Privacy Policy

We collect the information you give us directly while building your website, plus a small amount of information generated by using the service:

• Chat conversation transcripts — the messages you exchange with our AI assistant while building your site
• Photos you upload — stored securely and never made publicly accessible
• Business details you volunteer during the conversation — your business name, address, phone number, services, and similar information
• Payment metadata — handled by Stripe; we never see or store your full card number
• Account email address — used for sign-in and service communications

We use this information to build and operate the website you're paying for: turning your answers and photos into pages, keeping your account and billing in order, sending you service-related emails, and providing support when you ask for it. We do not use your business content or personal information for advertising, and we do not sell it to third parties.

Building and operating your website relies on a small number of specialized providers, each of which only receives the data it needs to do its job:

• Anthropic — powers the AI conversation that builds your website
• OpenAI — powers voice transcription, voice replies, and image generation features
• Supabase — handles account sign-in and stores your account data
• Stripe — processes payments; we never see or store your full card details
• Cloudflare — hosts our platform and your website, manages DNS, stores your uploaded photos (Cloudflare R2), protects our forms from bots (Turnstile), and runs our contact form (Workers)
• Resend — sends transactional emails, such as receipts and account notifications
• GitHub — hosts the private source-code repository for your website
• UptimeRobot — monitors that our platform and customer websites stay online

Photos you upload are stored in Cloudflare R2 object storage and are never made publicly accessible — they can only be retrieved through short-lived, signed URLs that our backend issues. Chat transcripts and the business information you provide are stored in our Postgres database, protected behind authenticated access.

We keep your account, chat history, and uploaded photos for as long as your account is active. If you disconnect from Chat2Site or request deletion, we remove your data within a reasonable period, except for records we are required to keep for accounting, tax, or legal purposes. We don't currently publish a fixed day-count retention schedule for every category of data; if you need specifics for your situation, contact us using the details below.

Depending on where you live, you have rights over the personal data we hold about you, including the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or request restriction of certain processing
• Receive a copy of your data in a portable format
• Lodge a complaint with your local data protection authority

Chat2Site serves customers in the European Union, Israel, and elsewhere. Some of the service providers listed above may process your data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

We may update this policy from time to time as our service or our list of providers changes. We'll update the date at the top of this page when we do, and we'll notify active customers by email of any material changes.

Questions about this policy or your data? Reach out on our Contact page and we'll get back to you.