Privacy Policy

Captive Studio is the client portal that Airwalk Properties LLC, a Tennessee limited liability company doing business as Captive Demand ("Captive", "we", "us"), provides so the businesses we build websites for can edit, publish, and run those sites. This policy explains how we handle personal information when you use Captive Studio, including its public pages such as this one, the page where a client accepts their site, and our marketing pages, such as the page where you can request a free website migration.

It does not cover the websites our clients publish with Captive Studio. Each client is responsible for the privacy notice on its own site.

• Account details: your name, email address, and sign-in information, and the organizations you belong to and your role in them. When you are invited to an organization or to claim a site, we keep the email address the invitation went to.
• Organization and site content: the pages, drafts, blog posts, products, settings, change history, and other content you and your team create or edit, along with who changed what and when.
• Media: images and other files you upload, and the descriptions, tags, and crop points generated for them. We also take periodic screenshots of your public site to show in the dashboard.
• AI chat messages and usage records: the messages you send to the AI editor, the images you attach to them, the replies and edits it produces, and records of each request (for example the model used, the amount of text processed, and the cost) so we can show and bill your usage.
• Support requests: what you write when you ask a question, report a problem, or request work, and our replies.
• Billing details: your plan, subscription status, invoices, and the record of the terms you accepted (including the time, your IP address, and your browser's user agent). Card details are entered with and held by Stripe; we do not see or store full card numbers.
• Migration requests: when you ask us to migrate your website, the website address, your name and email address, your confirmation that you are authorized to have the site migrated, and anything else you choose to add, such as your phone number, business name, industry, approximate website traffic, what your site does, who manages it, and notes. To rebuild the site we also read its public pages, images, and code.
• General inquiries: when you contact us through the form on our homepage, your name, email address, your message, and the company and website you choose to add.
• How you found us: when you send a migration request, the campaign details in the link you followed (such as UTM parameters), the page that referred you, the page you landed on, your IP address and browser's user agent, and, if the Meta Pixel is active (section 3), the Meta identifiers described there.
• Technical information: logs that our hosting and service providers record when you use Studio, such as IP address, browser type, the pages and actions requested, and error details.

Captive Studio uses cookies that are needed for it to work: our sign-in provider sets cookies that keep you signed in and protect your session, and Captive staff who use the "view as client" support feature get a cookie that remembers that view.

Studio also saves a few preferences in your browser's local storage, such as the editor view you last used and notices you have dismissed.

Our marketing pages, such as the free migration page, use the Meta Pixel, an advertising tool from Meta Platforms, Inc. It sets cookies (one that identifies your browser to Meta, and, if you arrived from a Facebook or Instagram ad, one that records that click) and sends Meta information about your visit: the page, your browser and device, your IP address, and whether you sent a migration request. We use it to measure which of our ads lead to requests and to show our ads to people more likely to be interested. Meta may combine this with other information it holds about you and uses it under its own privacy policy.

Our marketing pages, the homepage you see when signed out, the free migration page, the blog and the pricing page, also load Google Tag Manager, a tool from Google LLC that runs the measurement and advertising tags we choose, such as Google Analytics and Google Ads conversion tracking. These tags may set cookies and send Google information about your visit: the page, your browser and device, your IP address, and whether you sent a migration request or a message through the homepage form. We use them to understand how visitors use these pages and which of our ads lead to requests. Google uses this information under its own privacy policy.

Neither the Meta Pixel nor Google Tag Manager runs inside the signed-in Captive Studio app, on the page where a client accepts their site, or on this page. Captive Studio does not run any other third-party analytics or tracking scripts.

To stop both, turn on Global Privacy Control in your browser (we load neither when it is on), block third-party cookies, or change your ad settings in your Facebook or Instagram account and your Google account.

• To provide Captive Studio: signing you in, saving and publishing your content, hosting your media, and running the features you use.
• To run the AI editor and describe images (section 6).
• To bill your subscription and any usage beyond your allowance, and to keep records of the terms you accepted.
• To send you service email: invitations, receipts, support replies, and notices about your account, your site, or these policies.
• To provide support, including Captive staff viewing your organization's dashboard when helping you.
• To keep the service secure and reliable: preventing abuse, limiting request rates, investigating problems, and alerting our team to failures and unusual usage.
• To answer a general inquiry and follow up about it.
• To respond to a migration request: to contact you about it, to decide whether we can take it on, to rebuild your site, to invite you to review it, and to follow up about it.
• To measure and improve our advertising, using the campaign details, Meta Pixel and Google tag information described above.
• To meet legal obligations and enforce our terms.

If your site has a shop, Studio stores the orders your customers place (their name, email address, phone number, shipping address, and what they bought) so that you can fulfil them and so that order emails can be sent. We process that information on your behalf and only to run your shop.

We do not sell your personal information for money. The ways we share it for advertising are the Meta Pixel and the Google tags on our marketing pages (section 3). Some privacy laws treat that as "selling" or "sharing" personal information; you can opt out as described in sections 3 and 10.

We share it only with service providers that help us run Captive Studio, under agreements that limit how they may use it:

• Clerk, for accounts, sign-in, and organization membership.
• Supabase, for our database.
• Vercel, for hosting the application and running its scheduled jobs.
• Bunny (bunny.net), for storing and delivering media files and site screenshots.
• Stripe, for subscription payments, usage billing, and, where your site has a shop, processing your customers' payments.
• Anthropic, for the AI editor and image descriptions.
• GitHub, where published site content is stored so that your website can be built from it.
• Resend, for sending email.
• Upstash, for rate limiting, which stores short-lived counters tied to account or network identifiers.
• HubSpot, where we keep migration requests and general inquiries and manage our follow-up.
• Slack, for internal notifications to Captive's team, such as a new site claim, a new migration request, a general inquiry (including its message), or a failed job, which can include a name, an email address, a website address, or an organization name.

Within your organization, the people you invite can see and edit your organization's content. Captive staff can access your organization's data when needed to provide support, maintain your site, or keep the service secure.

We may also disclose information when the law requires it, to protect the rights and safety of our clients, users, or Captive, or as part of a merger, acquisition, or sale of assets, in which case this policy would continue to apply to it.

When you use the AI editor, your messages, any images you attach, and the content of the page you are editing are sent to our AI provider, Anthropic, so it can propose edits. When you upload an image, a copy is sent to the same provider to draft its alt text, tags, and crop point.

Under the commercial terms that apply to our use of Anthropic's service, Anthropic does not use this content to train its models. Anthropic may keep it for a limited time, for example to detect misuse, as its terms describe.

AI suggestions can be wrong. Edits are saved as drafts for you to review, and nothing the AI proposes is published until someone in your organization publishes it.

We keep your account, organization, and site content for as long as your organization uses Captive Studio, and for a limited period afterward so that we can provide an export, resolve questions, and keep backups.

Media you delete goes to the trash first and is permanently deleted 30 days later, unless a page still uses it.

We keep billing records, the record of the terms you accepted, and support history for as long as we need them for accounting, tax, and legal purposes.

If you send a migration request and do not become a client, we keep the request until we no longer need it to follow up, and you can ask us to delete it at any time. A rebuilt copy of your site that you did not take on is deleted after we stop following up.

Our service providers keep logs for the periods their own policies set.

Studio is served over encrypted connections, access to each organization's data is limited to its members and to Captive staff who need it, sign-in is handled by a dedicated identity provider, and payment details stay with Stripe.

No service can promise perfect security. If we learn of a breach that affects your personal information, we will tell you as the law requires.

You can update your name, email address, and password in your account settings, and an organization's admins can remove people from it at any time.

You can choose not to use the AI editor and edit your content directly.

We send service email that you need in order to use Studio. We do not send marketing email to Captive Studio users.

If you send a migration request, we will email you about it, including a few follow-ups if you have not taken up your new site. Reply to any of them and ask us to stop, and we will.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing support@captivedemand.com. Depending on where you live, you may have further rights, such as to object to or restrict certain processing or to complain to a data protection authority.

You can opt out of the Meta Pixel and the Google tags at any time as described in section 3, or ask us by email not to use the information we already hold about you for advertising.

We will confirm who you are before acting on a request, and we may keep information we are required to keep by law. Deleting your account may also mean you can no longer use Studio for your organization.

If you are a customer of one of our clients' shops, please contact that business first; we will help it respond.

Captive Studio is a business tool for people 18 and over, and is not intended for children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

If we change this policy we will update the effective date at the top. If a change is significant, we will also tell you by email or in Captive Studio before it takes effect.

This is version 2026-11-02 of this policy.

Questions about this policy or your information: email support@captivedemand.com, or write to Airwalk Properties LLC (Captive Demand), 1015 W Kirkland Ave, Suite 200, Nashville, TN 37216.