Privacy policy

Who we are

SiteOps (siteops.me) is an AI marketing engine for founders: it drafts posts, emails and ad campaigns, proposes plans, and runs the automation you switch on. This page explains what data that takes, in plain words. For anything unclear, write to support@siteops.me.

What we collect

• Your account: the name and email address from your Google sign-in, which runs on Firebase. We never see or store your password.
• Data from the tools you connect to your projects — visits, sales, campaign performance, subscriber counts — fetched over OAuth or API keys with exactly the permissions you grant during each connection.
• The content you and the AI create together: drafts, edits, approved posts and emails, plans, and the settings that shape them (your goals, audience and compliance notes).
• Event data your own sites and apps send through the SiteOps SDK: events, identifiers and traits about your users, which can include their email addresses. More on how we handle that just below.
• Billing details go to Paddle, not to us. Paddle.com runs our checkout as merchant of record, so your billing address and card details are collected by Paddle under its own terms and privacy policy. We only learn which plan you bought and whether the payment went through — full card numbers never touch our servers.
• Basic usage data on our own site (pages visited, device type, which features you use), measured with Google Analytics and Amplitude, so we can see what works and fix what doesn’t.

Data we process on your behalf

The event data your sites and apps send us describes your users, not you. For that data, you are the controller and we act as your processor: we store it, count it, and use it only on your instructions — for example, we send emails to those addresses only when you direct it, never on our own initiative. If one of your users asks about their data, that request is yours to answer, and we’ll help you fulfil it.

AI processing

Content generation and the assistant run on third-party AI infrastructure — Google Cloud Vertex AI. Prompts include your project context: your goals, audience, recent metrics and the content being worked on. The AI provider processes that data to provide the service, under its agreement with us.

Who we share it with

Only the services that make SiteOps run: Google Cloud for hosting, database and AI, Firebase for sign-in, Paddle for payments, invoices and sales tax, Google Analytics and Amplitude for usage measurement on our own site, and email delivery. Each processes data under its own agreement with us. The providers you connect yourself — ad networks, email platforms, social accounts — process data under their own policies, which you accepted when you opened those accounts. Nobody buys your data, ever.

YouTube connections

When you connect a YouTube account, SiteOps uses YouTube API Services to work with it, and the Google Privacy Policy applies to that data alongside this page. You can revoke SiteOps’s access at any time in your Google security settings. Data retrieved from YouTube API Services is refreshed or deleted within 30 days. SiteOps’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Everything runs on Google Cloud. Keys and tokens for your connected accounts are stored encrypted, traffic travels over TLS, and access inside our systems follows least-access — each part of the service can only reach what it needs.

Retention and deletion

Your data stays for as long as your account is active. Deleting a project removes its data; deleting your account removes everything. Disconnect any tool at any time and its token is removed the same moment.

Your rights

• Ask for a copy of your data, an export, or full deletion by emailing support@siteops.me. We answer within 30 days, usually much faster.
• Disconnect any tool at any time — its token is removed.
• If you’re in the EU or EEA, you can also raise a concern with your local data protection authority.

Cookies and analytics

Our marketing site uses Google Analytics and Amplitude to measure visits and feature use. Cookies can be limited in your browser settings; the site keeps working without them.

Children

SiteOps is not intended for anyone under 16.

Changes

When this policy changes, the update appears on this page. If a change matters, we email you about it.

This page is a plain-language summary written to be read; it is not a substitute for advice from your own counsel.