Legal
Privacy Policy
Last updated 24 August 2026. This describes what Casso Websites actually collects and who it goes to. It is deliberately specific rather than generic.
Who we are
Casso Websites is a sole-proprietor business operated by Jon York, 40 Belknap Road, West Hartford, CT 06117, United States. Questions about anything on this page: casso@casso-websites.com.
What we collect
Your email address and what you tell us
When you email Casso or use a form on this site, we keep your email address and the content of your messages, including any files you attach and anything you tell us about your business. That content is what the site gets built from, so we keep it for as long as your site exists.
Your website and its files
The pages, text and images that make up your site are stored so we can serve them to the public.
Payment details — not by us
Payments run through Stripe. Card numbers are entered on Stripe's own checkout page and Casso never sees or stores them. We see your email address, whether a payment succeeded, and when the subscription renews.
Website analytics
This site records page views using our own first-party analytics. It sets no cookies. The visitor identifier is a truncated one-way hash of your IP address, your browser's user-agent string and a secret that is regenerated every day, which means the same visitor can be counted twice in one day but cannot be followed from one day to the next. We also record the page you were on, the referring site, and whether you are on a phone.
Google Analytics
This site also loads Google Analytics (measurement ID G-W1P3C4C9ZT), which is a Google product and does set its own identifiers. If you would rather it did not run, a tracker blocker or Google's own opt-out add-on will stop it. Our own analytics above are unaffected either way.
Who your data is shared with
We do not sell your data and we do not share it for advertising. We use these providers to run the service, and your data reaches them only for that purpose:
OpenAI
Your messages and the description of your business are sent to OpenAI's API, which is the model that writes and edits your website. This is unavoidable — it is how the product works.
LangSmith (LangChain)
We record traces of the agent's runs, which include the message content above, so that we can debug builds that go wrong.
HubSpot
Email conversations with Casso are stored in HubSpot, which is our inbox and customer record.
Amazon Web Services
Hosting, storage, the domain registry and the database. Your site and your account record live here.
Stripe
Payments and subscriptions.
Resend and Amazon SES
Delivery of the emails we send you.
Tavily and Unsplash
Web search and stock photography used while building a site. Neither receives your personal details.
Email you get from us
We send you email about your own site — the link when it is built, payment confirmations, and replies to what you write to us. Every commercial message we send carries a one-click unsubscribe link and our postal address. If you unsubscribe, or simply reply asking us to stop, we record it and we do not email you again. That is permanent and we do not need a reason.
How long we keep things
Your site, your account record and your conversation history stay until you ask us to delete them. Analytics records are kept as counts and cannot be traced back to a person after the day they were recorded. Records we are required to keep for tax or accounting reasons — essentially, Stripe's record that a payment happened — we keep for as long as the law requires.
Your choices
Email casso@casso-websites.com and we will tell you what we hold about you, correct it, or delete it and take your site down. We will not ask you to justify the request. If you are in the UK, the EU or a US state with its own privacy law, those rights are yours by statute and this is how you exercise them.
Children
Casso is a service for businesses and is not directed at children under 13. We do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for anything significant, email people who have an active site.