Privacy Policy
Effective: June 7, 2026
Design and Biz, LLC ("Design and Biz," "we," "our," or "us") respects your privacy. This Privacy Policy describes what information we collect when you visit www.designandbiz.com or use our services, how we use it, and the choices you have.
If you have questions, contact us at privacy@designandbiz.com or write to Design and Biz, LLC, Westchester County, NY.
Information we collect
Information you give us directly. When you fill out our contact form, sign up for our cost sheet, or engage us for advisory services, we collect the information you provide — typically your name, email address, phone number, project address, and project details.
Information our AI tools collect. When you use CostWut, PermitWut, RiskWut, or WattsWut, you enter your property address and project information. The tools transmit this input to Anthropic (the company behind the Claude AI model) for processing, then return the results to you. By default, Anthropic does not use API inputs or outputs to train its models, and automatically deletes API inputs and outputs from its backend within 30 days. We do not sell your address or project details to contractors, vendors, or third parties.
Information automatically collected. When you visit our site, we and our service providers collect technical information including IP address, browser type, device type, pages visited, referring URL, and timestamps. We use Google Analytics or similar tools for this, which place cookies in your browser.
How we use your information
We use the information we collect to:
- Respond to your inquiries and provide the services you've requested
- Send you the cost sheet, blog posts, and other materials you've signed up for
- Operate and improve our website and AI tools
- Communicate with you about our services (you can opt out of marketing emails at any time)
- Comply with legal obligations
We do not sell your personal information.
Who we share information with
We share information only with the third-party service providers that help us operate the business. Each acts as a data processor on our behalf, under a Data Processing Addendum that limits how they use your data.
- Squarespace — hosts our main website (designandbiz.com), captures standard web access data, and sets cookies for site functionality and analytics. Our contact form is embedded from Kit and submissions do not pass through Squarespace's native form system. See: Squarespace Privacy Policy.
- Netlify — hosts the front-end of our four AI tools (CostWut, PermitWut, RiskWut, and WattsWut). When you use a tool, your browser request passes through Netlify's infrastructure on its way to our AI provider. Netlify captures standard web server logs (IP address, request timestamps, browser type). Netlify maintains SOC 2 Type II and ISO 27001 certifications. See: Netlify Privacy Policy.
- Anthropic, Inc. — powers our four AI tools through the Claude API. When you use a tool, your property address and project inputs are sent to Anthropic to generate the analysis. By default, Anthropic does not use API inputs or outputs to train its models, and automatically deletes them from its backend within 30 days. Anthropic maintains SOC 2 Type II and ISO 27001 certifications. See: Anthropic Privacy Policy and Anthropic DPA.
- Twilio SendGrid — delivers emails, including the full AI tool reports when you request them. SendGrid receives your email address, the content of the email we send, and standard delivery and engagement metadata (opens, clicks, bounces, IP address, approximate location). Stored on Twilio's U.S.-based servers. Twilio maintains SOC 2 Type II and ISO 27001 certifications. SendGrid does not sell your email address or use the content of our messages to market to you. See: Twilio Privacy Notice and Twilio DPA.
- Kit (formerly ConvertKit) — delivers downloadable resources (like our Westchester Renovation Cost Sheet), manages our email subscriber list, sends our welcome email sequence and ongoing newsletter, and powers our contact form. Kit receives your email address, any form fields you submit, your email engagement data, and your IP address (for opt-in compliance). Stored on Kit's U.S.-based servers. Kit does not sell your data or use it to market its own products to you. You may request deletion at any time through Kit's right-to-be-forgotten form. See: Kit Privacy Policy and Kit DPA.
- Professional advisors — attorneys, accountants, and insurers, as needed for the operation of the business.
We may also share information when required by law (subpoena, court order) or to protect our legal rights.
Where your data is stored
All of our third-party service providers store data on servers located in the United States. This includes our website host (Squarespace), our AI tool host (Netlify), our AI provider (Anthropic), our email delivery service (Twilio SendGrid), and our email marketing platform (Kit). International transfers (from the EU/UK/Switzerland to the U.S.) are governed by each provider's certification under the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or both. We do not control the specific data center region within the U.S. for any of these providers.
Cookies and tracking
We use cookies to make the site work and to understand how visitors use it. You can disable cookies in your browser settings, but some site functionality may not work without them.
Your rights
For all visitors. You can request a copy of the personal information we have about you, ask us to correct it, or ask us to delete it. Email privacy@designandbiz.com with your request.
California residents. Under the California Consumer Privacy Act (CCPA), you have specific rights to know what personal information we collect, request deletion, opt out of any sale of personal information (we don't sell personal information), and not be discriminated against for exercising these rights.
New York residents. Under the NY SHIELD Act, we maintain reasonable administrative, technical, and physical safeguards to protect your personal information. If a breach occurs, we will notify affected New York residents as required by law.
How we protect your information
We use reasonable physical, technical, and administrative measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, but we take this seriously.
Data retention
We retain personal information for as long as your relationship with us is active, and afterward for the periods required by tax, legal, and accounting obligations. You can request deletion at any time.
Children's privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.
Third-party links
Our site links to external resources including the Google review platform, Trustpilot, government code databases, and trade publications. Their privacy practices are governed by their own policies, not ours.
Changes to this policy
We may update this Privacy Policy from time to time. We'll post the updated version here and update the effective date at the top. If the changes are material, we'll notify you by email if we have your email address.
Contact us
Privacy questions: privacy@designandbiz.com
General inquiries: info@designandbiz.com
Phone: (646) 801-8474