What we collect, and what we never do.

Sitebase is a dashboard for your website. To do its job it holds some information about you, about your site, and about the people who use your site. This page says exactly what, in plain English. Last updated October 27, 2026.

About you, the site owner

Your email address. It is how you sign in (we send a link, there is no password) and where we send messages from your site and notes about your account.
Your site. Its name, its web address, the words and pictures you edit in Sitebase, and the page titles and descriptions you write for Google.
Your card. Stripe holds it. We never see the number. We keep a record of your plan, your locked price, and your payments.
How you found us. If you arrived from a video, a link, or with a code, we note that so we know what is working.
Your Google account, if you connect it. Only what we need to prove you own your site and to read your search numbers. You can disconnect it any time, and we delete the connection.

What you ask the help assistant, what you tell the builder, and what you write to us are kept, so we can see what is confusing or broken and fix it. Nobody outside Sitebase reads them, and they are never used to sell you anything.

About the people who use your site

Your site's visitors are your customers, not ours. We handle their information on your behalf, and only so the dashboard can show it to you.

Messages. When someone fills in a form on your site, we store what they typed, the page they were on, and the time, and we send it to you. You can delete any message from your dashboard.
Visitor counts. Our script counts visits without cookies and without storing anything on the visitor's device. To tell one person from another for a single day, it makes a scrambled code from their internet address and browser type with a secret key. The code cannot be turned back into an address and is different every day, so nobody is followed across days or across sites. We also note the page, where the visit came from (Google, Facebook, a typed address), the kind of device, and the country.
Calls and emails. When a visitor taps a phone number or an email link on your site, we count that as one action. We do not record the call or the email.

Because of this, Sitebase does not add a cookie banner to your site and does not need one. Your visitors' internet addresses are used only to make the daily code and to stop abuse, and they are not stored with your messages in readable form.

Text messages and the phone assistant

A business on Sitebase can text its customers and can have a phone assistant answer its calls. Here is how that works for the people on the other end.

Texts. A customer gets a text only after giving their number and agreeing to be texted: on a booking form ("Text me about this booking"), on a contact form or in the website's chat (where the form says a reply may come by text), or by texting the business first. The texts are about their request: a booking confirmed or reminded, a reply to their question, a follow-up on a quote. Standard message and data rates may apply, and how many texts a person gets depends on what they asked for, usually a handful around a booking. Reply STOP to any text to stop, and HELP for help; once someone says STOP, that business never texts them again through Sitebase. Texts are sent through Twilio.
No mobile information is shared. Phone numbers and text-messaging consent are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. They are used only to send the texts described above, on behalf of the business the customer contacted. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
The phone assistant. When a business switches on its front desk, an assistant answers its calls, takes bookings and messages, and the owner gets a written summary of each call. Callers are told at the start that the call may be recorded; the owner can turn recording off. Calls run through Vapi, and the assistant's words come from an AI model (Anthropic) that is given only what the call needs.

About visitors to getsitebase.com

This website uses Cloudflare Web Analytics, which counts visits without cookies and without tracking people across sites.

Who else touches the data

We run Sitebase on a few services, each holding only what it needs: Supabase (database and sign in), Cloudflare (hosting, the published content of your site, and delivering our script), Stripe (payments), Postmark and Resend (sending email), Twilio (text messages), Vapi and Anthropic (the phone assistant, the website chat and the builder), and Google (only if you connect your Google account). We do not sell information, and we do not share your visitors' information with anyone but you.

If you connect Google

Two parts of Sitebase can use your Google account, and only if you connect it yourself. The Google page reads Search Console for your own website (the searches that brought people to it) and can place the ownership record Google asks for. Bookings can use Google Calendar: Sitebase reads when you are busy so nobody books over an appointment it could not see, and puts each confirmed booking on your calendar as an event. That is all it reads and all it writes.

What Google hands us is shown to you and used for those jobs, nothing else. We do not use it for advertising, we do not sell it, we do not share it with anyone but the services that run Sitebase, and no person at Sitebase reads it except to fix a problem you ask us to fix. The sign-in token Google gives us is kept on our servers, never in your browser or on your website, and is deleted when you disconnect. You can disconnect on the Google page or the Bookings tab, or at myaccount.google.com/permissions, and Sitebase stops reading the moment you do. Our use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep things

Your site's content and messages stay as long as your account does. Visitor counts are kept for two years. If you delete a site, its content, messages, and counts are deleted with it. If you close your account, everything goes within 30 days, except what the law makes us keep, like payment records.

Your rights

You can see, correct, export, or delete what we hold about you. Most of it is in your dashboard. For anything else, email hello@getsitebase.com and we will sort it out within a week. If a visitor to your site asks you to delete their message, delete it in Messages and it is gone from us too.

Changes

If we change this page in a way that matters, we email you before it takes effect.

Questions: hello@getsitebase.com