Privacy policy

Last updated September 2026.

What we collect

Your agency account: name, email, and branding settings. Business data you enter or import for prospects: names, phone numbers, addresses, reviews, and photos. Leads submitted through demo-site contact forms, which we store and forward to the email or webhook you configure.

We use a single session cookie for sign-in and, for platform administrators, an impersonation cookie. There is no advertising or cross-site tracking.

How we use it

To render your demo sites, deliver leads to you, run billing through Stripe, and operate the dashboard. We do not sell data or use your client information for our own marketing.

Your client data

Business data you upload stays under your control: you can edit or delete any site (including its leads and uploaded images) from the dashboard. Exported WordPress packages contain only the site content, no platform data.

Subprocessors

Supabase (database and file storage), Stripe (payments; we never see card numbers), Resend (transactional email), and Vercel (hosting). Each receives only the data needed for its function.

Retention and contact

Account data is kept while your agency exists; delete sites any time and contact us to remove the agency itself. Questions: support@websitedemofactory.com.