Privacy, in plain English.

SiteBrain ("we", "our", "us") operates the AI chatbot platform at sitebrain.app and sitebrain.pl. The data controller for your personal data is the operator of SiteBrain.

If you have any question about your privacy or your data, write to us at privacy@sitebrain.app.

We only handle data that's required for the product to work:

• Account data — your email address and a hashed password when you sign up.
• Your website content — our crawler fetches the public pages of your site to build the chatbot's knowledge base.
• Chatbot conversations — we store the conversations your visitors have with the bot so you can review them in your dashboard and so we can count messages for billing.
• Usage data — technical logs (IP, user agent, request path) needed to secure the service and detect abuse.
• Billing data — if you upgrade, our payment processor stores card details. We never see your full card number.

We only use your data to make the product work the way you expect:

• delivering, maintaining and improving SiteBrain,
• building and refreshing your website's business brain,
• answering your visitors' questions,
• handling billing and plan limits,
• detecting abuse and securing the service,
• communicating with you about product and support.

We do not train foundation models on your content. Your data is not sold, not shared with other customers, and not used as training material.

SiteBrain runs on Cloudflare infrastructure (Workers, D1, KV). Data is stored in regions consistent with Cloudflare's policies for your location. We also use sub-processors for specific capabilities:

• OpenAI — embeddings, only to vectorise your content,
• OpenRouter — LLM calls for knowledge extraction and answer generation,
• Resend — transactional email,
• Stripe — payment processing (when you're on a paid plan).

If you're in the EU you have the full set of GDPR rights — access, rectification, erasure, restriction, portability, and objection. If you're in another jurisdiction, we honour equivalent local rights.

To exercise any of these, write to privacy@sitebrain.app. We respond within 30 days.

Most things you can do yourself from the dashboard: export conversations, delete a bot, delete your account.

We keep your account data for as long as you have an active account. We keep chatbot conversations for 12 months for analytics and monitoring, unless you set a shorter retention in your dashboard. Technical logs are rotated after 30 days.

When you delete your account, we delete your data within 30 days, keeping only what we're legally required to retain (such as invoices).

If anything material changes, we'll email the address on your account at least 14 days before the change takes effect. The "last updated" date at the top of this page is always the source of truth.