Your data, handled with care

SiteBoss ("SiteBoss", "we", "us", or "our") is an AI-powered website builder for contractors and home service businesses. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you create an account, generate a website, publish it, and capture leads through it.

We collect the following categories of information:

• Account and profile dataYour email address and authentication details, your plan (free, starter, or pro), remaining AI credits, and payment identifiers (such as your Stripe customer ID). We do not store full payment card numbers — card details are handled directly by our payment processor.
• Content you createThe businesses you describe, the prompts and chat messages you send to the AI editor, generated website files and pages, version snapshots, and any images or files you upload during generation.
• Forms and leadsThe forms you build on your sites and the submissions ("leads") that visitors send through your published sites, including the contact details those visitors choose to provide.
• Usage and metering dataRecords of AI generation and edit activity used to meter credits and improve reliability, along with email delivery logs and suppression records used to run our transactional email.
• Automatically collected dataStandard log and device information and analytics events (see Cookies & Analytics below).

• Provide, operate, and maintain the SiteBoss service.
• Generate and edit your websites, which requires sending your prompts and related content to third-party AI and image providers.
• Publish and host your sites and connect custom domains.
• Process payments, manage plans, and meter AI credit usage.
• Deliver transactional emails and respond to support requests.
• Secure the service, prevent abuse, and comply with the law.

To generate and edit your websites, we send your prompts, business descriptions, and related content to third-party AI providers, which may include Anthropic, OpenAI, and Google (Gemini). To source imagery, we may query stock-image providers such as Pexels and Unsplash. These providers process this data on our behalf to return generated content. We do not sell your content, and we do not authorize these providers to use your content to train their models beyond what is necessary to provide the service.

We rely on trusted infrastructure and service providers to run SiteBoss. These include:

• Supabase — database, authentication, and file storage for your account data, projects, and published-site assets.
• Stripe — payment processing and subscription billing.
• Vercel — custom domain provisioning and DNS verification.
• Cloudflare — hosting, delivery, and serving of published sites.
• Lovable — authentication (OAuth) and email delivery infrastructure.
• Google Analytics and Meta Pixel — product and marketing analytics.

When a visitor submits a form on a website you publish with SiteBoss, we collect and store that submission so we can deliver it to you in your leads inbox. For this lead data, you are the controller and SiteBoss acts as a processor on your behalf. You are responsible for handling that data lawfully, including providing any notices or consents required by applicable privacy laws to the visitors of your sites.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the product is used. We use Google Analytics (GA4) and the Meta Pixel to measure traffic and marketing performance. You can control cookies through your browser settings; disabling them may affect some functionality.

We retain your information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data by contacting us at support@getsiteboss.com. Some records may be retained where required by law or for legitimate business purposes.

We use industry-standard measures to protect your data, including encryption in transit and access controls on our infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@getsiteboss.com.

SiteBoss is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you. Your continued use of SiteBoss after changes take effect constitutes acceptance of the updated policy.

Questions about this policy or your data? Email us at support@getsiteboss.com.