Privacy Policy

Last updated: October 7, 2026

If you have a SuiteRoad account If you chatted on a SuiteRoad page Your rights Contact

SuiteRoad is operated by GRAMPSAID LLC, Wyoming, United States ("we", "us"). This policy explains how we handle personal data on SuiteRoad. It covers two groups of people: creators who use SuiteRoad to run a page, and visitors who chat on those pages.

1. Creators (account holders)

What we collect

Account: email, password (stored only as a salted hash), or your Google account email if you sign in with Google; your dashboard language.
Your page: name, role, photo, the voice and answers you write, buttons and links, colours.
From Instagram: when you enter your handle, we read its public profile (name, photo, bio, category, public links and contact details, recent captions) to pre-fill your page.
Billing: handled by Stripe. We receive your plan status and a customer reference, never your card number.
Technical: IP address and device information in security logs, used to protect accounts and prevent abuse.

Why, and on what basis

To provide the service you signed up for (contract).
To secure the service, prevent fraud and abuse, and enforce plan limits (legitimate interests).
To send account emails you need, such as password resets and lead notifications (contract). We don't send marketing emails without your consent.
To meet legal obligations, such as tax records for payments.

2. Visitors of SuiteRoad pages

Each SuiteRoad page belongs to a creator. The creator decides why your data is collected and what happens to it (the "controller"); SuiteRoad processes it on their behalf. For questions or deletion requests about your details, contact the creator first, or write to us and we'll forward or help.

What is collected when you use a page

Your messages and the assistant's replies, and the buttons you tap or links you open, so the creator can read the conversation.
Contact details you choose to share, for example an email, phone or WhatsApp number, or Instagram handle, typed in the chat or a form. These are shown to the creator as a "lead".
Visit statistics: your IP address, the approximate country, region and city derived from it, your network provider, device type, system and browser, the app you came from (for example Instagram), browser language, screen size, the link or campaign that brought you, how long the page stayed open, and a random visitor ID stored on your device so repeat visits are grouped. We don't use advertising cookies or cross-site trackers.

Creators see the conversations, leads and summary statistics of their own page. They don't see visitors' IP addresses. We use visit statistics to run, secure and improve SuiteRoad (legitimate interests).

Visiting suiteroad.com

When you browse our own website (for example the home page, sign-up or pricing), we record the same kind of visit statistics: IP address and approximate location, device, browser and language, the pages you view and how long they're open, the link or campaign that brought you, and a few steps such as starting a sign-up or checkout. This tells us how people find SuiteRoad and where the site can be clearer (legitimate interests). It's collected by our own server, not by an outside analytics or advertising company.

Please don't share sensitive information (health, financial or ID details) in a chat.

AI replies

To answer you, your messages are sent to our AI provider, Anthropic, which processes them to generate the reply and does not use them to train its models under our commercial terms.

3. Who we share data with

We don't sell personal data. We use these service providers, bound by data processing terms:

Anthropic, AI replies and drafting your page (USA).
Stripe, payments (USA/EU).
Hosting provider, the servers that run SuiteRoad.
Email provider, for account and lead emails.
Google, only if you choose "Continue with Google".

We may disclose data if required by law or to protect people's safety or our rights.

4. International transfers

Some providers are in the United States. Where data from the EU or Morocco is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep data

Account and page data: while your account is open. Deleting your account erases your page, conversations and leads.
Visitor conversations: 12 months after the last message, then deleted automatically, or sooner if the creator deletes their account.
Leads (contact details a visitor chose to leave): until the creator deletes them or their account.
Visit statistics: the full IP address is kept for 30 days, then shortened so it no longer identifies a device (for example 203.0.113.0). The rest of the visit record is deleted after 13 months.
Security logs: up to 90 days. Billing records: as long as tax law requires.

6. Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. Creators can export leads and delete their account themselves in Settings. Visitors can ask the creator, or write to us at support@suiteroad.com. If you're in the EU you can complain to your data protection authority; in Morocco, to the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), under law 09-08.

7. Security

We use encrypted connections (HTTPS), hashed passwords, signed session cookies, access controls and rate limits. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires.

8. Children

SuiteRoad isn't for children under 16, and we don't knowingly collect their data. If you believe a child has shared data with us, contact us and we'll delete it.

9. Cookies and local storage

Creators: one essential cookie keeps you logged in. Visitors: the page stores a random visitor ID and your current chat on your device, so the conversation survives a refresh. The chat on your device is cleared after 30 minutes without a message. Our website and SuiteRoad pages also keep a random visit ID in your browser's local storage so the pages you view in one sitting count as one visit; it starts fresh after 30 minutes of inactivity. No advertising cookies are set, and nothing is shared with advertising networks.

Approximate locations come from IP Geolocation by DB-IP, used under the Creative Commons Attribution 4.0 licence. The lookup happens on our server; your IP address isn't sent to DB-IP.

10. Changes

We'll post updates here and, for important changes, tell creators by email or in the app.

11. Contact

GRAMPSAID LLC · Wyoming, United States · support@suiteroad.com