Privacy Policy

Effective October 1, 2026

DIY Promotion ("DIY Promotion," "we," "us" or "our") runs diypromotion.com, the DIY Promotion dashboard, the free tools page, and the landing pages our customers publish with our tools (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to everyone who uses the Service, including our customers and the visitors to their landing pages.

We are based in Washington State, and this policy is written to meet Washington law, including the Washington Consumer Protection Act (RCW 19.86), the Commercial Electronic Mail Act (RCW 19.190), the data breach notification law (RCW 19.255) and the My Health My Data Act (RCW 19.373), along with applicable U.S. federal law.

1. Who this policy covers

Customers: businesses and people who create a DIY Promotion account or join our email list.
Free tools users: people who use the free tools at diypromotion.com/free-tools.php without an account.
Visitors to our customers' landing pages: people who view or fill out a form on a page published with DIY Promotion. For that information, our customer decides what is collected and how it is used, and we process it on our customer's behalf (see section 7).

2. What we collect

Information you give us

Account and sign-up details: your name, email address, password (stored only as a one-way scrambled hash), business name, type of business, industry, website, phone number, city, state and time zone.
Content you create: landing pages, photos and logos you upload, banners, social posts and captions, your brand voice (including sample posts and reviews you paste in), keywords, Google Business Profile details, review links, page settings and messages you send to David.
Leads: the names, email addresses, phone numbers and messages that visitors submit through forms on your landing pages.
Connected services: if you connect a custom domain or similar services, the settings needed to make them work.
Support messages: what you send to support@diypromotion.com and our replies.
Payment information: when paid plans launch, payments will be handled by a third-party payment processor. We will not store full card numbers on our servers.

Information collected automatically

Usage and device information: pages viewed, features used, the type of browser and device, and the date and time.
IP addresses: we keep a one-way scrambled version of your IP address (a "hash") to prevent spam, abuse and fraud and to apply usage limits. We do not store your full IP address in our database. Our hosting provider's standard server logs may briefly record full IP addresses.
Landing page statistics: for pages published with DIY Promotion, we count visits, how far people scroll, whether they start or finish the form, taps on call and text buttons, the general source of the visit (for example "Facebook" or "Google"), the device type, and which version of a headline they saw. These counts are stored as daily totals, not as a history of each visitor.
Tracked links: when someone taps a link in a social post made with DIY Promotion, we count the click (one per person, using the scrambled IP address) and may note which post brought a visitor who later fills out a form.

Information from the free tools

The web address you enter, and any business name, town, phone number, keywords or page code you type or paste. We fetch the public web page you name so we can check or rewrite it.
Results of the "Fix my page code" tool are stored for up to 3 days with a private key so you can download them, then they can no longer be opened.

3. How we use it

To provide, run and improve the Service: build and host your pages, deliver leads to you, write posts and banners, run SEO checks, and show you your results.
To send leads, notifications and automatic replies that you switch on (for example, the instant reply email your landing page sends to a new lead).
To communicate with you about your account, security, changes to the Service and support requests.
To send product news and marketing emails, if you agreed to receive them. You can unsubscribe at any time.
To keep the Service safe: prevent spam, abuse and fraud, enforce usage limits and our Terms of Service, and meet legal obligations.

We do not sell personal information, and we do not share it with third parties for their own advertising. We do not use your leads or your content for our own marketing.

4. AI features and David, our assistant

Several features use artificial intelligence: the social post writer, banner pictures, brand voice, Google description and keyword ideas, landing page industry copy, "Fix my page code," the 30-day marketing plan and David. To produce results, we send the information needed for the task (for example, your business details, the facts you typed, or the page you asked us to fix) to our AI providers, Anthropic and OpenAI.
Under their business API terms, these providers do not use information sent through their APIs to train their models by default. They may keep it for a limited time to operate and secure their services.
AI can make mistakes. Review AI-written content before you publish it.
Talking to David: when you use the microphone, speech is turned into text by your web browser. Depending on your browser, your voice may be processed by the browser's maker (for example, Google for Chrome or Apple for Safari) under their own privacy policies. DIY Promotion receives only the text, not the recording. Spoken replies are created by your own device.
We keep your conversations with David and a log of the actions he takes so you can see your history, so we can provide support, and so we can keep the Service safe.

We share personal information only as needed to run the Service, with service providers that are required to protect it and use it only for us:

Hosting: the company that hosts our servers and database.
Email delivery: Twilio SendGrid, for account emails, lead notifications and instant replies.
AI: Anthropic and OpenAI, as described in section 4.
Google: Google PageSpeed Insights (website speed tests), Google Search Console (search numbers for landing pages) and Google Fonts (page fonts, which your browser loads from Google).
Meta: if you add your Meta Pixel ID, your landing pages send Meta the page visits and leads it needs to measure your ads. If you also add your Conversions API token, our server sends the same visits and leads to Meta directly, with the visitor's email, phone and name scrambled (hashed) first, plus their IP address, browser and Meta's own click and browser IDs, so Meta can match them to your ads. We never log in to your Meta accounts.
Content delivery: some page scripts, such as the QR code maker, load from cdnjs (Cloudflare).
Payment processor: when paid plans launch.

If you add a Meta (Facebook) Pixel or Google tag to your landing page, those companies receive information from visitors to your page under their own terms. That is your choice and your responsibility.

We may also share information: when you ask us to; to comply with law, a subpoena or a court order; to protect the rights, safety and property of our customers, the public or DIY Promotion; or as part of a merger, sale or transfer of our business, in which case this policy will continue to apply to your information.

6. Cookies and similar tools

We use a small number of cookies and browser storage, mainly to make the Service work:

Sign-in and security: a session cookie that keeps you logged in and protects forms from forgery.
Landing pages: a cookie that keeps the same headline for a returning visitor during a headline test, and a cookie (up to 30 days) that remembers which social post link brought a visitor, so the business can see which posts bring leads.
Preferences: your browser remembers small settings such as whether David's chat is open, where you moved it, and whether his voice is on.

We do not use advertising cookies on diypromotion.com. You can block or delete cookies in your browser settings, but signing in will not work without the session cookie.

7. Information our customers collect

When a business uses DIY Promotion to publish a landing page and collect leads, that business decides what information to collect and how to use it. For that information, DIY Promotion acts as a service provider (also called a "processor") and handles it only to provide the Service to that business.

If you filled out a form on a business's landing page and want to see, correct or delete your information, or stop hearing from that business, please contact that business directly. If you cannot reach them, email us and we will pass on your request.

Our customers are responsible for having a lawful basis and any needed consent for the information they collect, for posting their own privacy notice where required, and for following the laws that apply to their marketing, including the rules on email and text messages described in our Terms of Service.

8. Consumer health data (Washington)

DIY Promotion is a marketing service. We do not intend to collect, and do not ask for, "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373), and we do not sell consumer health data.

Some of our customers work in health, beauty, fitness or wellness. Our customers must not use DIY Promotion forms to collect consumer health data unless they meet that law's requirements, including posting their own consumer health data privacy policy and getting consent where required. If you believe consumer health data about you was collected through the Service, contact us and we will help you reach the business and act on your request.

9. How long we keep it

Account information and content: while your account is open, and for up to 90 days after you close it so we can restore it if you ask, unless the law requires us to keep it longer.
Leads: until you or the business deletes them, or the account is closed as described above.
Email list details: until you unsubscribe and ask us to delete them, or we no longer need them.
Free tools results: up to 3 days. Usage counts used for limits are kept for a short time.
Security and email logs: as long as reasonably needed for security, delivery records and legal purposes.

10. Security and data breaches

We protect information with reasonable safeguards, including encrypted connections (https), one-way hashed passwords, scrambled IP addresses, limited staff access and secured servers. No system is perfectly secure, so we cannot promise absolute security.

If a breach of security exposes your personal information, we will notify you and, where required, the Washington State Attorney General, as required by RCW 19.255.010 and other applicable law, without unreasonable delay and within the time the law requires.

11. Your choices and rights

See, correct, download or delete: you can update most information in your dashboard, export your leads at any time, and ask us for a copy of your personal information or to correct or delete it.
Marketing emails: every marketing email has an unsubscribe link, and we honor requests promptly. You will still get emails about your account and security.
Close your account: email us and we will close it and delete your information as described in section 9.
Residents of other states: depending on where you live (for example California, Colorado, Oregon or Virginia), you may have additional rights, such as the right to know, correct, delete, or opt out of the sale or sharing of personal information, and the right to appeal our decision. We do not sell or share personal information for targeted advertising. We will honor these rights where the law applies to us.

To make a request, email support@diypromotion.com from the email address on your account, or tell us how to reach you. We may need to confirm your identity before acting. We will respond within the time the law requires, and we will not treat you differently for using your rights. If we deny your request, you can appeal by replying to our decision.

12. Children

The Service is for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. You must be at least 18 to create an account. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the Service changes. We will change the date at the top of this page, and if the changes are significant we will tell customers by email or in the dashboard before they take effect.

14. Contact us

DIY Promotion
14817 249th Ave SE
Monroe, WA 98272
support@diypromotion.com