Privacy

Your account

We store your email address, your name if your sign-in provider gives us one, and what you do in the app: the neighbourhoods you scan, the businesses you approve, the sites and pitches generated for you, edits you make, and how much each action cost to run. Usage is attributed to the member who asked for it so a workspace can see who used what.

Sign-in is handled by Supabase (magic link or Google). We never see or store a password.

Payments

Payments are processed by Dodo Payments. We receive confirmation that a plan or trial was paid for and a customer reference; we do not receive or store card numbers.

Businesses you research

The app gathers information a business publishes about itself: its listing on Google Maps and OpenStreetMap, its website, its published contact details, its public reviews and the photographs attached to them. This is used to audit the existing website, build the new one and write the pitch. Contact details are only ever those the business has published; nothing is scraped from private sources.

Generated sites are private previews until you send the link, and are not indexed by search engines. A site you publish is public and indexable — that is the point of publishing it. Published sites are served from our infrastructure and, like any website, our hosting provider records ordinary access logs (IP address, browser, pages requested) to run the service.

Contact forms on published sites

A published site carries an enquiry form. When a member of the public fills it in, we store their name, how they asked to be contacted and their message, and email it to the account that owns the site and, where known, to the business itself. A hashed form of the sender's IP address is kept briefly to prevent abuse. We do not use these enquiries for anything else.

Third parties we rely on

Supabase (database and sign-in), Vercel (hosting, including published sites and custom domains), Anthropic (the models that write plans, pitches and captions), Serper (Google Maps data), Pexels (stock photography), Resend (email), Dodo Payments (billing), PostHog (product analytics — how the app is used, with form inputs masked) and Sentry (error reports). Each receives only what it needs to do its job.

Analytics: when you first arrive we note where you came from (campaign tags and the referring site) in a cookie for 90 days, and attach it to your account if you sign up, so we know which channels work. Product analytics runs only on our own pages, never on sites you publish.

Retention and deletion

Your data is kept while your account exists. Email us from your account address and we will delete the workspace and everything in it, including generated sites and leads, within 30 days.

Contact

Questions about privacy: privacy@sitesgen.com.