Privacy Policy - 1to30

Privacy Policy

Last Updated: September 7, 2026

This Privacy Policy explains how Illumento LLC, doing business as 1to30 (“1to30,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information.

It applies when you:

  • visit 1to30.io or another website operated by us;
  • create or use a 1to30 account;
  • place an order;
  • purchase ad creative, landing page, website, hosting, or other services;
  • submit a brief or project materials;
  • communicate with us;
  • participate in our affiliate or referral programs; or
  • otherwise interact with our Services.

1. Who We Are

The controller responsible for personal information described in this Privacy Policy is:

Illumento LLC, doing business as 1to30 Email: [email protected] Registered address: 5830 E 2nd St, Ste 7000 #21220, Casper, Wyoming 82609 US

Where we process personal information solely on behalf of a customer through a customer website, landing page, form, or integration, that customer is generally the controller and we act as its processor or service provider. Section 15 explains this distinction.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

2.1 Contact and business information

This may include:

  • full name;
  • work email address;
  • telephone number, if provided;
  • company name;
  • job title or professional role;
  • business address;
  • billing address; and
  • country or region.

2.2 Account information

This may include:

  • username or account identifier;
  • encrypted or hashed password information;
  • account preferences;
  • account status;
  • subscription or plan information;
  • login history;
  • authentication information;
  • administrator or editor accounts created for you on a hosted website or landing page, where applicable; and
  • account-support records.

You are responsible for keeping your account credentials confidential.

2.3 Order and transaction information

This may include:

  • products and services ordered;
  • selected plans and add-ons;
  • order dates;
  • transaction amounts;
  • currency;
  • payment status;
  • invoices;
  • refunds;
  • credits;
  • subscription renewals;
  • cancellations; and
  • limited payment-related information received from our payment processor.

Complete card numbers are processed by our payment provider and are not stored by us.

2.4 Project and Customer Content

When you purchase or use our Services, we may collect information and files such as:

  • project briefs;
  • campaign information;
  • brand names;
  • business descriptions;
  • offers and product information;
  • audience descriptions;
  • advertising angles;
  • existing website URLs;
  • domain information;
  • logos;
  • brand guidelines;
  • fonts;
  • images;
  • videos;
  • product photographs;
  • testimonials;
  • copy;
  • business claims;
  • examples and references;
  • form configurations;
  • integration details;
  • revision requests;
  • feedback;
  • approvals;
  • completed creatives;
  • design concepts;
  • website and landing page files; and
  • communications related to the project.

Project materials may contain personal information about you, your employees, customers, contractors, testimonial providers, or other individuals.

You must have all necessary rights and permissions before providing personal information or other content to us.

Please do not provide health information, government identifiers, financial-account credentials, biometric information, children’s data, or other sensitive personal information unless we have expressly agreed in writing that it is necessary and permitted.

2.5 Communications

We collect information when you communicate with us, including:

  • emails;
  • support requests;
  • form submissions;
  • feedback;
  • complaints;
  • survey responses;
  • account messages; and
  • records of our responses.

2.6 Device, log, and usage information

When you use our websites or application, we and our providers may automatically collect:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • language;
  • approximate location derived from IP address;
  • referring and exit pages;
  • pages viewed;
  • buttons or links clicked;
  • login timestamps;
  • session information;
  • error logs;
  • security events;
  • cookie identifiers;
  • advertising identifiers; and
  • information about interactions with our websites and application.

2.7 Marketing, referral, and affiliate information

We may collect:

  • marketing preferences;
  • email-subscription status;
  • advertising and campaign attribution;
  • referral URLs;
  • affiliate identifiers;
  • coupon or promotion information;
  • source, medium, and campaign parameters;
  • cookie-consent preferences; and
  • information about whether an advertisement or referral resulted in an account or purchase.

2.8 Information from third parties

We may receive information from:

  • payment processors;
  • authentication providers;
  • analytics providers;
  • advertising platforms;
  • affiliate partners;
  • referral partners;
  • hosting and infrastructure providers;
  • fraud-prevention providers;
  • social media or business platforms;
  • publicly available business websites; and
  • other people within your organization.

2.9 Partner previews and product analytics

When a referral partner creates a client preview, or when someone opens a personal preview link, we may collect:

  • the partner’s account identifiers and remaining preview allowance;
  • business information the partner submits for the preview;
  • the preview token and whether the link was opened;
  • which design directions were viewed or selected; and
  • the partner attribution stored with a later website order.

A partner can see the preview they created and its status. They do not receive payment-card details. Public sample and personal preview pages are not indexed for search.

3. How We Use Personal Information

We use personal information for the following purposes.

3.1 To provide the Services

This includes using information to:

  • create and manage accounts;
  • process and confirm orders;
  • produce ad creatives;
  • produce concepts;
  • design and develop landing pages and websites;
  • provide revisions;
  • deliver files;
  • deploy and host websites and landing pages;
  • operate forms and integrations;
  • provide support;
  • communicate about projects;
  • administer subscriptions;
  • manage campaign credits and plan allowances; and
  • maintain service records.

3.2 To process payments and administer billing

We use information to:

  • facilitate payment processing;
  • confirm transactions;
  • issue invoices;
  • administer credits and refunds;
  • manage recurring billing;
  • detect failed or disputed payments;
  • prevent payment fraud; and
  • maintain financial and tax records.

3.3 To communicate with you

We may send:

  • order confirmations;
  • project updates;
  • requests for missing information;
  • delivery notifications;
  • account and security notices;
  • subscription and renewal communications;
  • service announcements;
  • support responses; and
  • other transactional messages.

Transactional messages are not marketing messages and may be sent where necessary to perform our contract with you.

3.4 To improve and develop our business

We may use information to:

  • understand how customers use our Services;
  • troubleshoot errors;
  • improve workflows;
  • evaluate product demand;
  • develop new services;
  • measure service quality;
  • train and support personnel;
  • perform internal analytics;
  • create aggregated or de-identified statistics; and
  • improve the security, reliability, and usability of our systems.

3.5 For security and fraud prevention

We use information to:

  • authenticate users;
  • detect suspicious activity;
  • prevent fraud and abuse;
  • protect accounts;
  • investigate security incidents;
  • enforce our Terms;
  • protect our customers and providers; and
  • preserve the integrity of our systems.

3.6 For marketing and advertising

Subject to applicable law and your choices, we may use information to:

  • send marketing emails;
  • promote our products;
  • measure marketing performance;
  • attribute purchases to campaigns or referral partners;
  • create advertising audiences;
  • limit repeated advertising;
  • personalize marketing;
  • perform retargeting; and
  • understand which advertisements lead to visits or purchases.

You may unsubscribe from marketing emails using the link included in the message.

3.7 For legal and operational purposes

We may use information to:

  • comply with law;
  • respond to lawful requests;
  • establish, exercise, or defend legal claims;
  • enforce agreements;
  • complete audits;
  • maintain corporate records;
  • protect rights and safety;
  • manage a merger, acquisition, financing, restructuring, or sale; and
  • obtain professional advice.

4. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar law applies, we rely on one or more of the following legal bases.

Performance of a contract

We process information where necessary to:

  • create and administer your account;
  • process orders;
  • produce and deliver purchased Services;
  • provide hosting;
  • communicate about a project;
  • administer subscriptions; and
  • provide support.

Legitimate interests

We may process information for legitimate business interests such as:

  • securing our Services;
  • preventing fraud;
  • improving operations;
  • performing business analytics;
  • maintaining records;
  • communicating with business customers;
  • protecting legal rights; and
  • marketing similar business services where permitted.

We consider the nature of the information, the expected impact on individuals, and available safeguards before relying on legitimate interests.

Consent

We rely on consent where required, including for:

  • non-essential cookies;
  • certain analytics or advertising technologies;
  • certain electronic marketing communications; and
  • other optional processing identified when consent is requested.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

Legal obligations

We process information when necessary to comply with tax, accounting, corporate, regulatory, law-enforcement, and other legal obligations.

Legal claims and other permitted grounds

Where applicable, we may process information to establish, exercise, or defend legal claims or under another ground permitted by applicable law.

5. Project Production, AI-Assisted Tools, and Service Providers

5.1 How production works

We may use employees, contractors, designers, developers, software platforms, automation tools, and artificial-intelligence-assisted services to help provide the Services.

Project Content may be processed through these tools where reasonably necessary to:

  • analyze a brief;
  • develop creative directions;
  • produce or modify visual material;
  • support copy production;
  • build or test code;
  • organize files;
  • perform quality control;
  • detect errors; or
  • deliver the purchased Services.

We take reasonable steps to limit disclosure to information necessary for the relevant task and to use providers subject to contractual, confidentiality, security, or data-protection obligations.

You should not upload sensitive personal information or confidential information that is unnecessary for the project.

AI-assisted tools may produce outputs based on patterns in their underlying systems. We do not use automated systems to make decisions about individuals that produce legal or similarly significant effects.

5.2 Model training

We do not sell Project Content and we do not provide it to third parties for the purpose of training their models.

Where a provider offers a setting, plan, or contractual option that excludes submitted content from model training, we use that option. Some providers may nevertheless retain content for a limited period for abuse monitoring or security purposes under their own terms.

5.3 AI transparency and labelling

Where a deliverable includes AI-generated or AI-manipulated image, audio, or video content for which disclosure is required under applicable law, we apply the required disclosure and, where the production tool supports it, embed machine-readable provenance metadata.

Provenance metadata describes how a file was produced. It is technical information about the file and is not used by us to profile individuals.

Your obligations regarding these disclosures are set out in our Terms and Conditions.

6. Payment Processing

Payments are generally processed by Stripe.

When you make a payment, Stripe may collect and process information including:

  • card or payment details;
  • billing information;
  • transaction identifiers;
  • device information;
  • IP address; and
  • fraud-prevention information.

Stripe processes this information under its own privacy terms and may act as an independent controller for some payment-processing purposes.

We generally receive transaction status, payment method type, limited card information such as the last four digits, billing details, and transaction identifiers. We do not receive or store your complete card number.

Where you manage payment methods, invoices, or billing details through a payment provider’s customer portal, that portal is operated by the provider and is subject to the provider’s own privacy terms.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

7.1 Infrastructure and hosting providers

These providers help us host websites, applications, databases, files, content-delivery systems, monitoring services, and backups.

7.2 Payment and billing providers

These providers process payments, subscriptions, invoices, fraud checks, refunds, and billing communications.

7.3 Email and communication providers

These providers help us send transactional messages, support communications, project updates, and marketing emails.

7.4 Analytics providers

Subject to your cookie choices and applicable law, analytics providers help us understand website traffic, product usage, and performance.

Our product analytics are provided by PostHog (PostHog Inc., United States). Event data such as page views, button clicks, preview opens and checkout steps may be processed in the United States. We may also use Google Analytics or similar services. Non-essential analytics are subject to your cookie choices where required.

7.5 Advertising and attribution providers

Subject to your choices and applicable law, we may use services such as Google advertising technologies, the Meta Pixel, or similar platforms to:

  • measure advertising;
  • attribute conversions;
  • perform retargeting;
  • create audiences; and
  • improve marketing effectiveness.

7.6 Affiliate and referral providers

We may disclose or receive identifiers and transaction information necessary to attribute referrals, prevent fraud, calculate commissions, and administer an affiliate program.

7.7 Production and professional service providers

We may use:

  • designers;
  • developers;
  • copy professionals;
  • project contractors;
  • AI-service providers;
  • file-storage providers;
  • quality-control tools;
  • legal advisers;
  • accountants;
  • insurers; and
  • other professional advisers.

7.8 Business customers and authorized users

Where an account belongs to a business, information may be visible to authorized users, administrators, or representatives of that business.

7.9 Authorities and legal recipients

We may disclose information where reasonably necessary to:

  • comply with law or legal process;
  • respond to a valid government request;
  • enforce agreements;
  • investigate fraud;
  • protect safety;
  • defend legal claims; or
  • protect our rights, customers, systems, and providers.

7.10 Corporate transactions

Information may be disclosed in connection with a merger, financing, acquisition, restructuring, insolvency, sale, or transfer of some or all of our business or assets.

A recipient will be permitted to use personal information only in a manner consistent with this Privacy Policy unless it provides a new notice.

8. Sale, Sharing, and Targeted Advertising

We do not sell personal information to third parties for money.

Our use of advertising cookies or advertising partners may, under some privacy laws, be considered:

  • “sharing”;
  • targeted advertising;
  • cross-context behavioral advertising; or
  • a sale under a broad statutory definition.

Where applicable, you may opt out through:

  • the cookie-preference tool available on our website;
  • a legally recognized browser-based opt-out signal, such as Global Privacy Control; or
  • a request sent to [email protected].

We do not knowingly sell or share personal information belonging to children.

9. Cookies and Similar Technologies

We use cookies, pixels, local storage, tags, scripts, and similar technologies.

9.1 Strictly necessary technologies

These technologies support functions such as:

  • security;
  • fraud prevention;
  • authentication;
  • account sessions;
  • checkout;
  • load balancing;
  • network management;
  • consent-preference storage; and
  • core website functionality.

Where permitted by law, these may operate without optional consent because they are necessary to provide a requested service.

9.2 Functional technologies

These technologies remember selections and preferences and provide enhanced functionality.

9.3 Analytics technologies

Analytics technologies help us understand:

  • visitor numbers;
  • traffic sources;
  • pages viewed;
  • website interactions;
  • errors;
  • conversions; and
  • product usage.

9.4 Advertising technologies

Advertising technologies may help us:

  • measure advertisements;
  • attribute conversions;
  • build advertising audiences;
  • perform retargeting;
  • limit repeated advertisements; and
  • understand marketing effectiveness.

9.5 Affiliate technologies

Affiliate and referral cookies may identify the referring partner and attribute a qualifying purchase during the applicable attribution period.

9.6 Your cookie choices

Where required by law, we do not activate non-essential analytics or advertising technologies until you make a valid choice.

You can use our cookie-preference tool to accept, reject, or change optional cookie categories at any time.

You may also control certain technologies through your browser or device settings. Blocking cookies may affect website or account functionality.

Withdrawing consent does not affect processing that lawfully occurred before withdrawal.

10. International Data Transfers

Illumento LLC is a United States company. Personal information may be processed in the United States and in other countries where we or our providers operate.

These countries may have different data-protection laws from your country.

Where required by applicable law, we use an appropriate transfer mechanism or safeguard, which may include:

  • an adequacy decision;
  • the European Commission’s Standard Contractual Clauses;
  • the UK International Data Transfer Addendum or another UK-approved mechanism;
  • contractual safeguards;
  • supplementary technical and organizational measures; or
  • another lawful transfer mechanism.

You may contact us for additional information about safeguards applicable to your information.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including contractual, operational, security, tax, accounting, and legal purposes.

Retention depends on the type of information and context.

Generally:

  • account information is retained while the account is active and for a reasonable period afterward;
  • order, invoice, payment, and tax records are retained for the period required by applicable financial and tax laws;
  • project files and communications are retained while needed to provide, support, document, and defend the Services;
  • hosted website and landing page information is retained while the hosting service remains active and for a limited period afterward for backups and transition;
  • support and dispute records may be retained while a claim could reasonably arise;
  • security logs are retained for a period appropriate to fraud prevention and system protection;
  • marketing information is retained until you unsubscribe or object, subject to maintaining a limited suppression record; and
  • cookie and analytics information is retained according to configured cookie and provider retention periods.

Where hosting ends, an export of the hosted site may be requested as described in our Terms and Conditions. After the transition period, hosted site data and its backups are deleted in the ordinary course.

We may retain information for longer where:

  • law requires it;
  • it is needed for a dispute;
  • payment remains outstanding;
  • a security investigation is ongoing; or
  • deletion is not immediately possible from encrypted backups.

When information is no longer required, we delete it, anonymize it, or securely isolate it until deletion is possible.

12. Security

We use reasonable technical and organizational measures designed to protect personal information.

Measures may include:

  • encrypted data transmission;
  • access controls;
  • authentication;
  • password hashing;
  • role-based access;
  • secure payment processing;
  • monitoring;
  • backups;
  • provider reviews;
  • confidentiality obligations; and
  • incident-response procedures.

No online system, transmission method, or storage system is completely secure. We cannot guarantee absolute security.

You are responsible for:

  • maintaining a secure password;
  • protecting account credentials;
  • restricting account access; and
  • notifying us promptly of suspected unauthorized activity.

13. Your Privacy Rights

Your rights depend on your location and the law that applies.

We may need to verify your identity before completing a request. We may deny or limit a request where permitted by law, including where it would adversely affect another person’s rights, reveal confidential information, or conflict with a legal retention obligation.

13.1 EEA, UK, and Switzerland

Subject to applicable conditions, you may have the right to:

  • access your personal information;
  • correct inaccurate information;
  • request deletion;
  • restrict processing;
  • receive certain information in a portable format;
  • object to processing based on legitimate interests;
  • object to direct marketing;
  • withdraw consent;
  • request information about international-transfer safeguards; and
  • complain to a competent data-protection authority.

Where processing is based on consent, you may withdraw consent at any time.

Where processing is based on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time.

13.2 California

Where the California Consumer Privacy Act applies, California residents may have rights to:

  • know the categories and specific pieces of personal information collected;
  • know the sources, purposes, and recipient categories;
  • request deletion;
  • request correction;
  • opt out of sale or sharing;
  • limit certain uses of sensitive personal information, where applicable; and
  • receive equal service and pricing without unlawful discrimination for exercising privacy rights.

We do not use or disclose sensitive personal information for purposes that require a limitation right unless stated otherwise.

An authorized agent may submit a request where permitted by law. We may request proof of authorization and identity verification.

13.3 Other United States states

Residents of other states may have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information, subject to applicable law.

13.4 Canada

Where applicable Canadian privacy law applies, you may request access to personal information we hold about you, request correction, withdraw consent subject to legal or contractual restrictions, and raise a privacy complaint.

13.5 Australia and New Zealand

Where applicable law applies, you may request access to and correction of your personal information and may raise a complaint about our handling of it.

13.6 How to make a request

Send requests to:

[email protected]

Please include:

  • your name;
  • the email associated with your account;
  • the country or state where you reside;
  • the right you wish to exercise; and
  • enough information for us to locate the relevant records.

Do not send government identification unless we specifically request it as part of a proportionate verification process.

13.7 Appeals

Where applicable law gives you a right to appeal a denied privacy request, you may appeal by replying to our decision or emailing [email protected] with the subject line “Privacy Appeal.”

14. Marketing Communications

You may unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us.

Even after unsubscribing, we may send non-marketing communications related to:

  • active orders;
  • subscriptions;
  • hosting;
  • billing;
  • account security;
  • support;
  • policy changes; and
  • other service matters.

15. Customer Websites, Landing Pages, and Form Submissions

1to30 may host or maintain websites and landing pages on behalf of business customers.

For personal information collected through a customer’s website, landing page, form, analytics tools, advertising tags, CRM, or other integration:

  • the customer generally determines why and how the information is collected;
  • the customer generally acts as controller or business;
  • 1to30 generally acts as processor or service provider;
  • the customer’s own privacy policy governs the customer’s relationship with its visitors;
  • the customer is responsible for required notices, consent, and legal bases; and
  • privacy requests relating to that data should generally be directed to the relevant customer.

Where a hosted site includes an administration area, the customer is responsible for the accounts it creates, the access it grants, and the conduct of the users it authorizes.

We process this information to:

  • host and deliver the customer’s website or page;
  • transmit form submissions;
  • maintain integrations;
  • monitor technical delivery;
  • secure the service;
  • troubleshoot issues;
  • perform backups; and
  • follow the customer’s lawful instructions.

We may refer a request to the relevant customer where the customer is responsible for responding.

Customers must not use our hosted Services to collect highly sensitive information unless we have expressly approved the use case in writing and appropriate safeguards are in place.

16. Data Processing on Behalf of Customers

Where we act as a processor or service provider for a customer, we will:

  • process personal information only to provide the contracted Services, follow documented lawful instructions, or comply with law;
  • ensure persons authorized to process the information are subject to confidentiality obligations;
  • implement reasonable security measures;
  • use subprocessors as reasonably necessary to provide the Services;
  • require subprocessors to protect information consistently with our obligations;
  • reasonably assist the customer with privacy requests, security incidents, and compliance obligations, taking into account the nature of the processing;
  • notify the customer without undue delay after confirming a personal-data breach affecting customer-controlled information, where legally required;
  • delete or return customer-controlled personal information at the end of the Services where reasonably possible and legally required; and
  • make reasonable information available to demonstrate our compliance.

The customer authorizes the use of subprocessors necessary to provide hosting, cloud infrastructure, communications, security, analytics, development, and support services.

If legally required, the parties will enter into additional data-processing or international-transfer terms.

17. Children’s Privacy

The Services are intended for business users who are at least 18 years old.

We do not knowingly collect personal information directly from children.

If you believe a child has provided personal information to us, contact [email protected] so we can investigate and take appropriate action.

18. External Links and Third-Party Services

Our Services may link to or integrate with third-party websites, platforms, tools, and services.

Their privacy practices are governed by their own policies. We are not responsible for third-party privacy, security, content, or practices.

We encourage you to review the privacy information of services you choose to use.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • our Services;
  • our technology;
  • our providers;
  • our data practices;
  • applicable law; or
  • our business operations.

We will post the updated policy with a revised “Last Updated” date.

Where required by law, we will provide additional notice or request renewed consent.

20. Governing Terms and Disputes

This Privacy Policy forms part of our contractual relationship with you and is subject to our Terms and Conditions.

Any dispute, claim, or matter arising out of or in connection with this Privacy Policy is governed exclusively by the laws of the State of Wyoming, United States, and is subject to the exclusive jurisdiction and venue of the state and federal courts located in Wyoming, as set out in our Terms and Conditions, regardless of your location, place of residence, or place of business.

This section does not remove any right you may have to contact a data-protection or privacy regulator, as described in Section 21.

21. Contact and Complaints

For privacy questions, requests, or complaints, contact:

Illumento LLC, doing business as 1to30
Email: [email protected]

We will review privacy complaints and respond within the period required by applicable law.

You may also have the right to submit a complaint to the data-protection or privacy regulator in your country, state, or region.