Privacy

Who is responsible

The service is operated by Gael Ovide-Etienne, registered in France, who acts as the data controller for the personal data described here. Privacy requests go to gael@northsite.app.

What we collect

We collect only what we need to build and run your site.

• Account information. Your name where you give it, your business email address, and your phone number, used to sign you in and verify your identity.
• Site data. The description of your business you provide, the content of the site we build, any changes you make, images you upload, and the subdomain you choose.
• Usage data. Basic, privacy-respecting counts on your published site, such as visits and leads, and enough about how the product is used to keep it working and improve it. We store a one-way hashed visitor identifier and never keep raw IP addresses.

Why we collect it

• To provide the service: building, publishing, and hosting your web presence, and sending you the leads your site collects.
• For billing, on paid plans.
• For support, when you write to us.
• For abuse prevention, keeping your account secure and the service safe.

We do not sell your personal data, and we do not use it for advertising.

Who processes it for us

We rely on a small set of providers to run the service. Each processes only the data needed for its part of the job.

• Supabase, our database and sign-in.
• Vercel, our hosting.
• Stripe, our payment processing. Your card details go directly to Stripe, and we never store card numbers.
• Twilio, which sends the verification code to your phone.
• Resend, which sends our email, such as sign-in codes and lead notifications.
• Anthropic, which provides the automated text generation that writes your site copy from the description you provide.
• fal.ai, which provides the automated image generation for your site.
• Cloudflare Turnstile, which helps us tell real people from automated abuse on our forms.
• Unsplash, a source of stock photography used as a fallback for site imagery.

Each provider holds its own privacy terms. We choose providers that treat your data with care, and we do not pass your data to anyone else.

Your rights

If you are in the European Union, the GDPR gives you the right to:

• Access the personal data we hold about you.
• Correct anything that is wrong.
• Have your data deleted.
• Receive your data in a portable form.
• Complain to a supervisory authority. In France that is the CNIL, at cnil.fr.

If you live in a US state with a consumer privacy law, you hold equivalent rights where they apply. Wherever you are, write to us and we will honour the same requests.

Cookies

Our cookie use is minimal and functional. We store no advertising or third-party tracking cookies.

• A session cookie that keeps you signed in.
• A short-lived cookie during sign-up that carries your details safely between steps.
• A preference cookie that remembers small choices, such as which page layout you last viewed.

Keeping and deleting your data

We keep your account and site data for as long as your account is open. To have your data deleted, email gael@northsite.app from the address on your account. We remove the personal data tied to it, other than anything we must keep for legal or accounting reasons.

Contact

Questions about this policy, or any request about your data, can go to gael@northsite.app. We respond within a reasonable time, and within the deadlines the law sets.