Privacy policy

1. Who we are

SiteSetu ("we", "us") runs an AI receptionist service for businesses. A business (the "owner") teaches SiteSetu about itself, and SiteSetu answers that business's customers on its chat page, QR code and website chat.

2. What we collect

Owner account: your name and email from Google sign-in, and the businesses you add.
Business information: what you enter or upload — services, prices, hours, FAQs, policies, notes, documents, photos and website pages you ask us to read.
Customer chats: messages customers send on a business's chat, and the replies.
Leads and appointment requests: the name, phone number and message a customer chooses to share with the business.
Technical data: IP address and basic request logs, used for security and to prevent abuse (for example rate limits).

3. Why we use it

To answer customers on behalf of the business and pass leads and appointment requests to the owner.
To let owners manage their business memory, see chats and get alerts.
To keep the service secure, prevent abuse and fix problems.

We do not sell or rent data, we do not show ads, we never use your data to train AI models, and we never contact a business's customers for our own marketing.

4. Who processes data for us

AI provider (currently Google Gemini): receives a customer's question with the relevant customer-facing parts of that business's memory to write a reply, and receives photos or scanned pages an owner uploads so they can be read. Team-only information is never sent to answer customers.
Google sign-in: to sign owners in.
Email and SMS providers: to send alerts to owners and messages customers ask for.
Hosting provider: the server where the service and its data are stored.

5. Business owners and their customers

For customer chats and leads, the business decides why it collects them; we process them for that business. Each business's data is kept separate and is never shown to another business or its customers. Information an owner marks "Team only" is never shown to customers.

6. How long we keep data

Business information, chats and leads: while the business uses SiteSetu, or until the owner deletes them or asks us to delete the business.
Owners can delete their business and all its data at any time from the app (Business → Delete this business); it is removed at once. If you ask us instead, we do it within 30 days. Copies in our backups are removed as those backups expire (within 14 days).
After a deletion we keep only a record that it happened (an internal store ID, the date and how many items were removed) — no names, numbers or messages.

7. Your rights

You can ask to see, correct or delete your personal data, and owners can download their business memory and documents at any time from the app. Customers of a business can ask that business, or us, to delete their details.

8. Cookies

We use only the cookies needed to run the service: a sign-in cookie for owners and a cookie that remembers your language. No advertising or tracking cookies.

9. Security

Data is sent over HTTPS, uploaded files are stored privately on our server and never published, every business is kept separate, and changes to a business's memory are recorded in a tamper-evident history.

10. Contact and grievances

For any privacy question, data request or complaint, contact us at digital.sitesetu@gmail.com. We will acknowledge it within 2 working days.

11. Changes

If we change this policy in a way that matters, we will tell owners before it takes effect.