Privacy Policy

Who this covers

SiteDraft is used by a few kinds of people, and this policy covers all of them:

• Account holders: the web developers, designers and agencies who sign up.
• Their clients, who may fill in a questionnaire, answer follow-up questions, upload photos or view a draft through a link the agency sends them.
• Team members whose profiles an agency or client collects through a profile link.
• Visitors to this website.

When an agency uses SiteDraft for a client, the agency decides what to collect and what to do with it, and we process that information on the agency's behalf. If you're a client or team member, the agency that sent you the link is usually the best first contact, but you can always write to us at hello@sitedraft.studio.

What we collect

Your account. Your email address (you sign in with an emailed link, so there's no password), and optionally your name and your agency's name.

Project content. Everything you, your clients and team members put into SiteDraft: questionnaire answers, business details such as phone numbers and opening hours, answers to follow-up questions, uploaded logos and photos, team profiles and headshots, and the drafts, sitemaps and edits made in the app. If a client is sent email reminders, we store their email address for that.

Résumés. A team member can upload a PDF résumé to fill in their profile. It's read once to suggest answers and is never stored.

Payments. Purchases are handled by Stripe and Link, so we never see or store card details. We keep a record of what was bought, when, and the subscription's status.

Activity needed to run the product: when a client last opened or saved their link, whether someone else has the same questionnaire open, how many AI drafts a project has used and their cost, and which reminders were sent.

Technical information. Our hosting and database providers keep standard server logs (such as IP address, browser type and the pages requested) to keep the service running and secure.

How we use it

• To provide SiteDraft: storing your projects, writing drafts, showing previews and building exports.
• To send emails: your sign-in links, and the reminders an agency chooses to send its client. Every reminder has an unsubscribe link.
• To take payments, apply credits and add-ons, and keep the records the law requires.
• To keep the service secure, prevent abuse and fix problems.
• To answer you when you contact us.

We don't sell personal information, we don't show ads, and we don't use your content to market to anyone.

AI drafting

To write drafts, SiteDraft sends the relevant project content (for example questionnaire answers and supplied facts) to Anthropic's Claude models. Under Anthropic's commercial terms, content sent through its API isn't used to train its models. Drafts are suggestions for you to review. See our Terms for more about AI-written content.

Who helps us run SiteDraft

We use these services, and share with each only what it needs for its job:

• Supabase: Database, file storage and sign-in (hosted in the United States).
• Vercel: Hosting the website and app.
• Anthropic: Writing drafts with AI (Claude).
• Resend: Sending sign-in emails and the reminders an agency sets up.
• Stripe and Link: Payments, tax and receipts (Link is the seller of record for purchases).
• Unsplash and Pixabay: Stock photo search. They receive search terms only, never your content.

Because Link is the seller of record for purchases, its own privacy policy also applies to the payment details you give it. We may also disclose information if the law requires it.

Cookies

SiteDraft uses only the cookies it needs to keep you signed in. There are no analytics, advertising or tracking cookies, and fonts are served from our own domain.

How long we keep it

• Project content stays until you delete it. Deleting a project, website blueprint or team collection removes its files and content straight away.
• Deleting your account (on the Account page) cancels any subscription and removes your projects, files and sign-in.
• Links sent to clients and team members expire after 30 days, and you can revoke them sooner.
• Payment records are kept by Stripe and Link for as long as tax and accounting law requires, even after an account is deleted.
• Server logs are kept by our providers for a limited time under their own policies.

Your choices and rights

You can see, change, export and delete your content in the app at any time. You can also ask us for a copy of your personal information, ask us to correct or delete it, or object to how we use it, by writing to hello@sitedraft.studio. Depending on where you live (for example in the EU, the UK or California), the law may give you further rights, and you can complain to your local data protection authority.

If you're a client or team member, we may pass your request to the agency that collected your information, since they control it.

Security

Connections are encrypted, uploaded files are kept in private storage and shown through short-lived links, and we store only scrambled (hashed) versions of the links sent to clients and team members. No system is perfectly secure, but we work to protect what you give us.

Where your information is kept

SiteDraft is run from the United States and its database is hosted there. If you use it from elsewhere, your information is transferred to and processed in the United States.

Children

SiteDraft is a tool for businesses and isn't meant for anyone under 16.

Changes and contact

If we change this policy, we'll update the date at the top, and tell account holders about significant changes by email. Questions or requests:

Hangerang LLC
6801 Jefferson St NE, Ste 150-3936, Albuquerque, NM 87109, USA
hello@sitedraft.studio