Privacy Policy

SitegenOS is operated by ApeTec Ltd, a company registered in England and Wales (company number 17065917) with its registered office at 124–128 City Road, London EC1V 2NX. ApeTec Ltd is the data controller for your account data and is registered with the Information Commissioner's Office (ICO), registration number ZC202053. Contact: hello@sitegenos.com.

What we collect

• Account data: email address, password (hashed), display name, role (Builder or Owner), notification preferences, when you were last active, and whether email to your address has bounced.
• Billing data (Builders): processed by Stripe — we never see your card number. We store your Stripe customer ID and subscription state. Invoices are held by Stripe and available through the billing portal. Site Owners are not billed and have no billing data with us.
• Generation data: business details you paste, uploaded logos and media, generated site content, and your edit history.
• Site activity: we do not track individual visitors on published sites and set no analytics or advertising cookies anywhere. The only site-level counting we do is of form submissions, so they can be shown in the dashboard.
• Form submissions on generated sites: the details a visitor submits. We do not keep the visitor's IP address or browser identifier with a submission. To limit repeated submissions, a keyed one-way hash of the IP address is held for up to two days by our rate-limiting provider; the key never leaves our servers, so the hash cannot be turned back into an address.
• A client's email address, given to us by a Builder: when a Builder publishes a site for a client, they give us that client's email address so SitegenOS can send them the link to confirm the site is theirs. We hold it before the client has any account with us, and often before they have heard from us at all. It comes from the Builder, not from the client. We use it for three things and nothing else: sending the link to confirm the site, sending reminders before the 7 days the site stays online unconfirmed end (no reminder is sent once the site has gone offline; the Builder can still choose to send the link again), and delivering the enquiries the client's own site receives during those days. It is never used for marketing and is never sold. Our lawful basis is legitimate interests — delivering the website a Builder made for that business, and passing on that site's enquiries. The Builder is responsible for having the client's permission to give us the address. To have it removed, email hello@sitegenos.com.
• Operational data: rate-limit counters (hashed IP addresses, and the email addresses and account and site identifiers that sign-in and usage limits count), abuse-event records, error monitoring via Sentry (reports of errors from our servers and from browsers, a count of page loads, timings from a sample of one in ten, and the clicks, page changes, console messages and network requests that led up to an error; email addresses and phone numbers are removed before a report or a timing is sent, Sentry uses the IP address only to note an approximate location and then discards it, and nothing records your screen), and email-delivery records (recipient address and account, sender name, subject line, which kind of email it was, the delivery status Postmark reports and the Postmark message ID — not the body of the message; for an enquiry the subject is recorded only as "New enquiry", without the name of the person who sent it). Our authentication provider (Supabase) records session IP addresses as part of operating sign-in.

Why we process it

Contract performance (running your account, generating and hosting sites, billing), legitimate interest (security, rate limiting, abuse prevention, error monitoring, and delivering a Builder's finished website — and that site's enquiries — to the client it was made for), and legal obligation (tax and accounting records).

Who we share it with

We share specific data with these service providers, and no one else except as required by law. We do not sell your data.

Provider	Purpose	Data
Supabase	Database, authentication, storage	Account + site data, session IPs
Stripe	Payments	Billing identity, transactions
Anthropic	AI generation and editing (Claude models)	Generation prompts, business details, uploaded logos and site images (checked for suitability), chat edit requests and the site content they apply to
Apify	Business Finder listing retrieval	Search queries, and the returned business listings (names, addresses, phone numbers)
Pexels	Stock imagery and video	Search terms; when a page plays a Pexels video, or shows a Pexels photo on a Digital Experience design, your browser loads it from Pexels, which receives your IP address
Postmark	Transactional email	Recipient address, message content
Cloudflare (Turnstile)	Bot protection	The challenge token we check; the Turnstile widget runs in your browser and receives your IP address and browser signals directly
Upstash	Rate limiting	Keyed hashes of IP addresses; email addresses, account and site identifiers for sign-in and usage limits
Vercel	Hosting and domains	Request data
Sentry	Error monitoring	Error reports, page-load counts and sampled timings, as described above
Google	Maps shown on pages (including the example site on our home page and published sites)	When a map loads, your browser fetches it from Google, which receives your IP address and browser data under Google's own privacy policy

How long we keep it

• Account data: until you delete your account. Deletion is immediate and permanent.
• Form submissions on generated sites: 12 months, then deleted automatically. A deleted site's submissions are deleted within a day; an Owner who deletes their account takes their sites' submissions with it at once.
• A client's email address given to us by a Builder: for as long as the site it was given for is kept (below), or until that client deletes their own account.
• Business Finder searches and the businesses they found: until the Builder deletes their account. A lead the Builder deletes is removed after 30 days.
• Generated sites, their edit history (the latest 50 versions of each site), the screenshots of their pages and the details pasted to build them: until the Builder deletes their account, or until the site has been offline for twelve months. A published site that is not confirmed, or whose Owner stops confirming it each month, goes offline; twelve months after a site goes offline, for whatever reason, it is deleted with everything kept for it — its content and edit history, its images and page screenshot, its enquiries, and the client's email address given for it. Nothing is emailed about that. Deleting a single site takes it off every public address and out of the dashboard at once, deletes its enquiries within a day, and removes its uploaded images and page screenshot within a day; its content and history are kept, where nobody can open them, until the account is deleted. A site an Owner has confirmed is not deleted when either account is deleted; an Owner's deletion takes it offline and removes its enquiries and the Owner's contact details.
• Sign-in sessions (with the IP address and browser recorded by our authentication provider): until you sign out on that device, change your password (which signs every other device out), or delete your account.
• Abuse-event records: deleted after 1 year.
• Email-delivery records: 6 months, then deleted automatically. Postmark keeps the content of each email it delivers for 45 days.
• Error reports: kept by Sentry for 30 days.
• Request logs: kept by our hosting provider (Vercel) for no more than 30 days.
• Backups: the database is backed up daily and each backup is kept for 7 days, so deleted data leaves the backups within 7 days.
• Payment-event records from Stripe: the record is kept for the payment audit trail, and the raw event body — which can carry a name, an email address, or a billing address — is stripped once the event has been handled and is 90 days old.
• Billing records: kept as required by UK tax law. On account deletion our own records keep the Stripe customer ID, and the raw payment events keep their details until they are stripped as above; Stripe keeps the customer and invoice records, including the name and email on them, for the same statutory period.
• Usage and cost records (what each generation and edit cost to run): kept for accounting; after an account is deleted they stay linked only to an anonymous ID.

Your rights

You have the rights UK GDPR and applicable privacy laws give you over your data — access, rectification, deletion, portability, objection, and restriction. Deletion and a copy of your data are both self-service, in your account settings, for Builders and for site Owners. Deletion takes effect immediately: for a Builder it erases your personal data, cancels any active subscription, and preserves sites that a client has confirmed or is still deciding on; for a site Owner it erases your personal data, takes your website offline and deletes the enquiries it has received. "Download your data" gives you, at once, a file of what we hold about you: your account details and preferences, your sites and their content and edit history, your enquiries, your Business Finder searches and the businesses they found, your billing records, and the record of every email we have sent you. For anything else, email hello@sitegenos.com and we will handle your request as the law requires. You can complain to the UK Information Commissioner's Office (ico.org.uk).

Transfers

Our database, hosting and most of the providers above are in the United States, so your data is transferred there. For a provider in the United States, the safeguard is the Standard Contractual Clauses (with the UK International Data Transfer Addendum) in that provider's data processing terms; a provider in the European Union receives data under the UK's adequacy regulations for the EU. Google and Pexels are reached directly by your browser when a page loads their content, under their own privacy policies.

Security

Data travels over encrypted connections (HTTPS) and is encrypted at rest by our providers. The database accepts connections only over SSL, and direct database connections are closed to the internet entirely — the service reaches it through its provider's authenticated API; the service's privileged access runs on our servers and is never exposed to browsers; rows are protected by row-level security. Passwords are stored by our authentication provider as salted hashes.

Children

SitegenOS is for users aged 18 and over. It is not directed at children and we do not knowingly collect data from anyone under 18.

Changes

We may update this policy. The date above shows the current version.

Contact

hello@sitegenos.com · ApeTec Ltd, registered in England and Wales, company number 17065917 · Registered office: 124–128 City Road, London EC1V 2NX · ICO registration number ZC202053.