Privacy Policy
Effective October 14, 2026
This policy explains what personal information Siteloom ("we") collects when you use Siteloom, and how we use it.
Information we collect
- Account information: your email address, name and profile picture (if you sign in with Google or GitHub).
- Your content: prompts, uploaded images, generated websites, version history and settings.
- Billing information: handled by Stripe. We receive your plan, billing status and the last digits of your card, never your full card number.
- Usage information: credits used, generation logs and basic technical data (such as IP address and browser) used for security, abuse prevention and rate limiting.
Information about your site's visitors
When people visit a site you publish with us, we record privacy-friendly, aggregated page-view counts (page, day and referring website) without cookies or cross-site tracking. IP addresses are used briefly for rate limiting and abuse prevention and are not stored with analytics. When visitors submit a form on your site, we store the submission for you. For that data you are the controller and we act as your processor.
How we use information
To provide and improve the Service, generate and host your sites, process payments, send transactional emails (like form notifications and receipts), prevent fraud and abuse, and comply with law. We don't sell personal information.
Service providers
We use trusted processors to run the Service: Supabase (database, authentication and file storage), Vercel (hosting), Stripe (payments), OpenRouter and the AI model providers it routes to (generating content from your prompts), and Resend (email). Prompts and site content are sent to AI providers only to produce your results.
Retention
We keep your data while your account is open. Deleting your account (Settings → Delete account) removes your profile, projects, versions, form submissions and uploaded files. Backups may persist for a limited period. Billing records are kept as required by law.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to certain processing. Most of this can be done in your account; for anything else email anchorforgedigital@gmail.com.
Security
We use encryption in transit, row-level access controls and least-privilege keys. Generated sites are served from a separate domain and previews run in a sandbox so site code can't access your account.
Children
Siteloom isn't directed to children under 16, and we don't knowingly collect their information.
Changes
We'll post updates here and, for material changes, notify you by email.