Privacy policy

Sami Baguneid, trading as Sitepoke ("Sitepoke", "we"), is the controller of the personal data described here. Contact: hello@sitepoke.com. This policy covers sitepoke.com and app.sitepoke.com.

What we collect, and why

• Your account: your email address, and your name if you sign in with Google. We use these to sign you in and to send you messages about your account. The lawful basis is our contract with you.
• Your website: the content we read from your current site, and the new site we build from it, which can include names, photos, contact details and other information about you or your business. We use it to build, host and change your site. The lawful basis is our contract with you.
• Your messages to us: the changes you ask for, by chat and later by WhatsApp. We use them to make the changes, and we keep them as your site's change history. The lawful basis is our contract with you.
• Payments: handled by Stripe. We don't see or store your card details; we keep a reference to your Stripe customer and subscription. The lawful basis is our contract with you.
• Technical logs: when you use our app, and when visitors use the sites we host, our hosting keeps short-lived logs, such as IP address and browser, for security and to fix problems. The lawful basis is our legitimate interest in keeping the service safe and working.

Cookies

We only use cookies that are needed to keep you signed in to the app. The sites we host for our customers don't set cookies or track visitors unless the owner adds something that does. We don't use advertising or analytics cookies.

Who we share it with

We use these providers to run Sitepoke. Each one processes data only on our instructions:

• Supabase: database and sign-in (EU)
• Vercel: hosting
• Anthropic: the AI that designs and changes sites
• Stripe: payments
• Google: only if you choose to sign in with Google
• Unsplash: stock photos are loaded from Unsplash, which receives visitors' IP addresses

Some of these providers process data outside the UK. Where they do, the transfer is covered by the UK's adequacy regulations or by the UK International Data Transfer Addendum. We never sell your data.

How long we keep it

We keep your account and website data while you're a customer. We delete it within 90 days of you closing your account, except what we must keep by law. Invoices and tax records are kept for six years. Technical logs are kept for no more than 30 days.

Your rights

You can ask us for a copy of your data, or ask us to correct it, delete it, restrict it, or send it to you in a portable form. You can also object to our using it on the basis of legitimate interest. Email hello@sitepoke.com and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Your own visitors

If your site collects information from your own visitors, you're the controller of that information and we process it on your behalf. Ask us for our data processing terms.

Changes

We'll update this page if anything changes, and email you about anything important.