Privacy Policy

This Privacy Policy explains how SiteDropped ("SiteDropped," "we," "us") collects, uses, and shares information when you use our website and services (the "Service"). We serve businesses in Canada and Australia. By using the Service, you agree to the practices described here.

Information we collect

• Business details you provide. The business name, address, category, and phone number you enter so we can build your site.
• Account information. You sign in with Google only, through our sign-in provider, Supabase Auth. Google sends us your name, email address, and profile picture. We do not have a password for you.
• Public listing data. Information from your public Google Maps listing — such as reviews, hours, photos, and category — that we use to generate your website.
• Content you upload. Files, photos, and messages you send while editing your site, including your messages to the AI assistant.
• Information your customers send through your site. Form submissions, bookings, and orders that visitors send through a site we host. We hold them for that site's owner, as described below.
• Billing information. When you subscribe, our payment provider collects and processes your payment details. We do not store full card numbers; we keep a record of your orders, plan, and subscription status.
• Usage data. Basic technical information such as device, browser, and pages visited, used to operate and improve the Service.

How we use information

• To find your business and generate, preview, and host your website.
• To sign you in, secure your account, and let you edit your site.
• To write and change your site's content with AI models when you ask.
• To process payments and manage your subscription and billing.
• To provide support and respond to your requests.
• To operate, maintain, and improve the Service.
• To comply with legal obligations and prevent abuse.

Information your customers send through your site

When a visitor sends a form, booking, or order through a site we host, we store it for that site's owner and show it in their dashboard. For that information we act as a service provider (a processor) for the site owner, who decides what to do with it. We use it only to provide the Service to that owner. If you sent information to a business through its site, contact that business first; you can also email us at info@sitedropped.com.

Businesses we contact

We discover local businesses using publicly available sources such as Google Maps and may build a free preview site and reach out — by email or phone — to offer it. For this we process publicly listed business details such as name, address, phone number, website, category, and a publicly available business email. If you operate a business we have contacted and want us to stop contacting you or to remove the preview and associated data, use the removal link on the preview or email info@sitedropped.com and we will honor the request.

The business emails we send follow Canada's anti-spam law (CASL) and Australia's Spam Act 2003. Each one says who we are, gives our contact details, and has a working unsubscribe link. When you unsubscribe, we stop.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to operate the Service (for example, your account and session). We may use limited analytics to understand and improve usage. On our own website we also use cookies from Meta (Facebook and Instagram), Google Ads, Google Analytics to count visits, measure our ads (for example, that someone who saw an ad later signed up or bought a plan) and show our ads to people likely to be interested. Where the law requires it we ask first; elsewhere you can say no in the cookie notice, and you can change your choice at any time from the same notice. These cookies are never used on the websites we build for businesses. You can control cookies through your browser settings, though some features may not work without them.

How we share information

We do not sell your personal information. We share information only with service providers who help us operate the Service, listed below, and only as needed to perform those functions. We may also disclose information when required by law or to protect our rights and users.

Third-party services

Our main service providers are:

• Hosting: Vercel.
• Database and sign-in: Supabase.
• AI models: Anthropic and OpenAI, used to write and change site content.
• Google: sign-in, public listing (Places) data, and your Business Profile when you connect it.
• Email delivery: Resend.
• Payments: Lemon Squeezy, our payment provider for our plans. It acts as the reseller (merchant of record), handles sales tax, and holds card details. Stripe, only for owners who connect their own Stripe account to take payments on their site.
• Stock images: Unsplash.

Their handling of data is also governed by their own privacy policies.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and as required to meet legal and operational obligations. You may request deletion of your account and associated data at any time.

International data transfers

Your information is stored and processed outside Canada and Australia, mainly in the United States and in other countries where our service providers work. Those countries' laws may differ from yours, and their authorities may be able to access the information under their laws. We choose providers that protect personal information and use it only to provide services to us. By using the Service you understand your information may be transferred to and processed in those locations.

Your rights and choices

You can access, correct, or delete your account information by contacting us. Depending on where you live, you may have additional rights over your personal data — such as access, correction, portability, deletion, restriction, objection, and the right to withdraw consent — under laws including the EU/UK GDPR and the California Consumer Privacy Act (CCPA). We do not sell your personal information. Our advertising cookies may count as "sharing" for cross-context behavioral advertising; you can opt out by choosing Decline in our cookie notice. We will not discriminate against you for exercising your rights. To make a request, email info@sitedropped.com; we may need to verify your identity before acting.

If you are in Canada

We handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25. The person in charge of protecting personal information is our privacy contact, at info@sitedropped.com. You can ask to see the personal information we hold about you and ask us to correct it. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

If you are in Australia

We handle personal information under the Australian Privacy Principles in the Privacy Act 1988. You can ask to see the personal information we hold about you and ask us to correct it. If you have a complaint, please contact us first at info@sitedropped.com so we can try to fix it. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC).

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, but we work to safeguard your data.

Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes means you accept the updated policy.

Contact us

Questions about this policy, or want to exercise your privacy rights? Email us at info@sitedropped.com.