Back to Sited

Legal

Privacy Policy

Last updated: September 2026

1. Who we are

Sited is a product by Everyday AI, operated by Jay Johnson. When you use Sited, you are providing information to us directly. You can contact us at jojlondon@gmail.com.

2. What we collect

When you use Sited, we collect the following information:

  • Your first name and last name
  • Your email address
  • Your website URL
  • Your AI visibility audit results and score
  • Your logo, only if you choose to upload one. It is used only to take brand colours for your scorecard and to place it on the scorecard image; it is not stored separately
  • Payment information (processed securely by Stripe - we never see your card details)

3. How we use your data

We use your information solely to:

  • Generate and deliver your AI Visibility Scorecard and full report
  • Process your payment via Stripe
  • Store your submission in our records (Airtable)
  • Improve the accuracy of our audits, including by re-checking your publicly accessible website after your report and analysing audit results in aggregate
  • Publish your website's score on a public page at sited.online/score/your-domain, only if you ask us to. This is offered only when your email address is on your website's own domain, needs you to confirm from the link in your scorecard email, and can be removed from the same link at any time. The page shows your website's score, its breakdown and the scorecard image, never your name or email

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Marketing emails. We may send you occasional emails about Sited's own reports and services. For personal email addresses and sole traders, we rely on the "soft opt-in" under the Privacy and Electronic Communications Regulations, because you gave us your email while requesting a scorecard or report. For business email addresses, we rely on our legitimate interest in telling customers about similar services. You can refuse these emails with the tick box when you submit your details, and every marketing email includes an unsubscribe link. Opting out never affects your scorecard or report. Emails about your scorecard or report (the service itself) are not marketing and are always sent.

4. Third-party services (subprocessors)

We use the following third-party services (subprocessors) to operate Sited. Each only receives the data it needs to perform its function:

  • Stripe - payment processing. Subject to Stripe's Privacy Policy.
  • Airtable - submission and lead record storage.
  • OpenAI - free scorecard analysis and image generation.
  • Anthropic - full paid report generation.
  • Brevo - transactional email delivery (report and scorecard delivery, receipts).
  • Vercel - application hosting and file storage for generated reports and their underlying audit data.
  • Upstash - caching used to prevent duplicate report generation, and storage of audit results by website domain (scores and detected issues, without your name or email) for score history and comparisons.
  • Umami - privacy-focused, cookieless website analytics (see Section 7).
  • Google Analytics (Google Ireland Limited / Google LLC) - website analytics, only if you accept analytics cookies. Google acts as our processor (see Section 7).

A data-processing agreement is available on request for enterprise or institutional customers. Contact jojlondon@gmail.com.

5. Data retention

We retain your submission data (name, email, website, audit results) indefinitely unless you request deletion. Google Analytics data is kept for 14 months, then deleted automatically. To request deletion of your data, email us at jojlondon@gmail.com.

6. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at jojlondon@gmail.com.

7. Cookies

We use essential storage required for the site to operate (such as your theme preference and your cookie choice). For basic analytics we use Umami, a privacy-focused, cookieless service that collects anonymous, aggregated usage data (such as page views and referrers) and no personal information.

With your consent only, we also use Google Analytics 4. Nothing from Google loads until you click Accept in the cookie banner. When enabled, it records the pages you view, actions such as starting a scorecard or checkout, your device and browser type, and approximate location (country or city). Google Analytics 4 does not log or store IP addresses. We never send your name, email address or the website you scan to Google. It sets two first-party cookies: _ga (tells browsers apart, 2 years) and _ga_<ID> (keeps session state, 2 years). Google processes this data on our behalf and may transfer it to the United States under its Data Privacy Framework certification and Standard Contractual Clauses. The data is kept for 14 months.

You can withdraw consent at any time via “Cookie settings” in the site footer or on our Cookie Policy page; this stops Google Analytics and removes its cookies. For full details, see our Cookie Policy.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of Sited after changes constitutes acceptance of the updated policy.