Privacy

What we collect

• Your account: your email address and name, and your business's name.
• What you give us for your site: the address of your current website and the content we copy from it, your answers in guided setup, and the photos, menus and other files you upload.
• Payments: Stripe handles your card. We see what you bought and when, never your card number.
• Messages to your site: what visitors send through your site's forms, and orders from your online store. We keep these for you and email them to you; we don't use them for anything else.
• Your customers' details: a business's own customers' names, emails, phone numbers and what they booked, ordered or wrote are brought together for that business only, so its owner can see one person's history on its Customers screen. They're read from the records the business already has, and the owner's notes and tags are kept with them. We never use them for ourselves, and being a customer never puts anyone on a business's email list.
• How people use sitebrite.app: which pages are visited and which steps are finished (for example, asking for a free preview), through Google Analytics. See below.

Cookies and Google Analytics

We use one cookie to keep you signed in. On sitebrite.app we also use Google Analytics, which sets its own cookies, to learn how people find us and where they get stuck. We don't send it your email, your name or anything you type. We turned off Google's ad personalization features.

We also advertise on Google, and to learn whether our ads work, Google Ads is told when a visitor asks for a free preview, creates an account or buys a plan. That uses a cookie that remembers which ad brought you, and sends Google only the fact that it happened, the amount of a purchase and a number that is ours alone, never your email, your name or anything you type. We don't use it to show you ads on other sites. Visitors in the European Economic Area, the UK and Switzerland get no advertising cookies.

If your browser sends the Global Privacy Control signal, we don't load Google Analytics at all. Visitors in the European Economic Area, the UK and Switzerland get no analytics cookies.

We sometimes try out different versions of our home page. Your browser remembers which one it was shown (in its own storage, not in a cookie), so you see the same one next time, and we note that version with a free preview request to learn which works best. Google Analytics gets it too, as described above.

The sites we host for our customers count their visitors with Cloudflare Web Analytics, which uses no cookies.

Who helps us run the service

We share information only with the companies that run parts of SiteBrite for us, and only what each one needs:

• Amazon Web Services: hosting, file storage and sending email
• Supabase: our database and sign-in
• Stripe: payments, including your online store's payments
• Cloudflare and GitHub: hosting your site and keeping its code
• Twilio and WhatsApp: carrying the messages when you choose to update your site from WhatsApp
• Anthropic and Google: the AI that drafts your site's pages, writing help and pictures, and answers your visitors' questions in the Ask us chat
• Google Analytics and Google Ads: visits to sitebrite.app, and whether an ad led to a preview, an account or a plan
• Square, only if you choose Connect Square when you ask for a free preview: we read your business details, items and services, and booking settings once, then give up our access. What we read is deleted when you send your answers, or after a day.
• Google, only if an owner chooses Connect Gmail or Connect Google Drive in Connections: see the next section.
• Any address an owner gives under Webhooks (Business plan), only to the events they pick: a new message, subscriber, booking or order, with the customer's name and contact details in it. We sign each request so the owner can check it's ours, and we keep what we sent for 30 days.

We don't sell your information, and we don't share it for advertising.

If you connect Gmail or Google Drive

An owner can connect the business's shared Google account in Dashboard › Connections. Each connection asks Google for one permission, and we use it only for the feature you turned on:

• Gmail lets us send the replies you write in your Inbox from your address. We can't read your mailbox, and we don't send anything you didn't write and send.
• Google Drive lets us reach only the files you choose and a folder we make, to copy the photos you pick into your business's photos. If an owner turns on the monthly copy, we also save that month's form messages, bookings and contacts there as spreadsheet files, which hold your customers' details. We can't see the rest of your Drive.

We keep one sealed token for each connection, and the address of the Google account, so it keeps working. Disconnect it in Connections, or remove SiteBrite in your Google account's security settings, and we delete the token and stop. We delete it too when a business moves to another owner or is deleted. We don't use what we get from Google for advertising, we don't sell it, and no person at SiteBrite reads it unless you ask us to help with a problem.

SiteBrite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

We keep your account and your site's content while you're a customer, and a free preview until you ask us to delete it. Conversations in a site's Ask us chat are deleted after 90 days. Google Analytics keeps its data for 14 months.

Your choices

You can see and change your details in your dashboard. To get a copy of your information, or to have it deleted, email help@sitebrite.app. We answer within 30 days.

SiteBrite is for businesses, not children, and we don't knowingly collect information from anyone under 13.

Changes

When this page changes, we update the date at the top.