Privacy Policy for SubjectsRemoved.com and veykhostagent.ai

Version: Beta 1.2

Effective date: 3 November 2026

Who handles your information

ACB Zero Ventures Inc. is the seller and operates both services. This policy covers people requesting access, builder users and visitors who browse, chat or send inquiries on a site created with the service. The host or real estate professional operating that site receives inquiries and decides how to follow up. You can contact the site owner through their site. To reach ACB Zero Ventures Inc. about the platform, use Contact on this page.

When you use a builder

Invitations and accounts. When you request early access, we save your email, the browser description and the referring page your browser supplies. We use them to manage requests and invitations and protect the form against abuse. Sign-in uses your email and essential session cookies. For new accounts the service records the time and version of the terms accepted. A request for access or a sign-in code is separate from consent to promotional email.
Your content. We store what you submit to create, revise, preview and publish your site. This can include text, photos, spoken input or its transcript, property facts, location and pricing. For real estate it can include professional contact and brokerage details, listing information, listing sheets and forwarded listing emails. If you request an import, the service reads the source you specify. Avoid including personal information you do not have permission to supply.
Calendar and domain tools. If a host connects an availability calendar, our server reads its feed. The upstream feed may include event names or other details. The calendar response shows dates and a generic booking label. Connecting a domain uses the hostname and verification records. If domain registration is available and you choose it, the registrar and relevant registry may need registrant contact details.
Builder use and support. We process account identifiers, feature use, technical and error events, browser and network information, support requests and reports to operate, secure and improve the service. Builder session recordings start only if you say yes. The recorder masks input and page text. Essential sign-in and service notices are separate from promotional messages.

When you visit a customer’s site

Enquiries: The service saves the contact details, message and other fields you submit. These may include dates and party size for a stay, or a listing, buying or selling plans, timeline and contact preferences for real estate. A valuation request may also include a property address. If another website led you here, we may store which website it was and any campaign tag, never the page the visitor was on at that referring website. Do Not Track suppresses this attribution. The inquiry you submit still goes to the site owner. Where configured, we keep a salted hash of your network address to help investigate abuse.
Guest chat and replies. We can store your questions and the assistant's answers. If you ask the assistant to pass a message to the owner, your submitted chat and contact details may accompany it. The owner can add notes and tasks, export inquiries, and receive a copy in their email or a CRM they have chosen. The service may send an acknowledgement to you and reminders to the owner. When the owner asks for an AI-assisted reply, the provider may receive the site name, first names and part of your message. The owner reviews the proposed reply and chooses whether to send it.
Contact permission. A real estate form can record the contact permission and wording submitted, and when it was submitted. A request for a reply concerns that inquiry. It does not by itself authorize unrelated marketing.
Visits: Where visitor analytics are enabled, we count activity (pages viewed, which site they came from, how long they stay, enquiry clicks). A random visitor number stored on the device helps distinguish repeat visits. Our analytics provider receives the IP address. Do Not Track stops these counts. With Global Privacy Control only the page view is counted. Interactive maps or links opened directly with a map provider can disclose the device’s IP address to that provider.
Private previews. An owner testing a form on an owner-private site can trigger a test email to the owner. That path does not create a visitor inquiry or send the visitor a confirmation.

Service providers and cross-border processing

Features use different providers. We do not sell personal information. We use personal information to provide requested services, deliver notices, protect the service, respond to requests and meet legal obligations. We do not use it to train our own general-purpose AI models.

Supabase provides authentication, databases and object storage. Vercel hosts the builders and applicable sites. Cloudflare can serve sites, store site bundles, check DNS, and participate in domain registration. Requests to the site host include network information. Registrant disclosures depend on the extension and registry.
Resend delivers inquiry notices, visitor acknowledgements and enabled CRM copies, and can receive forwarded listing emails. These messages may include names, contact details, messages and submitted chat. The owner controls their recipient addresses and any copies they retain outside the platform.
Fireworks, OpenRouter, Anthropic, OpenAI, Google and xAI are available AI providers. Depending on the feature and provider route, they may process text, submitted photos or transcripts for website creation, chat, analysis or suggested replies. Deepgram can transcribe microphone input. ElevenLabs can produce spoken audio from text.
Firecrawl reads sources selected for import. Browserless can take screenshots of draft pages for design checks. Google Maps Platform and OpenStreetMap Nominatim or map services can receive location queries. Visitors who open interactive maps connect to the relevant provider.
PostHog receives analytics and feature-switch events, and may receive masked builder session recordings if you say yes. Sentry processes error reports. Upstash handles rate limiting. AgentMail handles operations/support mail routed to it. Where enabled, Render can host operations processing, and xAI can assist with triage of support reports after contact details are masked. A route used for synthetic CRM tests is separate from the owner’s chosen CRM.
Service providers may process information outside Canada, including in the United States. Information may be accessible to authorities under the laws where it is processed. ACB Zero Ventures Inc. remains responsible for personal information under its control. We may also disclose information when legally required, to address misuse or protect safety, or in a business transfer subject to applicable law.

Retention and deletion

Visitor enquiries and guest chats: They are normally kept until the site owner deletes them or deletes the account. The first review is due about 90 days after arrival. Nothing is deleted without the owner's yes in that review. If the owner does not answer, the next review is in about 90 days. If the owner chooses Keep, the next review is in a year. Deleting an inquiry removes its linked inquiry notes and tasks. Mail, exported files and copies in the owner's own CRM have their own retention. Contact the owner about those copies.
We use waitlist information to manage access requests. We keep account and site information while needed to operate the account. RE valuation casework, support, analytics, security logs and backup copies have separate operational purposes. We limit retention to those purposes and applicable legal requirements. Ask us about the information involved in a specific request.
Use Download my content before deleting your account. Deliberate deletion removes hosted sites, stored site files and account records from the active service as it completes. Backups and records required by law may persist separately. A backup is not an account recovery service.

Your choices, concerns and changes

ACB Zero Ventures Inc. monitors the Contact address on this page for pilot privacy and abuse reports. Use it to ask our privacy lead about access, correction, copies, withdrawal of consent, deletion or a complaint. Identify the site or account involved and what you want us to review. We may verify your identity before acting. We will explain applicable limits, including legal retention requirements, effects of withdrawal and the rights of others. Your privacy rights also apply to personal information contained in generated material.

We use safeguards to limit access and address security incidents. We notify people and regulators when the law requires it. We will explain material policy changes to affected users and seek any consent the change requires. Affected individuals can also contact the privacy authority with jurisdiction, including the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.