Legal
Privacy Policy
Effective date: September 4, 2026 · Last updated: November 3, 2026
1. Who we are
SiteSound is operated by Business ID 2563311-1. Contact us at support@sitesound.io.
2. What we collect
- Account data — your name and email address, provided through our authentication provider when you sign in.
- Billing data — handled directly by Stripe, our payment processor. We store which plan you're on and a reference to your Stripe customer record, not your card details.
- Site & monitoring data — the URLs you ask us to monitor, your check configuration, and the results of each check we run (status, response time, and — for broken links or failed checkout/form tests — details about what we found).
- Settings — your notification email (if different from your login email), notification preferences, and timezone.
- Concierge setup notes — if you request checkout or form monitoring, any notes you give us to set it up (e.g. which button to click, a discount code, a safe test email address).
- Free website check — when you use the check on our homepage, we store the address checked, when it was checked and the results. The result is a summary of public pages and may include contact details shown publicly on those pages, such as a phone number or email address. It is visible to anyone who opens the check's link or enters the same address. Your IP address is only used to prevent abuse (limiting the number of checks) and is not stored with the check.
- Basic usage analytics — page views and which buttons/links are used, on our marketing website and inside the dashboard, so we can see what's useful and what isn't. It is provided by Umami Cloud with data stored in the EU (see section 5), doesn't use cookies, and doesn't identify you individually or track you across other websites.
We do not intentionally collect the personal data of your website visitors. Customers are responsible for ensuring they have the right to monitor the websites, pages, forms, or checkout flows they add to the Service.
We don't run any third-party advertising or tracking scripts on our website or dashboard.
3. How we use it
- To provide the Service: running your checks, sending you alerts by email and, if you enable it, browser push, and showing you your monitoring history.
- To bill you, via Stripe.
- To respond to support requests you send us.
We don't sell your data, and we don't use it to train AI models.
4. Legal basis (for users in the EEA/UK)
We process most of this data to perform our contract with you — providing the Service you signed up for. We may process limited data based on our legitimate interest in keeping the Service secure and working properly, or with your consent (for example, enabling browser push notifications).
5. Who we share it with
We use the following providers to run SiteSound. Each processes data on our behalf, under their own security practices:
| Provider | What for |
|---|---|
| Clerk | Authentication and account sign-in |
| Render | Application hosting and Postgres database hosting — where your account, site, and check data is stored |
| Resend | Sending alert and account emails |
| ImprovMX | Forwarding email you send to support@sitesound.io to our inbox |
| Stripe | Payment processing |
| Umami Cloud (Umami Software, Inc.) | Basic, cookie-free usage analytics — page views and button clicks. Data is stored in the EU region; Umami's data processing agreement includes the EU Standard Contractual Clauses |
| Your browser's push service (Google, Mozilla, Apple, etc.) | Delivering browser push alerts, if you enable them |
Where personal data is transferred outside the EU/EEA, we rely on approved transfer mechanisms such as the European Commission's Standard Contractual Clauses or adequacy decisions where applicable.
6. How long we keep it
We keep your account and monitoring data for as long as your account is active. If you delete your account from Settings, we permanently delete your account, your sites, and their check history as part of our automated deletion process — this can't be undone. We may keep minimal records required for tax or accounting purposes for longer, as required by Finnish law. Free website check results are kept for 90 days, so that each site is only checked once in that time, and are then deleted automatically. You can ask us to delete a check by emailing support@sitesound.io.
7. Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or disclosure.
8. Your rights
Under the GDPR, you can ask to access, correct, or delete your personal data, or object to or restrict some processing. You can update your notification email and delete your account and all its data yourself from Settings at any time; for anything else, email support@sitesound.io. You can also lodge a complaint with the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto) in Finland.
Browser push notifications can be disabled at any time through your browser settings.
9. Cookies
Our dashboard uses a session cookie set by our authentication provider so you can stay signed in — this is necessary for the Service to work and isn't used for tracking or advertising. Neither our marketing website nor our dashboard sets any analytics or advertising cookies — our usage analytics (section 2) works without cookies and doesn't need your consent to run.
10. Children
The Service is intended for business users and is not directed to children. We don't knowingly collect data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. We'll post the updated version here with a new "Last updated" date, and we'll email you about material changes.
12. Contact
Questions about this policy or your data? Email support@sitesound.io. See also our Terms of Service.