Privacy Policy

Effective date: 11 July 2026

Last updated: 11 July 2026

This Privacy Policy explains how Laboise eworker Laos enterprise (Tax ID: 275618471000 | Reg ID: 08/04 – 000001253), the current legal operator of WordsThatSells.Website (collectively, “Company,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information in connection with wordsthatsells.website, related subdomains, dashboards, automation pipelines, AI-driven services, and offline interactions related to our business (the “Services”).

The Company is established and operated in Vientiane, Lao People’s Democratic Republic (20 Rue Samsenthai). A Canadian entity tentatively referred to as “Laboise Ltd” is not yet incorporated and is not the data controller or operator under this Policy. Upon formal registration of Laboise Ltd (or another Canadian successor), this Policy will be updated to name that entity and, where intended, to align controller identity and primary compliance framing with Canadian law (Ontario / PIPEDA).

We design our practices to comply with applicable Lao PDR requirements and, for global traffic, to meet baseline expectations of the EU/UK General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended (“CCPA/CPRA”), and the fair-information principles reflected in Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), where those standards apply or where we voluntarily align with them for transparency.

By using the Services, you acknowledge this Policy. Where law requires consent, we obtain meaningful consent before collecting, using, or disclosing personal information for the identified purposes.

1. Data Controller / Organization Responsible

The organization accountable for personal information under this Policy is Laboise eworker Laos enterprise (Tax ID: 275618471000 | Reg ID: 08/04 – 000001253), operating the WordsThatSells.Website platform from Lao PDR. Contact our Privacy Officer:

• Email: privacy@wordsthatsells.website
• Legal: legal@wordsthatsells.website
• General: info@wordsthatsells.website
• Operations: 20 Rue Samsenthai, Vientiane, Lao People’s Democratic Republic

2. Scope

This Policy applies to personal information we process about website visitors, leads, customers, account users, affiliates, agency partners, newsletter subscribers, and other individuals who interact with us. It does not apply to third-party websites or services that we do not control, even if linked from the Services.

3. Categories of Personal Information We Collect

3.1 Information you provide

• Identity and contact data: name, email address, phone number (including WhatsApp), company name, job title, country/region.
• Account and profile data: login identifiers, preferences, role, and authentication metadata.
• Commercial and billing data: package selected, invoices, status of remittances, billing address, and limited commercial metadata from processors (we do not store full card primary account numbers on our servers when using PCI-compliant gateways).
• Customer Content: briefs, brand assets, documents, copy, prompts, form submissions, support messages, and other materials you upload or send.
• Marketing preferences: newsletter opt-in/opt-out and communication choices.

3.2 Information collected automatically

• Device and log data: IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, timestamps, and approximate location derived from IP.
• Cookies and similar technologies: as described in our Cookie Policy and Consent Management Platform (CMP).
• Analytics events: usage and performance metrics (for example Google Analytics property identifiers such as G-LMRKC1VBBB when enabled under your consent choices).

3.3 Information from third parties

We may receive information from commercial processors, advertising platforms, social networks (if you interact with our pages), analytics providers, and partners who refer you to us, consistent with their policies and applicable law.

4. Purposes of Collection, Use, and Disclosure (Meaningful Consent)

We collect, use, and disclose personal information for the following purposes, for which we seek meaningful consent or rely on another lawful basis where permitted:

• provide, operate, secure, and improve the Services;
• create and manage accounts; authenticate users;
• process transactions, subscriptions, refunds, and tax documentation;
• deliver digital marketing, web, content, SEO, automation, and AI-assisted services you request;
• communicate about orders, support, security alerts, and service changes;
• send marketing communications where you have consented or where soft opt-in is permitted by law (you may withdraw consent at any time);
• measure performance, debug errors, and analyze aggregated trends;
• prevent fraud, abuse, and security incidents; enforce Terms;
• comply with legal obligations and respond to lawful requests;
• establish, exercise, or defend legal claims.

We do not use personal information for purposes that a reasonable person would not consider appropriate in the circumstances without additional notice and, where required, consent.

5. AI Processing, LLMs, and Automation Pipelines

How AI is used. Portions of the Services process Customer Content and user inputs through automated workflows and third-party large language models (LLMs) (for example OpenAI and other model providers we configure) to generate drafts, analyze content, route tasks, or produce deliverables.

• Third-party LLM processing: User inputs, documents, and prompts you submit to AI-enabled features may be transmitted to third-party processors solely to generate the requested output and to operate the feature. Those processors process data under their terms and data-processing arrangements with us.
• Ephemeral vs stored: Some AI request/response pairs are processed transiently to produce an output and are not retained by us beyond operational logs and backup cycles. Other content (for example project files, chat history in a dashboard, form submissions, or approved deliverables) may be stored for the duration of your engagement and for the retention periods in Section 10.
• Model training: We do not use your Customer Content to train our own proprietary foundation models. We do not authorize third-party LLM providers to use your Customer Content to train their public models where the provider offers an enterprise or API setting that disables training; where a provider’s default consumer product would allow training, we configure available controls to opt out. Residual risk remains that a subprocessor’s systems process data according to their then-current policies—we will update this Policy if that material fact changes.
• Human review: Staff or contractors (including personnel operating from Lao PDR) may review inputs and outputs to deliver quality control, support, and fraud prevention.
• Your responsibility: Do not submit special-category data, health data, children’s data, government identifiers, or card primary account numbers via free-text AI fields unless we have a written processing agreement covering that data.

6. Third-Party Sharing Map

We share personal information only as needed for the purposes above, including with:

Category	Examples	Data typically shared
Commercial processors	Stripe, PayPal	Name, email, amount, billing metadata, transaction IDs
Hosting & infrastructure	Cloud hosts, CDN, Railway or similar app hosts, GitHub Pages	Account data, logs, application content
Analytics	Google Analytics (when consented)	Device/usage events, approximate location, cookie IDs
AI / LLM providers	OpenAI and other model APIs	Prompts, documents, and context you submit to AI features
Automation pipelines	Make.com, n8n, email/SMS tools	Workflow payloads needed to execute automations you request
Communications	Email providers, WhatsApp Business	Contact details and message content
Professional advisors	Legal, accounting	Limited data as needed for compliance and claims
Authorities	Regulators, courts	Data required by law or valid legal process

We do not sell personal information for money. If we engage in “sharing” for cross-context behavioral advertising under CCPA/CPRA, we will provide required notices and opt-out mechanisms. You may email privacy@wordsthatsells.website with the subject line “Do Not Sell or Share” to exercise applicable California rights.

7. Cross-Border Transfers and Data Sovereignty

Personal information is primarily handled in connection with operations in Lao PDR and may be processed, stored, and accessed in other countries, including:

• Lao PDR — primary operational management, support, and delivery staff;
• United States — many cloud, AI, commercial, and analytics providers;
• Other countries — where subprocessors maintain infrastructure or support centers (which may include Canada or elsewhere after any future entity shift).

When personal information is transferred outside Lao PDR, it may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We use contractual and organizational measures appropriate to the risk (including vendor diligence and data-processing terms where available). By using the Services or submitting personal information, you acknowledge these cross-border transfers.

For GDPR, where we act as controller for EU/UK data subjects, our legal bases typically include: contract performance; legitimate interests (security, improvement, B2B outreach balanced against your rights); consent (cookies/marketing/AI free-text where required); and legal obligation. International transfers rely on appropriate safeguards such as Standard Contractual Clauses where required.

8. Cookies and Tracking

We use essential, analytics, and marketing cookies as classified in our Cookie Policy. Non-essential cookies require active opt-in via our Consent Management Platform (CMP) before those scripts load, particularly for European and Californian traffic. You can change preferences at any time through the CMP controls on the site.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. No method of transmission or storage is completely secure; you use the Services at your own residual risk. Report suspected incidents promptly to privacy@wordsthatsells.website.

10. Retention

We retain personal information only as long as necessary for the purposes identified, including:

• active account and project data — for the life of the relationship;
• billing and tax records — typically seven (7) years or as required by law;
• marketing contacts — until you withdraw consent or after a period of inactivity consistent with our practices;
• security logs — for a limited period for investigation and integrity;
• backups — until rotated out of backup cycles.

When retention ends, we delete or anonymize data, subject to legal holds.

11. Your Rights (Lao PDR, GDPR, CCPA, and PIPEDA-aligned baselines)

Subject to legal exceptions, you may request:

• Access to personal information we hold about you;
• Correction of inaccurate or incomplete information;
• Deletion / erasure where applicable;
• Withdrawal of consent for processing based on consent (without affecting prior lawful processing);
• Portability of certain data (GDPR, where applicable);
• Restriction or objection to certain processing (GDPR, where applicable);
• Opt-out of sale/share and certain targeted advertising (CCPA/CPRA, where applicable);
• Appeal of a denial of a consumer request where required by law.

How to exercise rights: Email privacy@wordsthatsells.website with the subject line “Privacy Request” and specify the right you wish to exercise. We may need to verify your identity. We will respond within the timelines required by applicable law (we aim to respond within thirty (30) days, subject to permitted extensions under applicable law; for GDPR, generally within one month).

You may also lodge a complaint with the competent authority in Lao PDR, with the Office of the Privacy Commissioner of Canada if Canadian law later applies to you after an entity shift, or with your local data protection authority if GDPR applies. We encourage you to contact us first so we can address your concern.

12. Children

The Services are not directed to individuals under 16 (or higher age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact privacy@wordsthatsells.website and we will take appropriate steps to delete it.

13. Automated Decision-Making

We do not use solely automated decision-making that produces legal or similarly significant effects about you without human involvement, except where disclosed and permitted by law. AI features assist content and marketing production; humans remain responsible for final commercial decisions and publication.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top will change, and material updates may be communicated by email or site notice. Continued use of the Services after the effective date constitutes acknowledgment of the updated Policy, except where mandatory law requires additional consent.

15. Contact — Privacy Officer

For privacy questions, access, correction, deletion, or complaints:

Privacy Officer
Laboise eworker Laos enterprise (WordsThatSells.Website)
Tax ID: 275618471000 | Reg ID: 08/04 – 000001253
Email: privacy@wordsthatsells.website
Legal: legal@wordsthatsells.website
Operations: 20 Rue Samsenthai, Vientiane, Lao People’s Democratic Republic
WhatsApp: +856 20 5552 8034

Related documents: Terms and Conditions · Cookie Policy · Legal Hub