Legal
Privacy Policy
Last updated: September 4, 2026
This is a plain-language draft, not yet reviewed by a lawyer.
1. Who we are
SiteSound is the data controller for the personal data described in this policy. Contact us at support@sitesound.io.
2. What we collect
- Account data — your name and email address, provided through our authentication provider when you sign in.
- Billing data — handled directly by Stripe, our payment processor. We store which plan you're on and a reference to your Stripe customer record, not your card details.
- Site & monitoring data — the URLs you ask us to monitor, your check configuration, and the results of each check we run (status, response time, and — for broken links or failed checkout/form tests — details about what we found).
- Settings — your notification email (if different from your login email), notification preferences, and timezone.
- Concierge setup notes — if you request checkout or form monitoring, any notes you give us to set it up (e.g. which button to click, a discount code, a safe test email address).
- Basic usage analytics — page views and which buttons/links are used, on our marketing website and inside the dashboard, so we can see what's useful and what isn't. This runs on our own infrastructure (see section 5), doesn't use cookies, and doesn't identify you individually or track you across other websites.
We don't run any third-party advertising or tracking scripts on our website or dashboard.
3. How we use it
- To provide the Service: running your checks, sending you alerts by email and, if you enable it, browser push, and showing you your monitoring history.
- To bill you, via Stripe.
- To respond to support requests you send us.
We don't sell your data, and we don't use it to train AI models.
4. Legal basis (for users in the EEA/UK)
We process most of this data to perform our contract with you — providing the Service you signed up for. We may process limited data based on our legitimate interest in keeping the Service secure and working properly, or with your consent (for example, enabling browser push notifications).
5. Who we share it with
We use the following providers to run SiteSound. Each processes data on our behalf, under their own security practices:
| Provider | What for |
|---|---|
| Clerk | Authentication and account sign-in |
| Neon | Postgres database hosting — where your account, site, and check data is stored |
| Render | Application hosting |
| Resend | Sending alert and account emails |
| Stripe | Payment processing |
| Umami (self-hosted on Render/Neon, not a separate company we share data with) | Basic, cookie-free usage analytics — page views and button clicks, kept entirely on our own infrastructure |
| Your browser's push service (Google, Mozilla, Apple, etc.) | Delivering browser push alerts, if you enable them |
Some of these providers are based outside the EU/EEA, primarily in the United States. Where that's the case, they provide appropriate safeguards such as the EU Standard Contractual Clauses.
6. How long we keep it
We keep your account and monitoring data for as long as your account is active. If you delete your account from Settings, we permanently delete your account, your sites, and their check history immediately — this can't be undone. We may keep minimal records required for tax or accounting purposes for longer, as required by Finnish law.
7. Your rights
Under the GDPR, you can ask to access, correct, or delete your personal data, or object to or restrict some processing. You can update your notification email and delete your account and all its data yourself from Settings at any time; for anything else, email support@sitesound.io. You can also lodge a complaint with the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto) in Finland.
8. Cookies
Our dashboard uses a session cookie set by our authentication provider so you can stay signed in — this is necessary for the Service to work and isn't used for tracking or advertising. Neither our marketing website nor our dashboard sets any analytics or advertising cookies — our usage analytics (section 2) works without cookies and doesn't need your consent to run.
9. Children
The Service is intended for businesses and professionals monitoring their own websites, not for children, and we don't knowingly collect data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. We'll post the updated version here with a new "Last updated" date, and we'll email you about material changes.
11. Contact
Questions about this policy or your data? Email support@sitesound.io. See also our Terms of Service.