Privacy Policy
Version 1 · Effective November 01, 2026
[COMPANY LEGAL NAME] Privacy Policy
Last updated: [DATE]
[COMPANY LEGAL NAME] ("we") runs [PLATFORM NAME], a service businesses use to build and run their websites, bookings, shop and lead forms. This policy covers the personal information we handle about people who sign up for or use our service, and explains our role for the visitors of the websites our customers run.
Information we collect
When you request or open an account: your name, email address, phone number, company name, and the notes you send with the request. We record the IP address, browser and referring page of the request to prevent abuse.
When you use the console: your name, email address and sign-in activity (time, IP address, browser) to keep accounts secure, and a record of administrative actions taken.
Billing: your billing contact's name and email. Card payments are handled by Stripe; we do not receive or store card numbers.
Domains you buy through us: the registrant contact the registrar requires (name, address, phone, email). We pass it to our domain registrar, Porkbun, which registers the domain in your name with WHOIS privacy protection on, and we delete our copy once the domain is live.
Technical data: our servers and content delivery network log IP addresses, browser type and the pages requested, to deliver, secure and bill for the service. Error reports have personal details removed before they are stored.
Cookies {#cookies}
We use only cookies needed for the service to work: a session cookie (encrypted) that keeps you signed in or holds your cart, and, if you choose "remember me", a sign-in cookie that lasts up to 14 days. We use no advertising or analytics cookies, and published websites set no cookies on their pages.
How we use information
To provide and secure the service, send account and transactional email, bill you, answer support requests, and meet legal obligations. We do not sell personal information and do not share it for cross-context behavioral advertising.
Who we share it with
Service providers that process it for us: Amazon Web Services (hosting, email delivery, content delivery, domain registration), Stripe (payments), and, for sites that turn on text reminders, Twilio (SMS, sent from a number we hold for the business). Mobile numbers and text-message consent are never shared with third parties for marketing. We disclose information when the law requires it.
How long we keep it
InformationKeptAccount details | while the account exists
Sign-in records | 180 days
IP address and browser on administrative records | 180 days
IP address and browser on sign-up requests | 180 days
Sign-up requests that did not become an account | 2 years, then anonymized
Domain registrant contact | until the domain is live, or 30 days after a purchase stops
Server and delivery logs | 90 days
Error reports | about 120 days
Backup of a deleted workspace | 90 days
Sign-in records | 180 days
IP address and browser on administrative records | 180 days
IP address and browser on sign-up requests | 180 days
Sign-up requests that did not become an account | 2 years, then anonymized
Domain registrant contact | until the domain is live, or 30 days after a purchase stops
Server and delivery logs | 90 days
Error reports | about 120 days
Backup of a deleted workspace | 90 days
Your rights
If you are a California resident, you may ask to know what personal information we hold about you, to have it deleted or corrected, and to opt out of its sale or sharing (we do neither). We will not treat you differently for using these rights. Send requests to [PRIVACY EMAIL]. We verify the request against your account email and answer within 45 days. An authorized agent may act for you with your signed permission.
Visitors of our customers' websites
When you book, buy, send a message or fill in a form on a website built with [PLATFORM NAME], the business that runs that website decides what is collected and why; we process it on their behalf. Send privacy requests to that business; we give them the tools to find, export and delete your information.
Children
The service is not directed to children under 13, and we do not knowingly collect their information.
Changes
We will post changes here and update the date above. Material changes are announced by email to account holders.
Contact
[COMPANY LEGAL NAME], [POSTAL ADDRESS], [PRIVACY EMAIL]
For site owners (tenant guide)
A tenant's own privacy policy page is a page at /privacy-policy in their site. It should say what their site collects, which depends on the features they use:
FeatureCollected from visitorsKeptContact form | name, email, message, IP address | the site's contact-message period, or until deleted
Bookings | name, email, phone, notes, booking form answers | the site's booking retention period
Shop | name, email, phone, shipping address | buyer details on closed orders: the site's order period (at least 3 years)
Lead forms and quotes | name, email, phone, answers | the site's lead period
Text reminders | phone number (sent to Twilio) | as above
Bookings | name, email, phone, notes, booking form answers | the site's booking retention period
Shop | name, email, phone, shipping address | buyer details on closed orders: the site's order period (at least 3 years)
Lead forms and quotes | name, email, phone, answers | the site's lead period
Text reminders | phone number (sent to Twilio) | as above
Periods are set on the console's Privacy page (bookings on the booking settings page). The same page answers a visitor's request to see or delete their data.
Cookie Policy
Version 1 · Effective November 01, 2026
We use only cookies needed for the service to work: a session cookie (encrypted) that keeps you signed in or holds your cart, and, if you choose "remember me", a sign-in cookie that lasts up to 14 days. We use no advertising or analytics cookies, and published websites set no cookies on their pages.