Privacy policy

This policy explains what Sitenote (“we”) collects when you use Sitenote, why we need it, and the choices you have. If anything here is unclear, email us at howdyayush04@gmail.com.

What we collect

Your account

• Your name, email address and password (stored securely by our login provider, never in plain text).
• If you sign in with Google, your name, email address and profile picture from your Google account.
• Your settings, such as report tone, branding for client reports, and report recipients you add.

The websites you add

• Each site's address and name, and whether it's your own site or a client's.
• Results of our daily checks on the site's public pages: whether it's online, page speed, SSL and domain expiry dates, basic SEO tags and broken links. These checks only look at what any visitor can see.
• The reports we draft, your edits to them, and when and to whom they were sent.

Tools you connect (optional)

• Google Analytics and Search Console, with read-only access. See “Google user data” below for exactly what we read.
• Webflow, with read-only access to your site details, CMS item counts, form submission counts and plan limits. We count form submissions; we don't store their contents.

How you use Sitenote

• Basic product analytics (which pages are used, and when something breaks) so we can fix bugs and improve the product. We don't use this for advertising.

Google user data

If you connect Google, Sitenote asks for two read-only permissions and nothing more:

• Google Analytics (analytics.readonly) — to read visitor numbers, traffic sources and form or goal completions for the properties you choose.
• Search Console (webmasters.readonly) — to read search clicks, impressions and the searches that bring people to the sites you choose.

We use this data only to show your site's numbers in Sitenote and to write the reports you send. We work out the numbers ourselves, then send a short summary of them (for example “visits: 4,210, up 18%”) to our AI provider so it can write the report text. We never request permission to change anything in your Google account.

Sitenote's use and transfer of information received from Google APIs to any other app will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.In practice, that means:

• We only use Google data to provide and improve the features you see in Sitenote.
• We don't sell it, and we don't use or transfer it for advertising.
• We don't use it to train AI or machine-learning models.
• People at Sitenote don't read it, unless you ask us to (for example in a support request), it's needed for security, or the law requires it.
• We only share it with the service providers listed below, to run Sitenote, or if the law requires it.

The access tokens Google gives us are encrypted when stored, are never sent to your browser, and are deleted as soon as you disconnect Google.

How we use your data

• To run the daily checks on your sites and alert you when something important breaks.
• To draft, show and send your monthly reports to the recipients you choose.
• To send you account emails, such as sign-in links and alerts.
• To keep Sitenote secure, fix problems and understand which features are useful.

Who processes it for us

We use a small number of service providers to run Sitenote. They only process data on our behalf and under our instructions.

• Supabase — database, file storage and sign-in.
• Cloudflare — hosting and delivering the website.
• Trigger.dev — running the daily checks and monthly report jobs.
• Resend — sending emails.
• Anthropic — writing report text from the summary numbers we send. Under its commercial terms, Anthropic doesn't use this data to train its models.
• Google PageSpeed Insights — measuring the public speed of your pages.
• Sentry — error reports, so we can fix bugs.
• PostHog — product analytics.

Public report links

Each sent report has its own private link made of a long random code. Anyone with the link can view that report, so share it only with people you trust. Report pages are hidden from search engines.

Cookies

We use cookies to keep you signed in and for product analytics. We don't use advertising cookies or sell cookie data.

How long we keep it

We keep your data while your account is open. If you disconnect a tool, we delete its access tokens straight away. If you delete your account, we delete your sites, reports and connected-tool data within 30 days, apart from anything we must keep by law.

Your choices and rights

• Disconnect Google or Webflow at any time in Sitenote, or from your Google or Webflow account settings.
• Update your profile or delete your account in Settings.
• Ask us for a copy of your data, to correct it, or to delete it, by emailing howdyayush04@gmail.com. These rights are protected by India's Digital Personal Data Protection Act, 2023, and depending on where you live, you may have further rights under laws such as the GDPR or CCPA.

Security

We encrypt connected-tool tokens at rest, use encrypted connections everywhere, and restrict each account to its own sites at the database level. No system is perfectly secure, so please use a strong password and tell us at once if you suspect a problem.

Children

Sitenote is a business tool and isn't meant for anyone under 16.

Changes to this policy

If we make important changes, we'll email you before they take effect. The date at the top shows when this policy last changed.

Contact

Questions or requests: howdyayush04@gmail.com · Sitenote