsplash servers, so the browser of a site visitor connects to Unsplash (as with any site that shows an image hosted elsewhere). We do not send Unsplash any information about you or your visitors.
We do not sell personal data or share it with third parties for advertising.
Retention periods
Account projects: until you delete them or your account; archived projects are deleted 90 days after archiving.
Projects created in ChatGPT without an account: deleted automatically after 30 days.
Enquiries to Active Digit (leads): up to 24 months, then contact details are anonymised.
Messages sent through a generated site's contact form: 12 months.
ChatGPT connection: access tokens 1 hour, refresh tokens 30 days, deleted within 7 days of expiry. Portal sessions: 14 days.
System logs: about 30 days, without IP addresses. Encrypted backups: 14 days.
Abuse reports: up to 12 months after resolution.
Deleting your account deletes projects, anonymises enquiries and sends an erasure request to Active Digit's CRM.
Your rights
Access and export (Account page, JSON export), correction and deletion, and withdrawing marketing consent at any time.
Questions: support@activedigit.co.il.
Security
HTTPS, hashed passwords, per-account isolation, rate limiting, audit logs and encrypted backups.
Changes
We will update this policy as needed and show the update date at the top.