Privacy Policy

1. Introduction

SiteSmart ("we," "our," or "us") operates the website sitesmart.us and the SiteSmart platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, company name, industry, and other contact details you provide when you request access, create an account, or contact us.
• Submission Records: When you submit an access request or a contact message, we store your submission together with the IP address it came from and the date and time it was received. We keep this record to prevent abuse, enforce submission rate limits, and respond to you.
• Usage Data: Information about how you interact with our website and services, including IP address, browser type, pages visited, and time spent on pages.
• Location Data: Addresses and geographic coordinates you input for analysis purposes within the platform.
• Business Data: Store locations, sales figures, and other business information you upload to the platform.
• Site AI Conversations: The questions you ask Site AI and the responses you receive are stored with your account so you can revisit them and so we can operate and improve the feature.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Review and respond to your request for access to the platform
• Generate location analysis reports and market insights
• Communicate with you about your account, updates, and support requests
• Detect and prevent abuse, spam, and automated submissions
• Analyze usage patterns to improve user experience
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party services that help us operate our platform and that may process personal data on our behalf. These currently include Vercel (website hosting and analytics), Render (application backend hosting), Cloudflare (network security and content delivery, which proxies traffic to our sites), Google Firebase (database and storage for website submissions), Supabase (application database for customer accounts and data), Stripe (payment processing for paid subscriptions), Anthropic (AI processing: questions you ask Site AI, along with relevant report context, are sent to Anthropic's Claude API to generate responses), Mapbox (drive-time calculations for the locations you analyze), Resend (transactional email), and Google reCAPTCHA (bot protection). See Section 5 for details on reCAPTCHA.
• Payment Information: Payments are processed by Stripe. Your full card details go directly to Stripe and are never stored on our systems; we receive only limited billing information such as the card brand, last four digits, and transaction status.
• Data Partners: We use third-party data sources (demographic, economic, and market data providers) to power our analysis. Your search queries may be sent to these providers to retrieve relevant data.
• Legal Requirements: When required by law, regulation, or legal process.

5. Google reCAPTCHA

The forms on this site are protected by Google reCAPTCHA v3 to distinguish human visitors from automated bots. When you load a page containing a form or submit one, reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. This happens whether or not you complete the form.

Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service. We receive only a risk score from Google, which we use solely to decide whether to accept a submission.

6. Data Security

We implement appropriate technical and organizational measures to protect your information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request access but do not become a user, we retain your request and its associated record, including the IP address it was sent from, until you ask us to delete it. Rate-limiting records containing IP addresses are short-lived and reset on a rolling hourly basis.

You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Request a copy of your data in a portable format

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect about you and how we use and disclose it, to access it, to correct it, to request its deletion, and to opt out of the sale or sharing of personal information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights. To exercise them, contact us at hello [at] sitesmart.us; we may need to verify your identity before responding.

10. Children's Privacy

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.

11. International Users

We are based in the United States and process information on servers located in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12. Cookies and Analytics

We use Vercel Analytics to understand aggregate traffic patterns, such as which pages are visited and how often. Vercel Analytics does not use cookies and does not track visitors across other websites.

Google reCAPTCHA may set cookies as part of its bot-detection process, as described in Section 5. We may also use cookies and similar technologies to improve your experience on our website. You can control cookie settings through your browser preferences.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at hello [at] sitesmart.us.