Privacy Policy

Last Updated: September 28, 2026

Connected Spaces LLC ("Connected Spaces," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Data We Collect

We collect information you provide directly to us and information we collect automatically when you use our services.

Information You Provide

  • Account registration data: name, email address, business name, and password

  • Contact form submissions: name, email, phone number, and message content

  • Phone number: provided for account verification, two-factor authentication, or transactional SMS/WhatsApp notifications

  • Billing information: payment method details processed securely through Stripe

  • Business data you upload or create within your Connected Spaces workspace

Information Collected Automatically

  • Technical request data: IP address, browser type, and operating system, used to deliver the site, keep it secure, and limit abuse

  • Essential cookies, as described in section 6

  • Optional first-party measurement, only if you choose Allow measurement: the campaign details in the link that brought you to our site (such as UTM parameters and ad identifiers), the page you landed on, the referring page, and a limited set of named website-interaction events, as described in section 6

2. How We Use Your Data

We use the information we collect to:

  • Provide, operate, and maintain our platform and services

  • Process transactions and send related billing communications

  • Respond to your comments, questions, and customer support requests

  • Send technical notices, updates, security alerts, and administrative messages

  • With your permission, understand which campaigns and website interactions lead people to contact us, so we can improve our marketing and website

  • Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your business data to train AI models without your explicit consent.

3. SMS & WhatsApp Messaging

Connected Spaces may send you SMS or WhatsApp messages when you provide your phone number and consent to receive them. By providing your phone number and opting in, you agree to receive the following types of messages:

Types of Messages

  • Verification codes — One-time passwords (OTP) for account verification, phone number confirmation, and two-factor authentication

  • Transactional notifications — Task approval requests, payment confirmations, and service alerts related to your account activity

  • Security alerts — Password reset codes, unusual activity notifications, and account security messages

Consent & Opt-Out

  • Consent: You consent to receiving SMS/WhatsApp messages when you provide your phone number during account registration, phone verification, or notification preferences setup. Consent is not a condition of purchase.

  • Opt-out: You may opt out of SMS/WhatsApp messages at any time by replying STOP to any message, updating your notification preferences in your account settings, or contacting us at hello@connectedspaces.earth. Opting out of verification messages may limit your ability to use certain security features.

  • Frequency: Message frequency varies based on your account activity. Verification codes are sent only when you initiate a verification request. Transactional notifications are limited to actions you perform or that directly affect your account.

  • Costs: Message and data rates may apply depending on your mobile carrier plan. Connected Spaces does not charge for SMS/WhatsApp messages.

Phone Number Data

  • Your phone number is stored securely in our database and transmitted to Twilio solely for the purpose of delivering messages you have requested or consented to.

  • We do not sell, rent, or share your phone number with third parties for marketing purposes.

  • We do not use your phone number for promotional or marketing messages.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required by law to retain it longer.

Business data you create within the platform (your digital assets) remains yours. Upon account termination, we will provide an export of your data in a standard format before deletion.

5. Third-Party Services

We use the following third-party services which may receive certain data as necessary to operate:

  • Stripe— Payment processing. Stripe's privacy policy governs how payment data is handled. We do not store full card numbers on our servers.

  • Vercel — Website hosting. If you choose Allow measurement, our servers also send a limited set of named website-interaction events to Vercel Web Analytics. Automatic pageview collection is turned off, form contents are not included, and nothing is sent to Vercel Web Analytics before you allow it or after you choose Essential only.

  • OpenAI / Google — AI capabilities. Prompts and responses may be transmitted to AI providers subject to their data processing agreements.

  • MongoDB Atlas — Database hosting with encryption at rest and in transit.

  • Twilio — SMS and WhatsApp messaging. When you provide a phone number for verification or transactional notifications, your phone number is transmitted to Twilio for message delivery. Twilio processes this data under their Privacy Policy. We do not use Twilio for marketing or promotional messages.

Each third-party provider is contractually required to protect your data in accordance with applicable privacy laws.

6. Cookies and Optional Measurement

Essential cookies

  • Authentication and session cookies that keep you signed in and protect your account.

  • cnx_privacy_preferences — remembers whether you chose Allow measurement or Essential only. It holds that choice, a random identifier that is not linked to your account, and a signature that lets our server check the choice has not been altered. It expires after about six months (180 days).

  • cnx_partner_ref— set only when you arrive through a partner link. It holds an opaque reference so the partner's referral can be credited, and expires after 30 days.

Optional first-party measurement

Optional measurement is off until you choose Allow measurement. Only after that choice does our server set cnx_attribution_journey, a first-party cookie that scripts on the page cannot read. It links your visits to this site with the campaign details from the link that brought you here, and expires after 30 days. With the same permission, our servers send a limited set of named website-interaction events to Vercel Web Analytics. Our server checks your current choice before each measurement, so a change of choice applies from that point on.

What we do not do

We do not load advertising pixels, use cross-site advertising cookies, send your website activity or enquiries to advertising platforms through server-to-server conversion uploads, or upload customer or contact lists to build advertising audiences. Advertising platforms report their own ad delivery to us; we measure visits on our own site only with your permission.

Changing your choice

Use the Privacy choices button shown in the lower-left corner of every page, then choose Allow measurement or Essential only. Choosing Essential only stops optional measurement and deletes the cnx_attribution_journey cookie from your browser.

You can also configure your browser to refuse cookies, but this may prevent some features of our platform from working correctly.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you

  • Correction — Request that we correct inaccurate data

  • Deletion — Request that we delete your personal data

  • Portability — Request an export of your data in a standard format

  • Objection — Object to processing of your data in certain circumstances

To exercise any of these rights, contact us at the address below.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date and, where appropriate, by sending you an email notification. Continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Connected Spaces LLC

Phoenix, AZ

Email: hello@connectedspaces.earth