Privacy Policy

1. Introduction

This Privacy Policy describes how SiteJourney, Inc. ("SiteJourney", "we", "us", or "our") collects, uses, shares, and protects information when you use our AI-powered website building platform at sitejourney.ai (the "Service"). We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: email address, business name, and password
• Profile information: business details, contact preferences
• Website content: text, images, and other materials you upload or create
• Communication data: messages, support requests, and feedback
• Payment information: billing details processed through secure third-party providers

2.2 Information Collected Automatically

• Usage data: how you interact with our Service, features used, time spent
• Device information: IP address, browser type, operating system, device identifiers
• Log data: access times, pages viewed, errors, performance metrics
• Cookies and tracking technologies: preferences, session data, analytics

2.3 Information from Third Parties

• Integration data: information from connected third-party services
• Analytics providers: aggregated usage and performance data
• Payment processors: transaction confirmations and billing status

3. How We Use Your Information

3.1 Service Operations

• Provide, operate, and maintain our AI website building platform
• Process your website creation and customization requests
• Manage your account, subscriptions, and billing
• Deliver customer support and respond to inquiries

3.2 AI and Machine Learning

• Generate website content and designs based on your inputs
• Improve our AI algorithms and content generation capabilities
• Personalize your experience and provide relevant suggestions
• Analyze usage patterns to enhance our AI models

3.3 Communications and Marketing

• Send transactional emails (account confirmations, billing notifications)
• Provide product updates and feature announcements
• Send marketing communications (with your consent)
• Conduct surveys and collect feedback

3.4 Security and Legal Compliance

• Detect, prevent, and respond to security threats
• Investigate and prevent abuse, fraud, or illegal activities
• Comply with legal obligations and enforcement requests
• Protect our rights, property, and the safety of our users

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide our Service
• Legitimate interests: Improving our Service, security, and business operations
• Consent: Marketing communications and optional features (withdrawable anytime)
• Legal obligation: Compliance with applicable laws and regulations

5. How We Share Your Information

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Cloud hosting and infrastructure providers (for example, Supabase)
• Artificial-intelligence providers that generate website content from your inputs (for example, Anthropic and Google); your prompts and related content are transmitted to these providers for processing under their respective terms
• Payment processing services (for example, Stripe)
• Domain registration providers (for example, Namecheap), to which registrant contact details are provided
• Analytics providers on our main application — for example, Google Analytics — when you consent to analytics cookies
• Advertising and measurement providers on our main application — for example, Meta (Facebook) and TikTok — when you consent to marketing cookies
• Email communication platforms
• Customer support tools

For a full list of cookies and similar technologies on sitejourney.ai, see our Cookie Policy.

5.2 Legal Requirements

We may disclose information when required by law or to protect our rights:

• Comply with legal process, subpoenas, or court orders
• Respond to lawful requests from government authorities
• Enforce our Terms of Service and other agreements
• Protect against fraud, security threats, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to this Privacy Policy.

5.4 Data Collected Through Your Published Sites

When your website visitors submit forms or interact with analytics or tracking technologies you add to your published sites, you — not SiteJourney — are the controller/business for that visitor data, and SiteJourney processes it as a service provider on your behalf. You are responsible for providing your visitors with a compliant privacy notice and obtaining any consents required by law. This Privacy Policy governs only data that SiteJourney collects for its own purposes as described above.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, after which we delete or anonymize it. We determine retention periods based on the nature of the data, the purpose of processing, and our legal obligations:

• Account data: Retained while your account is active and deleted within a reasonable period after account closure, except where longer retention is required
• Website content: Retained while you maintain your websites on our platform; following account termination, a limited export window applies as described in our Terms of Service before deletion in the ordinary course
• Generation and chat records: Records associated with AI generation and editing are retained to operate, secure, and improve the Service, and are deleted or anonymized when no longer needed for those purposes
• Usage data: Typically retained for up to 2 years for analytics and improvement purposes
• Legal compliance: Retained as required by applicable laws and regulations

When you request deletion, we will delete or anonymize your personal data unless we are required or permitted to retain it. Residual copies may persist in routine backups for a limited period before being overwritten.

7. Your Privacy Rights

7.1 Access and Control

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal data (right to be forgotten)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your personal data

7.2 Communication Preferences

• Opt out of marketing emails using unsubscribe links
• Manage notification preferences in your account settings
• Contact us to update communication preferences

7.3 Cookie Controls

You can manage optional cookies through our cookie preference manager (footer link: Cookies) or your browser settings. See our Cookie Policy for details.

8. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information and terminate the account.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including using Standard Contractual Clauses approved by the European Commission.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential cookies: Necessary for basic website functionality
• Performance cookies: Help us understand how users interact with our Service
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Provide insights into website usage and performance

10.2 Third-Party Analytics and Advertising

When you accept analytics or marketing cookies on sitejourney.ai, we load third-party technologies such as Google Analytics, Meta Pixel, and TikTok Pixel as described in our Cookie Policy. These services may collect information about your visits to our website and other websites to provide us with aggregated reports or to measure advertising effectiveness.

10.3 Managing Cookies

You can accept, reject, or customize optional cookies through the cookie banner or by clicking Cookies in the site footer. You can also control cookies through your browser settings, but some features may not function properly if cookies are disabled.

11. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure hosting infrastructure with reputable providers
• Employee training on data protection and security practices

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you of any material data breaches as required by law.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to opt out of the sharing of personal information for cross-context behavioral advertising — use Reject non-essential or turn off Marketing cookies in our cookie preference manager, or email privacy@sitejourney.ai
• Right to non-discrimination for exercising privacy rights

Analytics and advertising pixels on our main application (such as Google Analytics, Meta, and TikTok) may constitute "sharing" under California law when enabled. We load these technologies only after you consent, except for essential cookies required to operate the Service.

To exercise these rights, please contact us using the information provided in the Contact section below.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. We will notify you of material changes by email or through our Service. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
SiteJourney, Inc.
Email: privacy@sitejourney.ai
Legal inquiries: legal@sitejourney.ai
Website: https://sitejourney.ai

EU Representative: If you are located in the European Economic Area and have questions about your data protection rights, you may contact our EU representative or your local data protection authority.