This policy explains what SiteAI does with personal data. It covers the SiteAI mobile app and the websites we host for our users. The operator and controller is Robin Kunz, Switzerland — rk@allbound.ch.
The short version: we keep what we need to build and host your website and to bill you — nothing else. We never store your website visitors’ IP addresses. We do not sell data, and we do not use your business information to train AI models.
1. Two different roles
It matters which data we are talking about:
- Your data as a SiteAI user. Your account, your answers, your sites, your subscription. Here we are the controller and this policy applies directly.
- Your website visitors’ data. Contact-form messages and visit statistics belong to you; we merely hold them for you. Here you are the controller and we act as your processor, only on your instructions. You are responsible for telling your own visitors what you do with their data.
2. What we collect from you
- Account: the identifier Apple gives us through Sign in with Apple, and your name and email address if you choose to share them. If you use Apple’s private relay address, we only ever see the relay address.
- What you tell the app: your answers in the guided interview — business name, location, what you offer, hours, contact details and anything else you type or dictate — plus the change requests you write later.
- Your website: the generated pages, images and settings, and the address it is published at.
- Purchases: subscription and Fast Pass status. Payment is processed by Apple; we never receive your card details.
- Voice input: if you dictate an answer, speech recognition runs on your device. Only the resulting text reaches us — no audio recording leaves your phone.
- Product analytics and crash reports: how the app is used (screens opened, steps completed, errors) and diagnostic data when it crashes, so we can find and fix problems.
- Domains: if you buy a domain, the registration details required by the registry.
3. What we collect from your website’s visitors
- Contact-form messages: whatever the visitor typed — typically name, email or phone, and a message — delivered to your inbox in the app.
- Visit statistics: page views, the day, and the referring website, so you can see whether anyone is finding you.
- No raw IP addresses. To count visitors rather than page loads, we derive a short-lived one-way fingerprint from the visitor’s IP address and browser, salted per site and rotated daily. The IP address itself is never written to our database, and yesterday’s fingerprint cannot be linked to today’s.
- No advertising cookies and no third-party trackers are placed on the sites we generate.
4. Why we may use it, and on what legal basis
- To provide the Service — generating, publishing and changing your site, delivering your messages and statistics. Basis: performance of our contract with you (GDPR Art. 6(1)(b); Swiss FADP Art. 31(2)(a)).
- To bill and to prevent abuse — verifying subscriptions, enforcing limits, investigating misuse of hosting. Basis: contract and our legitimate interest in a Service that is not abused (Art. 6(1)(f)).
- To improve the app — aggregate usage analytics and crash diagnostics. Basis: legitimate interest; you can switch analytics off in the app’s settings.
- To meet legal obligations — accounting and tax records. Basis: legal obligation (Art. 6(1)(c)).
We do not sell personal data, do not share it with advertisers, and do not use it for advertising profiling.
5. AI processing
To build your website, the answers you give are sent to an AI model provider that generates the page for you. Only what is needed for that goes out; your account identifier and payment status are not automatically added. Contact details or photos that you include in your website brief are part of that brief. Our provider processes the request to return the result and, under our agreement, does not use it to train its models.
6. Who else processes data for us
- Hetzner Online GmbH (Germany) — servers, storage and backups. Your data and your website live here.
- Anthropic, via OpenRouter (USA) — generating website content from your answers.
- Pexels (with Openverse as a fallback) — searching for photographs for your site.
- RevenueCat (USA) — managing subscription status.
- PostHog (EU hosting) — product analytics and crash reports.
- Apple — sign-in, payment and app distribution, under Apple’s own privacy policy.
- Porkbun (USA) — domain registration, only if you buy a domain.
Each acts on our instructions under a data-processing agreement. Where data reaches a country without an adequacy decision, transfers are covered by the EU Standard Contractual Clauses and equivalent safeguards recognised under Swiss law.
7. Publication is public by design
Your website is published on the open internet. Anything you put on it — your business address, phone number, photographs — is visible to anyone and may be indexed by search engines and copied by third parties beyond our control. Only publish contact details you are content to make public.
8. How long we keep it
- Account, sites and inbox: while your account exists.
- After you delete your account: removed from live systems promptly; residual copies in encrypted backups disappear as those backups rotate, within 30 days.
- Visit statistics: kept in aggregate; daily visitor fingerprints cannot be linked across days; the individual event records are retained for up to 90 days.
- Invoices and accounting records: kept as long as tax law requires (in Switzerland, ten years).
9. Security
Traffic is encrypted in transit with TLS. Access to production systems is restricted to the operator and protected by SSH keys, not passwords. Backups are taken nightly, stored on separate infrastructure, and restore-tested. No system is perfectly secure; if a breach ever affects your personal data, we will inform you and the competent authority as the law requires.
10. Your rights
You may request access to your personal data, correction, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what was done before.
You can delete your account and its data directly in the app, under Settings. You may also write to rk@allbound.ch; we answer within 30 days.
If you believe we handle your data unlawfully, you may complain to a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU/EEA the authority of your habitual residence.
11. Children
SiteAI is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
12. Changes
We may update this policy. Material changes will be announced in the app or by email before they take effect, and the date at the top will change.
13. Contact
Robin Kunz, Switzerland · rk@allbound.ch