Legal
Privacy
policy
Last updated: October 25, 2026
This policy explains what personal information Aully collects when you use aully.co, contact us, buy a website package, or work with us in the client portal, and what we do with it.
Who we are
Aully is a website studio and brand of Produktiv Agency Inc., a corporation incorporated in Ontario, Canada. Aully isn’t a separate company: Produktiv Agency Inc. operates Aully, is responsible for your personal information, and bills for Aully services. In this policy, “Aully”, “we”, and “us” mean Produktiv Agency Inc. operating as Aully.
Questions about this policy or your information can be sent to hello@aully.co.
What this policy covers
This policy covers our website at aully.co, the Aully client portal at aully.co/dashboard, and the website, hosting, and support services we provide. Websites we build for clients have their own privacy practices, which are the client’s responsibility.
Information we collect
When you contact us
Your name, company name, email address, phone number (optional), and your message.
When you buy a website package
Checkout is handled by Stripe on behalf of Produktiv Agency Inc., so payments, receipts, and card statements show Produktiv rather than Aully. We receive your name, business name, email address, phone number, billing address, your chosen package and page count, and for CMS websites your preferred platform. Stripe processes your card details; we never see or store your full card number. We keep a record of your order, the amount, and its payment status.
When you use the client portal
- Account details: your name, email address, and role. Passwords are stored in hashed form by our authentication provider; we can’t see them.
- Team members you invite: their name and email address.
- Project information: your answers to onboarding questionnaires (such as business details, industry, brand, copy, competitor and inspiration websites, page plans, domain, and technical setup), files you upload, requests, comments, review feedback, and approvals. The questionnaires ask you not to include passwords, and we ask that you never send them through the portal.
- Subscriptions: your hosting or support plan and its billing status. Billing details are managed by Stripe.
Automatically
- Our hosting provider records technical information such as your IP address, browser type, and the pages you request, which we use to run and secure the service.
- The website remembers your light or dark theme choice in your browser’s local storage. The client portal uses essential cookies to keep you signed in.
- We don’t use analytics, advertising cookies, or cross-site tracking.
How we use your information
- To reply to enquiries and recommend a scope.
- To provide the services you buy: planning, writing, design, development, hosting, and support.
- To process payments, issue invoices, and manage subscriptions.
- To run the client portal, including your account, your team’s access, and your project records.
- To send service emails such as account invitations, password resets, and project updates.
- To keep our services secure and prevent fraud or misuse.
- To meet legal, tax, and accounting obligations.
We don’t sell personal information. We don’t send marketing emails unless you’ve agreed to receive them, and you can unsubscribe at any time.
How we use AI
Aully uses AI tools, including ChatGPT (OpenAI) and Claude and Claude Code (Anthropic), to help produce imagery, front-end code, and written drafts, with our team directing and reviewing the work. To do that, we may give these tools project information you’ve shared with us, such as your business details, brand, and copy. When you draft a request in the client portal, the text you enter is also sent to OpenAI, through Vercel’s AI Gateway, to suggest a clearer request brief. We share only what’s needed for the task.
Please don’t include sensitive personal information in material you share for this purpose.
Where your information is stored
Client portal data, including accounts, questionnaire answers, and uploaded files, is stored with Supabase in North America. Our other service providers, such as Vercel, Stripe, Resend, OpenAI, and Anthropic, may process information in the United States and other countries. Where information is processed outside Canada, it may be subject to the laws of those countries, and we rely on these providers’ safeguards to protect it.
How long we keep it
- Enquiries that don’t become projects: up to 24 months.
- Client accounts and project records: while you’re a client, then as long as needed for tax, accounting, and legal purposes, generally 7 years.
- Payment records: as required by tax and accounting rules.
You can ask us to delete information sooner where we’re not required to keep it.
Your choices and rights
You can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw consent where we rely on it. To make a request, email hello@aully.co. We may need to confirm your identity first.
We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). If you’re not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada, or the privacy regulator where you live.
Security
We use access controls, encrypted connections, and reputable providers to protect your information. No system is completely secure, so please use a strong, unique password for your portal account and tell us right away if you think it’s been compromised.
Children
Our services are for businesses and aren’t directed to children. We don’t knowingly collect information from anyone under 16.
Changes to this policy
We’ll update this page when our practices change and change the date at the top. If changes are significant, we’ll let clients know by email or in the portal.
Let’s find the right
starting point.
