Connector privacy notice

When you use a connector through an AI assistant such as Muse, we receive the requests and tool inputs that assistant sends on your behalf: for example the website address you ask about, the change you want, or an email address you choose to give for a “your website is ready” notice. We don’t receive your conversation with the assistant beyond what it sends to a tool.

To answer those requests we collect publicly available content from the websites you ask about, and search and AI-answer data about them from our data provider. If you use an access key, we link your requests to that key’s account. Without a key, you use the connector as a guest under a signed, anonymous session.

This replaces, for the connectors, the statement in our general policy that we don’t collect information from third parties.

Only to fulfil your requests and to operate, secure, support and improve the connectors. We don’t sell information received through the connectors, use it for advertising, build profiles unrelated to your requests, infer sensitive characteristics, or use it to train AI models.

No cookies or tracking technologies are used on connector requests.

Service providers that process it for us, only to run the connectors:

• Vercel: hosting, and the AI Gateway, which sends prompts to our model provider (currently Anthropic). Inputs aren’t used to train models.
• Neon: our database, in the United States.
• DataForSEO: the domains and keywords being researched, to return search and AI-answer data.

When you ask for a new website, we send your current website’s address, an anonymous ID for your account (never your access key) and, only if you give it, your email address to Yoink, Dance’s website builder. When you approve a change to a website, we send that change only to the website system its owner connected.

We may also disclose information if the law requires it, or as part of a business transfer described in our general policy.

Guest research about public websites is kept for 14 days. Research, proposals and change history for an access key’s account are kept while the key is active. When a key is revoked or you ask us to delete your data, we delete it or make it inaccessible within 30 days, except records of website changes we must keep for security or legal reasons.

Revoking a website connection deletes its stored credential immediately. Report, preview and approval links expire.

Connections are encrypted in transit. Access keys are stored only as one-way fingerprints, guest sessions are signed, and website credentials are encrypted at rest (AES-256-GCM). Each account’s data is kept separate from others, and website connections only get the permissions they need. Content fetched from websites is treated as information, never as instructions.

To access or delete your data, or with any privacy question, email privacy@startdancing.ai. To report a security issue, email admin@startdancing.ai with “Security” in the subject. The rights described in our general policy apply here too.