Legal
Privacy notice
Last updated 23 September 2026
This document is a working draft published for transparency about how the product is built. It has not completed legal review and is not a contract. The executed agreement for your account is the one you sign.
What this covers
This notice describes how Siteleon handles data in the course of running a business's digital presence. It covers the marketing website you are reading and the product at https://app.siteleon.com.
The marketing website sets no analytics or advertising cookies, runs no third-party tags and holds no account data. It is static content served from a CDN, and it keeps serving when every other host is down.
Two different roles
For the visitors to YOUR website, you are the controller and we are the processor. We measure them on your behalf, under the consent settings you configure.
For the people who log in to Siteleon on your team, we are the controller of their account data.
Confusing these two is the most common mistake in this category, and it changes who has to answer a data subject request.
What the product processes
Visits to your website: pages, referrer, device class, country and the actions taken, collected first-party and subject to the consent state your configuration produces.
Enquiries and the people who make them: what they submitted, how they arrived, what they viewed, and the follow-up your team records.
Your business knowledge: services, products, locations, hours, contacts, facts, claims and brand rules, together with who verified each one and when.
Data from the systems you connect, limited to the fields the connected capability needs. Connecting a payment system does not hand us your ledger.
What it does not do
It does not sell data, share it between customer accounts, or use one customer's visitors to improve another's site.
It does not use your content or your customers' data to train models made available outside your account. That is a contractual commitment, not a preference.
It does not decide what your privacy policy should be, and it does not make you compliant with anything. It gives you controls and keeps records; the obligations remain yours.
Retention and deletion
Retention is a plan property and is set per account. Consent records are kept for the period your obligations require, because they are the evidence that consent was given.
Deleting an account removes the data held for it within the period stated in your agreement, excluding records we are required to keep.
Contact
Write to [email protected] with any question about this notice or a request relating to your data.
Your business online. Built to adapt.
Start with the site you already have, or create something new. Siteleon helps you build it, understand it and keep improving it as the business changes.
No technical setup · Keep your existing site if you want to · [email protected]