Privacy Policy
Last updated: October 3, 2026
This policy describes what information Speedy Sites collects when you use our website-building service, and how we use it.
What we collect
| Information | Why we collect it | Where it's stored |
|---|---|---|
| Business name, trade, services, service areas, phone, hours, license/insurance info, reviews you provide | To build your website's content | In our systems, tied to your business record |
| Photos you upload | To use in your website | File storage (Vercel Blob) |
| Your email address | To send you a sign-in link and status updates, and to match you to your subscription | Your business record and our database (Supabase) |
| Your Google account email address and the fact that Google confirmed it is yours — only if you choose “Sign in with Google” | To sign you in without a password, and to find your account | The same place as any other email address you give us: your business record and our database (Supabase). We ask Google for nothing else — no contacts, no calendar, no Drive, no files, no profile photo, no name |
| Your first name and email address, if you spin the discount wheel on our home page | To issue you a real discount code, email it to you, and apply it automatically when you subscribe. It also means one spin per person — if you come back, we give you the prize you already won rather than a new one | With Stripe, our payment processor, as a discount code attached to your email address, and in our own database (Supabase). This happens even though you have not paid us anything — Stripe is where the discount has to live for it to work later. Spinning does not create an account or start a subscription, and the only email it sends you is the one carrying your code |
| Payment information | To process your subscription | Handled entirely by Stripe, our payment processor — we never see or store your full card number |
| Subscription status (active, trial, canceled, etc.) | To know whether your site should stay live | Our database (Supabase), synced from Stripe |
| Anonymous usage events across our own pages — that a page was viewed, which buttons were pressed, which step of the sign-up form you reached, whether a submission succeeded, whether a checkout was completed, and whether you were on a phone or a computer | To count how many people reach each stage, so we can find the places our pages are confusing or broken and fix them | Our own database (Supabase). These records contain no name, email, business name or IP address — only a random code that groups one visit and is discarded when you close the tab. These particular records are ours alone and are never shared with an advertising network |
| If you visit a website we built for one of our customers: that the page was viewed, and which page it was | So the business that owns that site can see roughly how many visits it gets, in their own account with us | Our own database (Supabase). These records contain no name, email, business name, IP address, referrer or browser information — only a random code that groups one visit and is discarded when you close the tab. This does not run for automated tools (page-testing software) and is never shared with an advertising network |
| Privacy-friendly traffic analytics — that a page was viewed, the page’s address, the site that referred you (if any), and your approximate country and whether you were on a phone or a computer | To see how many people visit and where they come from, so we know which pages are working | Vercel Web Analytics, built in to our hosting provider. Cookieless, with no cross-site tracking and no advertising profiles, and your IP address is not stored — Vercel uses it briefly and in a hashed form only to count unique visits, then discards it |
| Advertising and analytics measurement — that you arrived from one of our Google ads, which of our pages you looked at, whether you then signed up, and the amount of any subscription you paid for, plus the standard information a browser sends with any request (your IP address, browser and the page you are on) | To see which ads bring people who actually sign up, so we can stop paying for the ones that don’t, and to see which pages people get stuck on | Google — Google Ads conversion tracking (tag AW-18400099048) and Google Analytics 4 (G-SDZ29HEJK1), on one tag. These are advertising and analytics trackers: they set cookies in your browser and Google may use what they collect for its own purposes, under Google’s Privacy Policy. We never send Google your name, email or business details. You can opt out of personalised Google advertising at adssettings.google.com, and browser settings or an ad blocker will also stop it |
| How you use the page — where you click and tap, how far you scroll, and a replay of your visit as a moving picture of the page, plus the standard information a browser sends with any request (your IP address, browser and the page you are on) | To see which parts of a page people actually use and where they get stuck, so we can fix the confusing parts instead of guessing | Microsoft Clarity (project ykbp4m26vz). It sets cookies in your browser and Microsoft may use what it collects for its own purposes, under the Microsoft Privacy Statement. What you type is masked before it leaves your browser — the sign-up questionnaire and the account pages that show your billing details and your enquirers’ contact details are all masked, so the replay shows the shape of the page and where you clicked, never the words. It does not run on our internal staff pages at all. A browser’s Do Not Track setting, private browsing or an ad blocker will stop it |
| Who you are — not anything you type, but an attempt to work out which person is visiting, by matching the standard information a browser sends with any request (your IP address, browser and the page you are on) against an outside database of business contacts. Where that succeeds it can tell us your name, your LinkedIn profile and your work email address without you filling anything in or asking us to get in touch | So we can follow up with businesses that looked at Speedy Sites and never made contact | RB2B, reached through Instantly’s visitor tag (also branded Leadsy / VTag). It sets cookies and draws on outside data providers, under RB2B’s Privacy Policy and Instantly’s. RB2B states that this person-level identification is US-only. You can have your details removed from its database at app.retention.com/optout; an ad blocker or a tracker-blocking browser setting stops it running at all. It does not run on our internal staff pages |
| An unfinished sign-up form | So you can close the tab and pick up where you left off | Only in your own browser, never sent to us. It is deleted when you submit, when you choose "Start fresh", or after 14 days |
How we use your information
We use what you submit to build, host, and operate your website, to bill your subscription, and to contact you about your account (sign-in links, status updates, billing). We don't sell your information.
Signing in with Google
Signing in with Google is optional — an emailed sign-in link does the same
job. If you use it, we ask Google for only two things: confirmation that you are
signed in, and your email address (the openid and email
scopes). We do not request, receive or store any other Google data.
Speedy Sites’ use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Concretely: we use your Google email address only to sign you in and to connect you to your own account and website. We do not sell it, we do not transfer it to anyone except the service providers listed below that need it to run the service or where the law requires it, we do not use it for advertising, and no human at Speedy Sites reads it except where you ask us for support, where we are legally required to, or for security and abuse investigations.
You can disconnect Speedy Sites from your Google account at any time at myaccount.google.com/permissions. That stops future Google sign-ins; to delete the email address we already hold, ask us under “Your choices” below.
Who we share it with
We share information with the service providers that make Speedy Sites work: Stripe (payments), Supabase (account/subscription data), Vercel (hosting, file storage, and privacy-friendly traffic analytics), Resend (email delivery), Google (advertising and analytics measurement on the pages described above, and — only if you choose it — sign-in), Microsoft (Clarity, the click and replay analytics described above), and Instantly and RB2B (the visitor identification described above). Each only receives what it needs to do its job. We don't share your information with anyone else except as required by law.
How long we keep it
We keep your business and account information for as long as your account is active, plus up to 30 days after cancellation in case you come back. After that, we delete it.
Your choices
You can ask us to delete your account and the information tied to it at any time by contacting us below. We'll delete what we can within 30 days — some information (like payment records) may be kept longer where we're legally required to.
Children's privacy
Speedy Sites is a business tool and isn't directed at children. We don't knowingly collect information from anyone under 18.
Changes to this policy
We may update this policy from time to time. We'll post changes here.
Contact
Questions about this policy, or to request your data or its deletion: support@speedys.site or (805) 624-0423
Operated by Neighbourhood Automation Experts, LLC.