Privacy

What we collect

We collect only what we need to build and run your site.

• Account information. Your phone number, used to sign you in and verify your identity, and the email address you give us at publish time so we can send you the leads your site receives.
• Site data. The description of your business you provide, the content of the site we build, any changes you make, images you upload, and the subdomain you choose.
• Usage analytics. Basic, privacy-respecting counts on your published site, such as visits and leads. We store a one-way hashed visitor identifier and never keep raw IP addresses.

How we use it

• To build, publish, and host your web presence.
• To send you the leads your site collects.
• To verify your identity and keep your account secure.
• To protect the service from abuse and fraud.
• To understand how the product is used so we can improve it.

We do not sell your data, and we do not use it for advertising.

Third-party services

We rely on a small set of trusted providers to run the service. Each processes only the data needed for its part of the job.

• Supabase, our database, authentication, and file storage.
• Vercel, our hosting and delivery infrastructure.
• Anthropic (Claude Sonnet), which generates your site copy from the description you provide.
• fal.ai, which generates imagery for your site.
• Unsplash, a source of stock photography used as a fallback for site imagery.
• Twilio, which sends the verification code to your phone when you sign up.
• Resend, which sends transactional email such as lead notifications and confirmations.
• Cloudflare Turnstile, which helps us tell real people from automated abuse on our forms.

Each provider holds its own privacy terms. We choose providers that treat your data with care, and we do not pass your data to anyone else.

Cookies

We use a small number of essential cookies and store no third-party advertising or tracking cookies.

• A session cookie that keeps you signed in.
• A short-lived cookie during sign-up that carries your details safely between steps.
• A preference cookie that remembers small choices, such as which page layout you last viewed.

Your rights

You can ask us at any time to:

• See the personal data we hold about you.
• Correct anything that is wrong.
• Export your site data.
• Delete your account and the data tied to it.
• Withdraw consent where we relied on it.

To make a request, email us at gael@northsite.app. We will respond within a reasonable time.

Where your data is held

Your data is stored on infrastructure provided by Supabase and Vercel, which may process and hold it in data centres in the United Kingdom, the European Union, or the United States. Wherever it is held, the protections described in this policy apply.

Keeping your data

We keep your account and site data for as long as your account is open. When you delete your account, we remove the personal data tied to it, other than anything we must keep for legal or accounting reasons.

Contact

Questions about this policy, or about your data, can go to gael@northsite.app.