Last updated October 12, 2026
Who is responsible
Aha Studio is run by KISS Internet Marketing Co. Ltd (Anthony Hayes), 391/47 Moo 10, Thappraya Road, Soi 15, Nongprue, Banglamung, Chon Buri 20150, Thailand. For anything about your data, email support@anthonyhayes.me or use the help desk at anthonyhayes.ladesk.com.
What we collect
- Your account: your email address and your password. Passwords are stored only as a salted scrypt hash, never in readable form.
- Your profile: what you choose to add, such as your name, bio, credentials, contact email, location, writing samples, brand colour and call to action.
- Your work: what you enter into the AI workers (business details, keywords, websites, notes) and what they produce (pages, articles, plans, calculators, images).
- Connections you add: your licence key, WordPress application passwords, Netlify token and any AI provider key of your own. These are stored encrypted, and your AI key is never shown back to your browser.
- Demo emails: if you enter your email on a free demo to keep what it built, we store it with that build and email you the link.
- Technical data: we do not store IP addresses. We keep a one-way hash of them to apply fair-use limits and stop abuse.
- Refund window:if you choose to unlock your full allowance early, we record your account email, your purchase date, the time, the statement you agreed to, a hash of your IP address and your browser's user agent, as a record of that choice.
Payments are handled by our checkout provider, Zaxaa, through PayPal. We do not receive or store your card details.
Your visitors' data
When you publish lead forms or calculators made with Aha Studio, we process your visitors' data on your behalf. For each lead we store what the visitor submits (for example name, email, phone, message, or their calculator answers), the page it came from and a hash of their IP address, and we send it to the email address and any webhook you set. Calculator answers are sent to an AI provider to write the visitor's personal report. You are responsible for telling your visitors how you use their data, and for having a lawful basis to collect it. Forms use spam protection and rate limits.
Who we share data with
We only send data to the services that do the work you ask for:
| AI providers | OpenAI, Anthropic, Google Gemini and OpenRouter (or the provider of your own key) receive the prompts built from your inputs, and your visitors' calculator answers, to write content and reports. Image models receive image prompts. |
|---|---|
| Search data | DataForSEO receives the keywords and countries you research (including YouTube searches); Ahrefs receives domain names to look up their authority. |
| Maps | OpenStreetMap (Nominatim) receives neighborhood and city names to place maps. |
| Resend delivers the emails we send you (and lead notifications to you). | |
| Licences | Our licence server receives your licence key and an account identifier to check your plan. |
| Publishing | WordPress sites and Netlify accounts you connect receive your content and the credentials you gave for them. |
| Websites you enter | When you give us a web address (yours, a competitor's, a sales page), our server reads that page. |
| Hosting | The app and its database run on Railway, in the United States (US West). |
We do not sell your data, and we do not use it for advertising.
Cookies and tracking
We set one cookie, to keep you signed in (it lasts up to 30 days and works across the Aha Studio subdomains). We do not use analytics or advertising trackers. Our pages load the Sora font from Google Fonts, so your browser connects to Google to fetch it. Pages built by Site Sniper embed YouTube videos in YouTube's privacy-enhanced mode, and Neighborhood Pages can show an OpenStreetMap map.
How long we keep it
We keep your account data and your work for as long as your account is active, so you can come back to it. Leads stay available to you until you ask us to delete them. Ask us at any time and we will delete your account and its data.
Your choices
- Remove your licence key, AI key, Netlify token, WordPress sites and images yourself from the app at any time.
- Download your leads as a CSV from the leads panel.
- To get a copy of your data, correct it, or delete your account, email support@anthonyhayes.me.
Changes
If we change how we handle your data in a way that matters, we will update this page and tell you by email or in the app.