Privacy Statement
This policy explains what information Business Toolbox ("we", "us") collects when you visit this website, buy HighLevel Theme Studio ("Theme Studio") or use it inside your GoHighLevel agency, how we use that information, and the choices you have. We collect as little as the product needs to work.
1. Information we collect
| What | When | Why |
|---|---|---|
| Name, email address, billing address, and payment details | At checkout | To process your order and deliver your license. Payment details are collected and stored by Stripe, our payment processor; we never see or store your full card number. |
| Your white-label domain (for example app.youragency.com) | When you activate your license | To bind the license to your agency's domain so the install snippet only runs there. |
| Your GoHighLevel agency (company) ID and, for sub-account themes, location IDs | When Theme Studio first syncs a theme | To store your themes under your own agency and keep them separate from every other customer. |
| Theme settings you save (colors, menu labels, icons, layout choices) | When you press Save in Theme Studio | To keep your design and apply it for your users. Themes are stored in versioned storage so an earlier design can be restored. |
| Name, email address and, if you give it, mobile number | When you ask for the demo on the sales page, leave your email in the exit survey, start a checkout and opt in to hearing from us, or message us in the chat widget | To send you the demo and Founder Pass updates and to follow up on an unfinished order. These details are stored in our own HighLevel CRM account. We text you only if you ticked the text-message box, and every message includes a way to stop. |
| Technical logs (request time, route, status, IP address, error codes) | Whenever our servers are called | To keep the service reliable and detect abuse. Logs are kept for 14 days and never contain theme contents, tokens or card data. |
Theme Studio runs inside your GoHighLevel account. It does not read, collect or transmit your contacts, conversations, payments, or any other business data from GoHighLevel. It only styles the interface.
2. Cookies and local storage
Analytics and advertising cookies are off by default. When you first visit the sales page, checkout or activation page you are asked to choose; nothing in the "Analytics" or "Advertising" rows below runs until you press "Accept all". Your choice is stored in your browser (a local-storage entry called tb_consent) and you can change it at any time on the Do Not Sell My Info page. If your browser sends the Global Privacy Control signal we treat that as a refusal, keep those cookies off and do not show the banner.
| Category | What it does | Provider |
|---|---|---|
| Strictly necessary | Remembers your cookie choice; the checkout page keeps a countdown timer in session storage; Stripe's payment form sets the cookies it needs for payment and fraud prevention, governed by Stripe's privacy policy. Inside GoHighLevel, Theme Studio keeps a copy of your theme in local storage so it applies instantly. Always on. | Business Toolbox, Stripe |
| Functional | The chat widget on the sales page, which lets you message us; it loads its own resources from HighLevel. | HighLevel (LeadConnector), privacy policy |
| Analytics (off until you accept) | Google Analytics 4, loaded through Google Tag Manager, tells us which pages and buttons are used. Microsoft Clarity records anonymised session replays and heatmaps so we can see where the pages are confusing. | Google, Microsoft |
| Advertising (off until you accept) | The Meta Pixel and the TikTok Pixel tell those platforms when someone who saw one of our ads visited the site or bought, so we can measure the ads and reach similar audiences. Under California law this may count as "sharing" personal information; you can switch it off on the Do Not Sell My Info page. | Meta, TikTok |
When you withdraw consent we stop loading the analytics and advertising tags and expire the cookies they set that we can reach from this site. Cookies set on the providers' own domains are governed by their policies and can be removed in your browser settings.
3. How we use information
- To deliver, activate and support your license, including sending your activation code by email.
- To bill you and to handle cancellations, disputes and failed payments.
- To store and apply your themes for your agency and its sub-accounts.
- To protect the service against fraud, abuse and unauthorised use.
- To tell you about important changes to Theme Studio (for example a required update). We do not sell your information and we do not send marketing email unless you opt in.
4. Who we share it with
- Stripe, Inc. processes payments and subscriptions.
- Amazon Web Services hosts our servers, storage and email delivery (United States, with an encrypted backup copy in a second US region).
- GoHighLevel is the platform Theme Studio runs inside; your use of it is governed by their own terms and privacy policy. HighLevel also provides the chat widget on the sales page and hosts the CRM where we keep the contact details you give us for the demo, follow-ups and unfinished orders.
- Google (Tag Manager and Analytics 4), Microsoft (Clarity), Meta (Meta Pixel) and TikTok (TikTok Pixel) receive usage and conversion data from this website only when you have accepted analytics and advertising cookies, as described in section 2. The advertising pixels may be treated as "sharing" under the California Privacy Rights Act; the Do Not Sell My Info page lets you switch them off.
We share information with these providers only as needed to run the service and, for the analytics and advertising providers, only with your consent; with authorities only where the law requires it. We do not sell or rent personal information.
5. Security
All traffic uses HTTPS. Themes and licenses are stored encrypted at rest with versioning, backups and deletion protection. Access to production systems is limited to the people who operate the service. License checks are bound to your domain and to your GoHighLevel agency, so another agency cannot load your theme.
6. Retention
License and purchase records are kept for as long as your license is active and for up to seven years afterwards for accounting purposes. Theme versions are kept while your license is active; clearing a theme keeps prior versions restorable for 90 days. Server logs are deleted after 14 days.
7. Your rights
You can ask us to access, correct, export or delete the personal information we hold about you, or object to how we use it, by emailing support@businesstoolbox.io. We answer within 30 days. Deleting your account information ends your license. If you are in the EU, UK or another jurisdiction with data-protection rights, you also have the right to complain to your local supervisory authority. California residents can also read our Do Not Sell My Info page, which explains your rights under the CCPA/CPRA and how to submit a request.
8. Children
Theme Studio is a business product and is not directed at anyone under 18. We do not knowingly collect information from children.
9. Changes
If we change this policy in a way that matters, we will update the date above and, for material changes, email license holders. Continued use after a change means you accept the updated policy.
10. Contact
Business Toolbox · support@businesstoolbox.io