Privacy Policy

1. Who We Are

GetWebsiteBuilt is operated by GetWebsiteBuilt LLC, a California limited liability company ("we", "us", "our"). We operate the website at getwebsitebuilt.com, the customer dashboard, and the published sites hosted on our infrastructure. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

2. Information We Collect

• Account information: your name, email address, preferred language, and password (stored only as a secure hash by our authentication provider) when you create an account.
• Billing information: payments are processed by Stripe. We store only Stripe reference IDs and your card's brand, last 4 digits, and expiration for display; full card numbers never reach our servers.
• Site content: the business details you enter (like your business name, type, and description) and the website content created from them, stored so we can build, host, and serve your site.
• Usage data: how the dashboard and marketing site are used (pages viewed, features used, errors encountered). Our analytics runs without cookies and without persistent identifiers. See our Cookie Policy.
• Site visitor data: anonymous page-view events on published customer sites (page path and site name only). Each view is recorded with a random one-time ID: no cookies are set, no visitor IP address is stored, and views cannot be linked to a person or across pages.
• Server logs: our hosting providers keep standard, short-lived request logs (IP address, browser type, requested URL) for security and reliability.

3. How We Use Your Information

• To create and manage your account, subscription, and credit balance.
• To generate, host, and serve your published sites.
• To process payments and send invoices and receipts.
• To send transactional messages (security alerts, billing, support replies).
• To improve product quality, debug issues, and detect abuse or fraud.
• To comply with legal obligations and enforce our Terms.

4. Legal Bases (GDPR)

If you are in the European Economic Area or United Kingdom, we process personal data under one or more of: contract (to provide the Service you signed up for), legitimate interests (to secure and improve our Service, including cookieless analytics that use no persistent identifiers), and legal obligation (e.g., tax records). We do not run any processing that relies on consent today; if we ever introduce it, we will ask first.

5. Sharing Your Information

We do not sell your personal information. We share it only with:

• Service providers (sub-processors): companies that provide our hosting and infrastructure, database and authentication, payment processing (Stripe), product analytics and error tracking, account email delivery, and site copy generation. Each processes data on our behalf under written agreements.
• Legal authorities: when required by law, valid legal process, or to protect rights, safety, or property.
• Successors: in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

Our current sub-processor list and processor terms are published in our Data Processing Addendum.

6. International Data Transfers

Our infrastructure and sub-processors are based in the United States. Where personal data is transferred from the EEA, UK, or Switzerland to the U.S., we rely on our providers' certifications under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and on Standard Contractual Clauses (SCCs) where a provider is not certified.

7. Cookies

We use a small number of cookies and similar technologies. See our Cookie Policy for the full list and how to control them.

8. Data Retention

• Account data and site content: retained while your account is active. Deleting your account (available in Settings) permanently removes your account, organization, sites, and site content right away.
• Billing records: kept in Stripe for the period required by tax and accounting law (typically 7 years).
• Backups: encrypted database backups roll off after 7 days, so anything you delete is gone from our backups within a week. Photos you uploaded are not part of database backups at all, and disappear the moment they are deleted.
• Analytics events: not linked to your identity (no cookies, no persistent identifiers), so they cannot be traced back to you after deletion.

9. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict processing, and withdraw consent at any time.
• Receive a portable copy of your data.
• Lodge a complaint with a supervisory authority in your jurisdiction.
• For California residents: rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing" as defined by California law. We do not sell personal information.

You can handle most of this yourself: your name, email, and language are editable in Settings, your site content is yours to edit or delete, and account deletion in Settings permanently erases everything. For anything else, email legal@getwebsitebuilt.com and we will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

10. Security

We use reasonable technical and organizational measures to protect personal data, including TLS encryption in transit, encryption at rest for primary databases, scoped access controls, and audit logging. No method of transmission or storage is fully secure; we cannot guarantee absolute security but will notify affected users of any data breach as required by law.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or in-product notice at least 14 days before they take effect. The "Effective date" at the top of this page reflects the most recent revision.

13. Contact

Privacy questions or requests: legal@getwebsitebuilt.com.