Privacy Policy

This policy explains what personal information DollarSite collects, why, and what choices you have. It covers three groups of people: customers (people who sign up to build websites with us), prospects (people who try DollarSite or contact us before signing up) and visitors to websites our customers build.

Information we collect from customers and prospects

We keep what you type into DollarSite itself, so we can build your website, help you, and follow up with you:

• Account details: name, email address, password (stored as a secure hash we can't read), and the business description you give us.
• What you tell us about your business: its name, what you do (your industry), where you work, how customers should reach you (and the phone or email you give for that), and your answers to the questions in “Send Chip your photos”, including before you create an account. For photos, we keep the photos only as part of your draft website; for marketing we only note how many you added and which kind of business they suggested.
• Website content: the text, images and settings you provide or create in the builder.
• Your messages to Chip and the builder, and messages you send us through our contact form.
• How far you've got: whether you've started a draft, seen your preview, created an account, built a website or made it live to the Internet, your plan, and when you were last active.
• Billing details: handled by our payment provider. We receive limited information such as subscription status and the last digits of your card, never your full card number.
• Where you came from: if you arrived from a campaign link, the campaign tags (e.g. utm_source), the page you landed on and the referring website, and the country you signed up from. We store only a country, never your IP address, for this.
• Your marketing choice: whether you ticked “Send me tips and offers by email”, when, and where.

How we record your use of the dashboard

When you are signed in, we record how you use the DollarSite dashboard (which pages you open, when, how long you spend on them, and the changes you make, such as turning on an app or uploading a picture), together with your country and a general device and browser type, to support you, keep the service secure and improve the product. We never record what you type into forms, your passwords, or the contents of your files. This information stays on our own servers and is not shared with advertisers or analytics companies.

How we use it for marketing

We use the information above to understand which of our marketing works and to send you relevant follow-ups, for example tips for your kind of business, a reminder that your draft website is ready, or an offer when you're ready to make it live to the Internet.

• We send marketing email only if you ticked “Send me tips and offers by email”. The box is never ticked for you.
• Every marketing email has a one-click unsubscribe link, and unsubscribing works straight away. You can also ask us by replying to any email or writing to info@dollarsite.net.
• Emails about your account (confirming your email, password resets, receipts and billing notices, notifications you've switched on) are not marketing; you get those whether or not you opted in.
• We don't sell your information, and we don't share it with advertisers.

Information collected from visitors to our customers' websites

When a visitor books an appointment, makes a reservation, fills in a form, joins a newsletter, buys a ticket, chats with a website's AI Agent or leaves a review on a customer's website, the details they enter are collected on behalf of that customer. For this data, the customer is the controller and DollarSite acts as a processor/service provider. We use it only to provide the Service to that customer, and never for our own marketing.

Our built-in website analytics do not use cookies and do not store personal data. Visitor counts are made with a daily-rotating anonymous hash.

How we measure our ad landing pages

Some of our ads send you to a page on our own site (an “ad landing page”). To learn which message works, we count what happens on that page, ourselves, with no third-party tracking: which page version you saw, the campaign tags in the link, the website you came from (the site name only, not the full address), your country (a two-letter code), whether you are on a phone, tablet or computer, whether you clicked the button or scrolled to the price, and, if you go on to start a website with “Send Chip your photos”, which step you reached.

• We do not store your IP address, your browser's identifying text, or an ID that follows you. To count each visitor once, we use a short code made from your connection details and the date; it changes every day and cannot be traced back to you or linked from one day to the next.
• We use no third-party scripts, advertising pixels or fingerprinting on these pages, and we do not combine this with data from other sites.
• If your browser sends Do Not Track or Global Privacy Control, we serve the page and record nothing about your visit.
• Outside the United States, we count nothing on these pages until you choose “Accept all” (see Cookies).
• We remember which page version you were shown in a first-party cookie (30 days) so you see the same one when you come back. Counts are kept for up to 400 days.

Website makeovers we email to businesses

Sometimes we build a free sample of a new website for a business, using the text and photos already on its public website, and email the owner a private link to see it. The sample is never indexed by search engines or shown to anyone else, and it is deleted when the link expires (30 days) unless the owner claims it.

• These emails may include a picture of the sample website that is loaded from our server when the email is opened. Loading it tells us the email was opened. This is a rough count: some email apps load pictures ahead of time, and some never load them.
• We also count visits to the private link, so we know whether the sample was looked at.
• Every email has an unsubscribe link, and we don't email an address again after it unsubscribes. To have a sample deleted sooner, reply to the email or contact us.

How we use information

• To provide, maintain and secure the Service, including generating websites and making them live to the Internet.
• To send service emails (account, billing, notifications you've enabled).
• To send tips and offers if you opted in (see “How we use it for marketing”), which you can unsubscribe from at any time.
• To understand and improve the Service in aggregate.
• To comply with legal obligations and prevent abuse.

AI processing

To build and edit websites, the information you provide in the builder is sent to AI model providers acting as our sub-processors. We do not use visitor data collected by your website's apps to train AI models.

Sharing

We don't sell personal information. We share it only with service providers who help us run the Service (such as keeping websites online, email delivery, payment processing and AI model providers), under contracts that protect it, or when required by law.

Cookies

We use a small number of first-party cookies (cookies from our own sites). We don't use advertising cookies, and no other company sets tracking cookies on our pages. The necessary ones let you sign in, keep a draft and send a form. The optional ones tell us which campaign link or page brought you here, so we can see which of our marketing works.

If you're in the United States, we set the optional cookies when you visit. Everywhere else, we set them only after you choose “Accept all”, and “Only necessary” keeps them off. You can change your choice with the “Cookie settings” link at the bottom of every page. When you choose “Accept all”, we start counting from then on; we don't go back and record your earlier visits.

Ask Chip keeps your chat in your browser's session storage, which your browser deletes when you close the tab. When a form asks you to confirm you're human, a check from Cloudflare (Turnstile) loads, and Cloudflare may set a short-lived security cookie of its own. Our standard look uses fonts stored on our own server. A few alternative color looks load their fonts from Google Fonts, which then sees your IP address.

Retention

We keep account data while your account is active and for a limited period afterwards for legal and backup purposes. Customers can delete website data and contacts at any time; deleted data is removed from backups on a rolling schedule.

When you delete a website, we keep a private backup of it for 30 days so we can bring it back if something goes wrong, then it is permanently deleted. Ask us at info@dollarsite.net if you need it removed sooner.

A draft made with “Send Chip your photos” that nobody saves to an account is deleted 30 days after it was last opened or changed, photos included. Its short “mypreview” link only opens it while it exists. What you told us about your business is kept for marketing follow-up only if you gave us an email address; otherwise it is deleted after 90 days without activity.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. Contact us at info@dollarsite.net. If you're a visitor to a customer's website, please contact that business first; we'll help them respond.

Deleting your marketing profile. The unsubscribe page in any of our marketing emails also lets you delete the marketing profile we keep about you, or you can ask us by email. We then keep only a scrambled (one-way) version of your email address, so we never email you marketing again by mistake.

If you're outside the United States

These details apply to you if you live outside the United States, including in the European Union, the European Economic Area, the United Kingdom and Switzerland.

Who is responsible

[To be completed: company legal name and address] decides how the information in this policy is used (the “controller”). For information that visitors type into our customers' websites, the customer is the controller and we act for them.

Why we use your information

• To run the service you signed up for: our contract with you.
• To send marketing email: your consent, given by ticking the box. We never tick it for you.
• To set optional cookies and record which campaign brought you here: your consent, given by choosing “Accept all”.
• To keep the service secure, prevent abuse and fix problems: our legitimate interest in running a safe service.
• To meet legal duties, such as keeping billing records.

Your rights

You can ask us for a copy of your information, including in a format you can take to another service. You can ask us to correct or delete it, to limit how we use it, or object to how we use it. You can withdraw your consent at any time; that doesn't change what we did before you withdrew it. You can also complain to your local data protection authority (in the UK, that's the Information Commissioner's Office).

How to make a request

Email us at info@dollarsite.net from the address you use with us and tell us what you'd like. We may ask you to confirm it's you. We answer within the time the law requires, and there's no charge.

Your IP address

If you're outside the United States, we don't keep your IP address with your account. We keep a scrambled, one-way code made from your network instead, so we can spot abuse such as one person opening many accounts. We work out your country from your connection to decide whether to show you the cookie choice, and we keep only the two-letter country code.

How long we keep it

• Account information: while your account is open.
• A marketing profile where you agreed to marketing email: until you unsubscribe or ask us to delete it.
• A marketing profile with an email address but no account and no marketing consent (for example, after you wrote to us through the contact form): deleted after 12 months without activity.
• A profile with no email address: deleted after 90 days without activity.

Where your information goes

We're based in the United States and our servers are there, so your information is transferred to the United States. [To be completed: the safeguard we rely on for these transfers, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.]

Service providers

These companies process information for us, under contracts that protect it:

• OVHcloud: our servers and database.
• Cloudflare: customer websites, content delivery, security, the human check and some AI processing.
• Stripe: payments.
• SMTP2GO: email delivery.
• DeepSeek and Eden AI: the AI models that write and edit websites.
• Bunny.net: video storage and playback, if you use video.
• Google Fonts: fonts for some alternative color looks.

[To be completed: owner to confirm this list.]

Automated decisions

We don't make decisions about you that have legal or similarly significant effects by automated means alone.

Security

We use encryption in transit (the padlock 🔒, secure connections), hashed passwords, access controls and audit logging. No system is perfectly secure, but we take protecting your data seriously.

Children

The Service is not directed to children under 16, and we don't knowingly collect their personal information.

Changes

We'll update this policy as the Service changes and notify customers of material changes.

Contact

[To be completed: company legal name and address.] Email: info@dollarsite.net.