Cookie Policy

Cookies are compact text files stored on your computer, tablet, or mobile device by your web browser when you access websites and digital applications. In addition to traditional HTTP cookies, our platform uses Local Storage and Session Storage to keep you signed in, keep chat widget conversations going and remember interface preferences.

LayBuild AI uses cookies and browser storage to keep you signed in, keep chat widget conversations going and remember interface settings. We also use analytics and error-tracking tools that set their own cookies (see section 5). We do not use advertising cookies, and we do not sell cookie data.

We group the cookies and browser storage on the Service into three categories: 1. Strictly necessary: Keep you signed in to the dashboard and let the chat widget continue a conversation. Without these, you cannot sign in and the chat widget cannot keep track of a conversation. 2. Preferences: Remember choices such as the website color theme, whether new-message sounds are on, and the workspace you last selected. 3. Analytics and error tracking (optional): Measure how pages are used and record errors so we can fix them. These are set by Google Analytics, Microsoft Clarity and PostHog, and load only if you choose "Allow analytics" in the cookie banner.

These are the cookies and browser storage items LayBuild AI sets itself: - laybuild_token (cookie): Strictly necessary. Holds your sign-in token (a JSON Web Token) for the dashboard. Expires after 7 days. Set with SameSite=Lax, and with Secure when the site is loaded over HTTPS. - Sign-in token and selected workspace (local storage): Strictly necessary. A copy of your sign-in token and the ID of the workspace you are working in. The token is removed when you sign out. - Chat widget visitor data (local storage): Strictly necessary for the chat widget. A random visitor ID, the current conversation ID and a widget access token, plus the name and email a visitor enters, so the conversation continues across page loads. - Notification sound setting (local storage): Preference. Remembers whether new-message sounds are on in the dashboard. - laybuild_cookie_consent (local storage): Strictly necessary. Remembers whether you allowed or rejected analytics cookies, so we do not ask on every page. - pl-theme (session storage): Preference. Remembers the light or dark theme you picked on our website until you close the tab.

These third-party tools run on our site and set their own cookies or browser storage under their own privacy policies: - Google Analytics: Measures page visits on our website. Not loaded on the admin dashboard or the chat widget. - Microsoft Clarity: Records how visitors interact with our pages, such as clicks, scrolling and session replays. Not loaded on the admin dashboard or the chat widget. - PostHog: Records usage events and errors on our website and dashboard. It does not run in the chat widget when the widget is embedded on another company's website. All three load only after you allow analytics in the cookie banner. You can change your choice at any time from "Cookie settings" in the website footer. - Cloudflare Turnstile: Strictly necessary security service that protects authentication and contact forms from automated bots and credential abuse. Turnstile evaluates browser telemetry and may set security verification tokens in accordance with Cloudflare's Turnstile Privacy Addendum. When you pay for a subscription, you complete payment on the checkout page of PayU (customers in India) or Stripe (customers outside India). The processor may set its own cookies there under its own policies. We do not store card numbers or CVV codes.

Most modern web browsers allow you to control cookie permissions through browser settings. You can configure your browser to reject all cookies, accept only first-party cookies, or alert you whenever a cookie is set. To manage cookies in your browser: - Google Chrome: Settings > Privacy and Security > Third-party cookies - Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data - Apple Safari: Preferences > Privacy > Cookies and website data - Microsoft Edge: Settings > Cookies and site permissions Please note: If you block strictly necessary cookies (such as laybuild_token), you will be unable to log in to your LayBuild AI account or access authenticated dashboard features.

Some browsers send Do Not Track (DNT) or Global Privacy Control (GPC) signals. When your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies and do not show the banner. We do not change behaviour for Do Not Track. We do not use advertising cookies.

How long each item is kept: Session storage: Cleared when you close the browser tab. laybuild_token cookie: Expires after 7 days. Local storage: Kept until you sign out (for the sign-in token) or clear your browser data. Third-party cookies: Kept for the periods set by Google Analytics, Microsoft Clarity, PostHog, PayU and Stripe.

We may periodically update this Cookie Policy to reflect new technical capabilities, updated security standards, or regulatory guidance. Material revisions will be reflected with an updated "Last updated" date at the top of this document, and notifications will be issued through workspace dashboards or email where appropriate.

If you have questions regarding our use of cookies or related browser storage mechanisms, please reach out to our privacy and security team: Email: [email protected] Security Desk: [email protected] Postal: LayBuild AI Platform, Privacy & Compliance Office