Privacy Policy
Last updated: March 2026
1. What Data We Collect
Account data: When you create an account, we collect your email address and display name.
Usage data: We collect IP addresses, browser information, and page views for analytics and rate limiting.
Content: If you claim a site, we store the content you create or modify.
Uploaded files: Photos, documents, and logos you upload to your site.
2. AI-Generated Content
We generate website content using publicly available information (social media profiles, public databases, news articles). This content is processed through AI models to create biographical text, descriptions, and other website content.
If you are the subject of a generated site, your public information has been used to create that content. You can request removal at any time.
3. How We Store Data
Your data is stored in Supabase (PostgreSQL database hosted on AWS). Files are stored in Supabase Storage. All data is encrypted in transit (TLS) and at rest.
4. Third-Party Services
We use the following third-party services that may process your data:
- Cloudflare — hosting, CDN, DDoS protection. Processes IP addresses and request data.
- Supabase — database, authentication, file storage.
- OpenAI (or compatible AI provider) — content generation. Public information about entities is sent to the AI API for processing.
- Stripe — payment processing (if applicable). Stripe handles all payment data; we never store card numbers.
- Resend — transactional email delivery.
5. Cookies
We use essential cookies for authentication (session tokens). We do not use tracking cookies or third-party advertising cookies. Cloudflare may set security cookies for bot protection.
6. Data Retention
Account data is retained as long as your account is active. If you delete your account, your personal data is removed within 30 days. Audit logs are retained for 12 months. Removed sites are deleted permanently.
7. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Object — object to processing of your data
To exercise any of these rights, contact us. We respond to all requests within 30 days.
8. Children's Privacy
The Platform is not intended for users under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users of significant changes via email.
10. Contact
Questions about your data? Contact us.