Privacy Policy

Who we are

Andeo is operated by Andeo LLC, 1701 PONCE DE LEON BLVD, STE 303, CORAL GABLES, FL 33134. You can contact us at hello@withandeo.com.

Our role

For account, website, billing, support, security, and service operations data, Andeo generally acts as the business or controller. For personal information that a customer chooses to collect through its own hosted widget or flow, the customer is generally responsible for deciding what is collected and why, and Andeo processes that data to provide the service.

If your information was submitted through an Andeo widget on a customer's site, contact that customer first about its privacy practices or data-rights requests.

Information we collect

• Account information: names, email addresses, account membership, roles, login/session data, API token metadata, and authentication events.
• Billing information: plan, subscription status, invoices, Stripe account identifiers, and payment metadata. Stripe processes payment card details.
• Customer content: prompts, instructions, code, app configuration, assets, uploaded files, domains, environment variables, secrets, and integration settings that customers provide.
• App records: form submissions, quiz answers, sessions, support requests, issued codes, end-user choices, and similar records collected by customer-configured widgets or flows.
• Analytics and logs: event names, paths, timestamps, request identifiers, session identifiers, hostnames, device/browser metadata, IP-derived request metadata, errors, performance data, and usage data.
• Support and communications: emails, support messages, feedback, and related troubleshooting details.
• Integration data: information received from connected tools or platforms, such as GitHub repositories or commerce data from Shopify when a customer connects those services.

How we use information

• Provide, host, publish, secure, monitor, and support Andeo.
• Preview, run, measure, test, improve, back up, and roll back customer widgets and flows.
• Authenticate users, manage accounts, send transactional emails, and prevent abuse.
• Process subscriptions, billing, renewals, cancellations, taxes, and invoices through Stripe.
• Analyze usage, errors, and performance so customers can understand how their widgets and flows perform.
• Debug incidents, enforce our Terms, protect the service, and comply with law.
• Improve the service, product experience, documentation, and support.

We do not sell customer content or customer app records. We do not use customer content to train AI models unless a customer has separately authorized that use.

Cookies, local storage, and consent

We may use cookies, local storage, and similar technologies for authentication, account settings, security, analytics, and service operation. Customers are responsible for providing any privacy notices, cookie notices, consent banners, or opt-out controls required for the widgets and flows they place on their own sites.

How we disclose information

We disclose information only as needed to provide and protect the service, comply with law, or as directed by customers. Current service providers and subprocessors include Cloudflare, Stripe, Cloudflare Email, OpenAI, and GitHub.

Customers may also connect third-party services. When they do, information may be shared with those services according to the customer's configuration and the third party's terms.

Shopify and commerce integrations

If a customer connects Shopify or uses an Andeo Shopify integration, we may process shop, product, collection, order, customer, storefront, and related commerce data depending on the permissions granted and the widget or flow the customer configures. If a customer builds or distributes its own Shopify app, the customer is responsible for implementing the privacy compliance endpoints and webhooks Shopify requires for that app, including customer data requests, customer redaction, and shop redaction.

Sensitive and regulated data

Andeo is not designed to collect or process sensitive or regulated data unless we expressly agree in writing. Customers should not use Andeo to collect payment card numbers, CVV/CVC codes, bank credentials, government IDs, health or medical information, children's data, precise geolocation, biometric or genetic data, criminal records, race, ethnicity, religion, political views, union membership, sex life, sexual orientation, passwords, API keys, or authentication secrets from end users.

Retention

Customers may export or delete data during their subscription using available product controls or by contacting us. After cancellation or termination, we may keep customer content and app records for up to 30 days so the customer can export or restore data, unless a shorter period is required for security, abuse prevention, legal compliance, or customer request. We may retain logs, backups, billing records, security records, and aggregated or de-identified data for longer where reasonably needed.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or to object to certain processing. You can contact us at hello@withandeo.com. If your request concerns data an Andeo customer collected through its widget or flow, we may direct you to that customer.

Security

We use reasonable technical and organizational measures designed to protect information. No internet service can guarantee complete security.

Changes and contact

We may update this policy as the service changes. If we make material changes, we will take reasonable steps to notify customers. Questions can be sent to hello@withandeo.com or Andeo LLC, 1701 PONCE DE LEON BLVD, STE 303, CORAL GABLES, FL 33134.