Privacy Policy

How we collect, use, and protect your data.

Last updated: May 22, 2026

Overview

SiteIQ ("we," "our," or "us") provides AI-powered website monitoring and analysis services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials through our third-party authentication provider (Clerk). We do not store passwords directly.

Site Data

When you add a site to monitor, we collect and store:

  • Your site URL
  • Business description you provide
  • Public content from your website (HTML, metadata, images) during scans
  • Performance metrics from Google PageSpeed API and our internal analysis

Usage Information

We automatically collect certain information about your use of the service:

  • Chat messages and AI interactions
  • Scan history and results
  • Feature usage and preferences
  • Technical information (browser type, IP address, device information)

Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. We receive only subscription status and the last four digits of your card for display purposes.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our service
  • Perform AI analysis on your website
  • Send you scan results, digest emails, and important service updates
  • Process payments and manage subscriptions
  • Respond to your support requests
  • Detect and prevent fraud, abuse, and security incidents
  • Analyze usage patterns to improve our AI models and service quality

Data Sharing and Disclosure

We share your information only in the following circumstances:

Service Providers

We use trusted third-party services to operate our platform:

  • Clerk - Authentication and user management
  • Anthropic - AI analysis (Claude models)
  • Google Cloud - Hosting and infrastructure
  • Google PageSpeed API - Performance metrics
  • Stripe - Payment processing
  • Resend - Email delivery
  • Sentry - Error monitoring
  • PostHog - Product analytics

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests (subpoenas, court orders, etc.).

Business Transfers

If SiteIQ is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

  • Your account data and personal information are deleted within 30 days
  • Scan results and site data are deleted within 90 days
  • Some information may be retained in backups for up to 90 additional days
  • Aggregated, anonymized data may be retained indefinitely for analytics

Security

We implement industry-standard security measures to protect your information:

  • All data is encrypted in transit (TLS 1.3)
  • Database connections are encrypted
  • Passwords are never stored directly (handled by Clerk)
  • Regular security audits and monitoring
  • Access controls and least-privilege principles

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

  • Access - Request a copy of your personal data
  • Correction - Update inaccurate information
  • Deletion - Request deletion of your data
  • Portability - Receive your data in a machine-readable format
  • Objection - Object to certain processing activities
  • Restriction - Request we limit how we use your data

To exercise these rights, contact us at privacy@siteiq.app

Cookies and Tracking

We use essential cookies for authentication and session management. We also use analytics tools (PostHog) to understand how users interact with our service. You can control cookies through your browser settings, but this may limit functionality.

Children's Privacy

SiteIQ is not intended for users under 18. We do not knowingly collect information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use Google Cloud services primarily in the United States. By using SiteIQ, you consent to these transfers.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information
  • Right to deletion
  • Right to non-discrimination

We do not sell your personal information.

European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the GDPR including access, correction, deletion, and data portability. Our lawful bases for processing include:

  • Contract - Processing necessary to provide our service
  • Legitimate interests - Improving our service, security
  • Consent - Marketing communications (when applicable)

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website at least 30 days before changes take effect. Your continued use after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or our practices, contact us: