Privacy policy
Last updated: August 5, 2026
This policy explains how Sitepilot (“we”, “us”), operated at site-pilot.online, processes personal data when you use our website builder and related services. For UK/EU users we act as a data controller for account, billing, and product data described below.
Who we are & how to contact us
Controller: Sitepilot (site-pilot.online). Privacy requests: hello@site-pilot.online. If you have a Sitepilot account, you can also export or delete your data in Account settings.
What we collect
- Account data — Google sign-in identifiers (name, email, Firebase user id) when you create or claim an account.
- Business / site content — details you enter (business name, about, goals, email, phone, location, images, domain preferences) and generated site HTML.
- Payments — subscription and payment status via Stripe (we store Stripe customer/subscription ids; card details are handled by Stripe).
- Bookings — when a visitor books on a client site we host, we store the visitor’s name, email, optional phone/notes, and chosen time, and email that to the site owner.
- Technical & usage data — approximate country, device/browser info, hashed IP for security/analytics, and product funnel events (if you allow analytics cookies).
- Marketing cookies — Meta Pixel / click ids only if you accept marketing cookies. See our cookies notice.
Why we use it (purposes & lawful bases)
- Contract — create and host your site, send transactional emails (e.g. site ready, unlock, booking alerts), process subscriptions.
- Legitimate interests — secure the service, prevent abuse, diagnose outages, and improve reliability (balanced against your rights).
- Consent — optional analytics and marketing cookies / Meta ads measurement. You can withdraw anytime via cookie preferences or by contacting us.
- Legal obligation — keep limited payment records where tax or accounting rules require it.
Who we share data with
We do not sell personal data. We use processors that help us run Sitepilot, including:
- Hosting & edge — Vercel
- Database — Neon (PostgreSQL)
- Auth — Google Firebase Authentication
- Payments — Stripe
- Email — Resend
- AI site generation — Moonshot / Kimi (content you submit)
- Ads measurement — Meta (only with marketing consent)
- Domains — Namecheap (when you purchase a domain through us)
Some providers process data outside the UK/EEA. Where required we rely on appropriate safeguards (for example Standard Contractual Clauses) offered by those providers.
Client sites & visitor bookings
If you publish a Sitepilot site, you are typically the controller of personal data your visitors submit (including bookings). We process that booking data on your behalf to deliver the request to your email and store a copy for the service. You must tell visitors how you use their data. When you delete your Sitepilot account, we delete booking records tied to sites you owned.
Retention
- Account & site data — while your account/sites remain active, then deleted or anonymised after account deletion (subject to backups rotating out).
- Bookings — while the site is active; removed when the owning account is deleted.
- Payment identifiers — may be retained as needed for billing disputes, tax, and fraud prevention.
- Security / rate-limit logs — short periods needed to protect the service.
Your rights
Under UK GDPR (and EU GDPR where it applies) you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also withdraw consent for optional cookies, and complain to your supervisory authority (in the UK: the ICO at ico.org.uk).
Self-serve: signed-in users can download a copy of their data and delete their account in Account settings. For other requests email hello@site-pilot.online.
Children
Sitepilot is aimed at businesses and adults. We do not knowingly collect data from children under 16.
Automated decisions
We use AI to generate website drafts from the information you provide. This helps deliver the service; it is not used to make solely automated decisions that produce legal or similarly significant effects about you without human involvement in the product flow.
Changes
We may update this policy. The “Last updated” date at the top will change when we do. Significant changes may also be highlighted in the product.