SiteDrop Privacy Policy

Account information. Name, email address, password (stored in hashed form), language, and country, provided when you create an account.

Payment information. Payments are processed by Stripe. We do not store full card numbers. We receive and retain billing-related details such as the payment method type, the last four digits of your card, billing country/postal code, charge history, and subscription status.

Content you create. Websites you generate, text and images you upload, prompts you enter, lead searches you run, and support messages you send.

Usage and device information. We collect information about how you use the Service — pages viewed, features used, buttons clicked, approximate location derived from IP address, browser and device type, and diagnostic events (such as errors). We use a third-party product analytics service for this purpose.

Session recordings. To diagnose problems and improve usability, we may record how users interact with the SiteDrop application interface (mouse movement, clicks, navigation). Recordings are configured to mask passwords and payment fields.

Communications. Emails you send to support and conversations with our support chat (operated via a third-party support platform, including AI-assisted responses).

Cookies and similar technologies. We use cookies and local storage to keep you signed in, remember preferences, and measure product usage.

We use information to:

• Provide, operate, and secure the Service, including generating websites from your prompts;
• Process payments, subscriptions, credits, refunds, and domain registrations;
• Provide customer support and respond to your requests;
• Monitor performance, debug issues, and improve features (analytics);
• Detect and prevent fraud, abuse, and payment disputes;
• Send transactional messages (receipts, renewal and payment-failure notices, verification emails, service announcements);
• Send product and marketing emails, which you can opt out of at any time via the unsubscribe link;
• Comply with legal obligations.

Legal bases (EEA/UK users): performance of our contract with you; our legitimate interests (service improvement, security, fraud prevention); consent where required (e.g., certain cookies or marketing); and legal compliance.

AI processing. Your prompts and related inputs are sent to third-party AI model providers to generate your websites. Under our agreements with these providers, your inputs are not used to train their models.

We do not sell your personal information. We share information with:

• Service providers (processors) that help us operate the Service, under agreements limiting their use of your data. These include: our payment processor (Stripe); cloud hosting, database, and authentication providers; product analytics providers; customer support platforms; transactional email delivery services; ICANN-accredited domain registrars (registrant details are shared as required to register your domains and comply with ICANN rules); and AI model providers used to generate websites. A current list of our service providers is available on request at support@sitedrop.ai.
• Legal and safety. We may disclose information to comply with law, enforce our Terms, or protect the rights, safety, and property of SiteDrop, our users, or others.

Business transfers. If SiteDrop is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy.

We are based in the United States and our providers process data in the United States and other countries. Where required, transfers from the EEA/UK are protected by appropriate safeguards such as Standard Contractual Clauses.

We keep account information while your account is active. After account deletion, we delete or de-identify personal information within 60 days, except where retention is required for legal, tax, accounting, fraud-prevention, or dispute purposes (for example, payment records are retained as required by law). Analytics and session data are retained for limited periods appropriate to their purpose. Published websites are taken offline when the associated subscription ends, and site content is deleted after a reasonable wind-down period.

Websites built with SiteDrop may collect visitor information — most commonly, contact form submissions (name, email, message). For that data:

• You (the site owner) are the controller. We process form submissions on your behalf: we transmit them to the notification email configured for your site and store them as needed to provide the Service.
• You are responsible for using visitor data lawfully and for posting a privacy policy on your own websites where required by law.
• Site visitors seeking access or deletion of their information should contact the site owner; if a visitor contacts us, we will refer the request to you and cooperate as needed.

Access, correction, deletion, portability. You may request a copy of your personal information, correct inaccurate information, request deletion of your account and personal information, or request your data in a portable format by emailing support@sitedrop.ai from the address on your account. We respond within the time required by applicable law (generally 30–45 days).

Marketing opt-out. Use the unsubscribe link in any marketing email. Transactional emails (receipts, renewal and security notices) are sent regardless, as they are part of operating your account.

EEA/UK users additionally have the right to object to or restrict certain processing and to lodge a complaint with a supervisory authority.

California users have rights under the CCPA/CPRA, including to know, delete, and correct personal information, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined in the CPRA.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 18 may use the Service only through an account held by a parent or legal guardian, as described in our Terms of Service. If you believe a child under 13 has provided us personal information, or that a minor is using the Service without parental consent, contact support@sitedrop.ai and we will delete the information and/or close the account as appropriate.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

We may update this policy from time to time. Material changes will be announced by email or in-product notice, and will be posted on this page.

Viral Studios, LLC
Privacy requests: support@sitedrop.ai