Privacy Policy
Effective 21 August 2026 · version 2026-08-21.3
This describes what we collect, why we collect it, and who else is involved. We’ve kept it specific to what SiteYay actually does rather than listing everything we might hypothetically do one day.
The short version. We collect what we need to build your website and run your account — your business details, your contact details, and a record of what happened with your project. Payments go through Stripe and we never see or store your card number. We don’t run advertising trackers and we don’t sell your information.
What we collect
Information you give us
- Your business name and a description of what your business does
- Your name, email address and phone number if you provide one
- Any website, social media or Google Business Profile links you share
- Anything else you send us in your intake form or in a request for changes to your preview
Information created as you use SiteYay
- Whether and when your website preview was opened, and how many times
- The changes you request and whether they’ve been completed
- Your decision to launch, request changes, or pass
- A record that you agreed to our Terms and Privacy Policy at checkout, which versions you were shown, and when, so both of us have proof of what was agreed
- A history of the steps your project has been through, so we can support you properly
Payment information
Payments are processed by Stripe. Your card details go directly to Stripe and are handled under their security standards. SiteYay never receives or stores your full card number. What we keep is the customer and subscription identifiers Stripe gives us, which plan you chose, and whether your subscription is active, past due or cancelled — enough to run your account and answer billing questions.
How you use the site
We record which pages are opened and which steps you reach — for example opening the request form, or viewing your preview — so we can see where our own website is confusing. This is our own record, kept in our own database. It doesn’t involve any advertising or analytics company, sets no cookies, stores nothing on your device, and isn’t tied to your name or email.
Email we send you
When you send us a website request we email you a confirmation, and we email ourselves a copy so we can start work. Those messages are delivered by our email provider, Purelymail, and contain the details you submitted.
Technical information
Our servers keep the ordinary technical logs needed to operate and secure the service, such as request timing and error information. We use a basic rate limit on our intake form to reduce spam, which involves briefly noting the network address a submission came from.
Why we collect it
- To design and build your website preview
- To contact you about your project
- To take payment and manage your subscription if you launch
- To provide support and keep a useful record of your project
- To keep the service secure and working
We don’t sell your information, and we don’t share it for anyone else’s marketing.
If you launch with us, we may name your business and show screenshots or a link to your finished website in our own portfolio, case studies or marketing — publicly visible things only, never your non-public business information. You can opt out at any time by emailing support@siteyay.com. This is described in section 9 of our Terms.
Who else is involved
We use a small number of service providers to run SiteYay. These are the ones that actually handle your information:
- Supabase — the database where your project information is stored.
- Vercel — hosting for our website and the code that handles form submissions and payments.
- Stripe — payment processing and subscription billing.
- Purelymail — the email provider that delivers messages between us and you.
- Google Fonts — serves the typefaces used on our public pages.
We may also share information where the law requires it.
How we protect it
Everything travels over an encrypted connection. Your project data sits behind database access rules that deny access by default, and the keys that can read it exist only on our servers, never in your browser and never in our website’s code. Your website preview link is private to you and isn’t indexed by search engines. Card details never reach us at all: they go straight to Stripe.
No system is perfect, and we won’t pretend otherwise. If something ever goes wrong that affects your information, we’ll tell you rather than quietly hoping you don’t notice.
Tracking and advertising
We don’t use advertising trackers, advertising cookies or third-party analytics products on this site. The usage record described above is entirely our own: it stays in our database, sets no cookies and saves nothing on your device. Your website preview page and your project pages aren’t indexed by search engines.
How long we keep it
We keep your project information for as long as we’re working with you and for a reasonable period afterwards, so we can answer questions and meet our record-keeping obligations. Billing records are kept as long as required for accounting and tax purposes.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Some records — billing history in particular — we may need to keep. Just get in touch and we’ll deal with it properly rather than making you jump through hoops.
Children
SiteYay is a service for businesses. It isn’t intended for children, and we don’t knowingly collect information from them.
Changes to this policy
If we change how we handle your information, we’ll update this page and change the date at the top. If it’s a significant change and it affects you, we’ll tell you.
Getting in touch
For any privacy question, or to ask about the information we hold, email us at support@siteyay.com. You can also reply to any email we’ve sent you about your project.