Privacy Policy
This explains, in plain language, what personal data Sitebator keeps, why, for how long, and how to delete it.
1. Who we are
Sitebator ("we", "us") is an online service for building simple websites for small businesses. We are responsible for the personal data described here.
2. What we collect
Your account: your email address, the name you give us, and your password, which we only keep as a one-way fingerprint we can't turn back into the password. If you sign in with Google or Facebook, they tell us your name, your email address and an ID for your account with them.
What you put into your sites: business details (name, description, address, phone, opening hours), text, photos you upload and the choices you make in the editor, plus the messages you send to support.
Purchases: what you bought, the amount, the date and the payment status. Card and PayPal details go straight to Stripe or PayPal; we never see your card number.
Technical data: our servers record the address (IP) a request came from, the page asked for and any error, to keep the service working and secure.
3. How we use it
To run the service: sign you in, save and show your sites, build your downloads, take payments and add the credits you bought, send account emails and receipts, make custom designs you order, and answer support requests.
To keep it safe: limit repeated sign-in attempts, block abuse and find faults.
We don't sell your data, we don't show ads, and we don't use analytics or advertising trackers.
4. Services we work with
Stripe and PayPal take payments. Google and Facebook sign you in, only if you choose their buttons. Anthropic's AI writes and designs sites and custom designs, so the business details you give us for that are sent to it. An email provider delivers our emails, and hosting and storage providers run our servers and keep encrypted backups.
Sentry receives error reports without your name or email address. When you choose a password, we check it against known data breaches through Have I Been Pwned by sending only the first five characters of its one-way fingerprint; your password never leaves our server.
Each of these handles your data only to provide its service to us, under its own privacy policy.
5. Storage in your browser
We use your browser's local storage, not tracking cookies, to keep you signed in and to remember your language, theme, currency and a few display settings. The Google and Facebook sign-in buttons run those companies' scripts on the sign-in pages, under their own policies.
6. How long we keep it
Your account, sites, photos and saved designs: until you delete them or your account.
Sign-ups that never became a site: 90 days. Accounts whose email was never confirmed and that own nothing: 30 days. Expired sign-in sessions and links: 30 days after they stop working. Your sites' edit history: 180 days. Closed support tickets: one year. Saved designs you delete: 90 days, so a paid design can be restored on request.
Server logs: 14 days. Backups: 14 days on our server and up to 90 days in off-site storage.
Payment records are kept as accounting rules require; when you delete your account, your name and email are removed from them.
7. Deleting your account and data
You can delete everything yourself: open My sites, then the Account tab, and choose "Delete my account…". This removes your account, sites, uploaded photos, saved designs, design orders, credits and sign-in links, and masks your email in our logs. Payment records stay, without your name or email. Copies in backups disappear as the backups expire, within 90 days.
If you signed in with Google or Facebook, you can also remove Sitebator from the connected apps in your Google or Facebook settings. If you can't sign in, contact us and we will delete your data.
8. Your rights
You can ask us for a copy of your personal data, or to correct or delete it. You can also complain to the data protection authority where you live.
9. Security
Connections are encrypted (HTTPS), passwords are stored only as one-way fingerprints, two-step verification is available, and backups are encrypted. No system is perfectly safe, so keep your password to yourself.
10. Children
Sitebator is for businesses and isn't meant for children under 16.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change matters for you, we will tell you by email or in the app before it applies.
12. Contact
Questions about your data, or a request to see or delete it: reply to any email from us, or write to us from the Support tab, and a person will answer.