Version 1.0 · In force 8 October 2026
This policy was written in-house, based on a review of what the product actually does rather than on a template. It is not legal advice, and it has not been reviewed by a qualified lawyer. If anything here conflicts with your statutory rights, your statutory rights win.
The short version
NichoAI sets no advertising cookies, no analytics cookies, and runs no tracking scripts of any kind. It stores two things in your browser, both because the product cannot work without them: the session that keeps you signed in, and a referral code if you arrived through a partner link. That is why there is no cookie banner — there is nothing to consent to.
Two outside services do receive your IP address when their content loads: OpenStreetMap on the lead-finding map, and Pexels for the photographs on generated sites. Typefaces used to be a third; since 8 October 2026 they are served from our own servers instead of Google’s. Both are listed below.
Incomplete. A trader selling at a distance has to publish a legal name and a geographic address, and these are missing. Fill them in at src/config/legal.js before relying on these pages.
Who you are dealing with
NichoAI is a trading name. It is not a registered company, so the contract is with the individual named above and there is no limited liability behind it.
This policy covers nichoai.com and the signed-in application. It also describes what the websites generated with NichoAI load, because those are published by our partners for their own clients and the question comes up.
No cookies are set by this application. The storage below uses the browser’s localStorage rather than HTTP cookies. The legal test is the same either way — it is storage on your device — so it is disclosed the same way.
| What | Why | How long | Needs consent? |
|---|---|---|---|
| Sign-in session (set by Base44, our hosting and authentication provider) | Keeps you signed in between pages. Without it you would be signed out on every click. | Until you sign out or it expires | No — strictly necessary for a service you asked for |
nicho_ref | Remembers the partner referral code from a ?ref= link so the referral can still be credited after you have gone through sign-up. It is a code identifying the partner, not you. | Until sign-up completes, then deleted | No — strictly necessary to deliver the referral you followed |
| Admin console display preferences | Remembers figures typed into the internal cost calculator. Only ever set for an administrator. | Until cleared | No — not set for ordinary visitors |
You can clear all of it at any time through your browser’s “clear site data”. Clearing the session signs you out; nothing else breaks.
A code and dependency audit on 8 October 2026 found no Google Analytics, Google Tag Manager, Meta/Facebook Pixel, TikTok Pixel, Hotjar, Microsoft Clarity, Mixpanel, PostHog, Segment, or any comparable measurement or advertising script. No cross-site tracking, no advertising identifiers, no profiling, and no sale or sharing of personal data for advertising.
If that ever changes, this page and the consent position change with it. Adding analytics that are not strictly necessary would require asking for consent first.
Loading anything from another company’s server tells that company your IP address, because that is how the internet delivers the file. No consent banner covers this, and no setting switches it off, so it is listed plainly instead.
fonts.googleapis.com, which disclosed each visitor’s IP address to Google. The same files are now served from our own servers and nothing is requested from Google. One caveat, stated because it is true: a site published before that date keeps the page it was saved with, and still loads fonts from Google until it is rebuilt.tile.openstreetmap.org) — map tiles on the lead-finding screen, which only signed-in partners see. OSM Foundation privacy policy.images.pexels.com) — the stock photographs used on generated sites and previews. Pexels privacy policy.fal.media) — only if you play a video clip you generated with Motion Build.A site built here and published by a partner loads its typefaces from our servers and, usually, a photograph from Pexels. It carries no analytics, no cookies of its own, and makes no request to Google.
The contact, quote and booking forms on those sites do not send anything to a server. Pressing the button opens the visitor’s own email or messaging app with the answers filled in, and nothing is sent until the visitor sends it themselves. Neither NichoAI nor the business receives that data in transit, and nothing is stored on the site.
A partner publishing a site for a client is responsible for that site’s own privacy information. We do not add one automatically, because we do not know what else the business does with enquiries once they arrive by email.
Anything about this page, or a request to see what is stored about you, goes to the address in the block above.