Privacy Policy

1. Introduction

SiteUp.AI ("we," "our," or "Company") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data and your privacy rights under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. Data We Collect

2.1 Information You Provide

• Account Information: Name, email address, password
• Profile Information: Avatar, bio, preferences
• Content Data: Content you create, upload, or generate
• Payment Information: Billing address (credit card info handled by third-party processors)

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, operating system
• Cookies and Tracking Technologies: See our Cookie Policy
• Log Data: Access times, page views, clicks, error logs

3. How We Use Your Data

We use your data for the following purposes:

• Providing and maintaining our services
• Processing your requests and transactions
• Improving user experience and product features
• Sending service notifications and updates
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations
• Marketing purposes (with your consent)

4. Legal Basis for Processing (GDPR)

• Contract Performance: Necessary to provide our services
• Legitimate Interests: Improving services, security
• Consent: Marketing, non-essential cookies
• Legal Obligation: Compliance with legal requirements

5. Data Sharing

We may share your data with:

• Service Providers: Hosting, analytics, payment processing, customer support
• Business Transfers: Mergers, acquisitions, or asset sales
• Legal Requirements: Compliance with court orders, subpoenas, or legal process
• Protection of Rights: Enforcing our terms, preventing fraud

We do not sell your personal data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Account data is retained while your account is active. You may request deletion of your data at any time.

• Account Data: 30 days after account closure
• Log Data: 90 days
• Backups: Up to 180 days

7. Your Rights

7.1 GDPR Rights (EU Users)

• Right to Access: Obtain a copy of your data we hold
• Right to Rectification: Correct inaccurate data
• Right to Erasure ("Right to be Forgotten"): Delete your data
• Right to Restriction: Restrict data processing
• Right to Data Portability: Receive your data in structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw your consent at any time

7.2 CCPA/CPRA Rights (California Users)

• Right to Know: What personal information is collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Correct: Correct inaccurate personal information
• Right to Opt-Out: Opt-out of sale or sharing of personal information
• Right to Non-Discrimination: No discrimination for exercising your rights

To exercise your rights, contact us at:privacy@siteup.ai

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We use Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is adequately protected during transfer, in compliance with GDPR requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• TLS/SSL encryption (in transit)
• AES-256 encryption (at rest)
• Regular security audits and penetration testing
• Access controls and two-factor authentication
• Employee data protection training

10. Children's Privacy

Our service is not directed to children under 16 (or 13 in the US). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our website and updating the "Last Updated" date. Material changes will be notified via email.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

EU Users: If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with your national data protection authority.