Privacy Policy

Last updated: June 23, 2026

This Privacy Policy explains what information EasyWebsites ("we", "us") collects when you use easywebsites.app and our related services (the "Service"), how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

  • Account information. When you sign up with Google, we receive your name, email address, and profile picture from Google. When you sign up with email and password, we store your email and a hashed password. We never see your Google password.
  • Website content you provide. Business descriptions, text, images, brand assets, style preferences, and chat messages you submit to build or edit your website.
  • Billing information. Payments are processed by Stripe. We store your subscription status, plan, and invoice metadata; Stripe stores your payment details under its own privacy policy.
  • Usage and device data. Log data (IP address, browser type, pages viewed, timestamps) and product analytics events, as described in the cookies section below.
  • Form submissions to your websites. If your published website uses our managed forms, we receive what visitors submit (such as their name, email, and message) and deliver it to you.

2. How we use AI providers

Website generation and editing are powered by third-party AI models, currently provided through Amazon Web Services (Amazon Bedrock, which hosts models from Anthropic and other model providers) and OpenAI. The business descriptions, content, and instructions you provide are sent to these providers to generate your website. We use these providers under agreements that restrict their use of your data; we do not permit our AI providers to use your content to train their models.

3. How we use your information

  • To provide the Service: generate, host, and let you edit your websites;
  • To process payments, enforce plan limits, and prevent fraud and abuse;
  • To deliver transactional email (receipts, form notifications, trial and billing notices);
  • To monitor errors and performance so we can keep the Service reliable;
  • To understand how the product is used and improve it;
  • To comply with legal obligations.

4. Cookies and analytics

We use the following categories of tools in our own app:

  • Essential. Authentication tokens and session data needed for the Service to work. These are always active.
  • Analytics and measurement. Google Analytics and PostHog help us understand product usage. On public marketing pages, Google Analytics may run in cookieless consent mode before you make a banner choice, with analytics storage denied. If you accept analytics, Google Analytics can use analytics cookies and PostHog may record anonymized session replays. You can decline analytics without losing any functionality.
  • Referral and advertising attribution. When someone visits from a campaign, search result, referral, AI answer engine, social site, or ad, we may store lightweight first-party attribution data for up to 90 days. This can include the landing page, UTM parameters, referring domain, and ad click identifiers such as Google click IDs. This does not load Google Analytics or PostHog, and it is used only to measure signup and subscription source performance.
  • Error monitoring. Sentry collects error reports (including the page, browser, and account identifier associated with an error) so we can fix problems. We treat this as a legitimate operational need.

5. Websites our customers publish

Websites created with EasyWebsites belong to their owners. If you are a visitor to a site hosted on easywebsites.app (or a customer's custom domain), the site owner is responsible for the content of that site and for the data it collects from you. When you submit a managed form on such a site, we process your submission on the owner's behalf and deliver it to them. Contact the site owner for questions about how they use your data.

6. Sharing

We share data only with service providers needed to run the Service:

  • Amazon Web Services (infrastructure and AI inference via Bedrock);
  • OpenAI (AI inference);
  • Stripe (payments);
  • Cloudflare (website hosting, storage, and delivery);
  • MongoDB Atlas (database hosting);
  • Google (authentication and analytics);
  • PostHog (product analytics, with consent);
  • Sentry (error monitoring);
  • Resend (transactional email).

We may also disclose information if required by law, to protect the rights and safety of users, or as part of a merger or acquisition (in which case this policy will continue to apply to your data until changed). We do not sell your personal information.

7. Retention

We keep your account data while your account is active. Detailed AI request logs are retained for a limited operational window (currently 30 days) before automatic deletion; aggregated usage statistics may be kept longer. If you delete your account or a website, we delete the associated content within a reasonable period, except where we must retain records for legal, billing, or security reasons.

8. Security

We protect data in transit with TLS, restrict internal access to production systems, and monitor for abuse. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you as required by law. See our security overview for more.

9. Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, object to certain processing, or withdraw consent. You can manage your websites and account data from your dashboard, and you can exercise any of these rights by emailing hello@easywebsites.app. We respond to verified requests within the timelines required by applicable law, and we will not discriminate against you for exercising your rights.

10. International transfers

Our infrastructure is primarily located in the United States. If you use the Service from outside the US, your data will be transferred to and processed in the US and other countries where our providers operate, with safeguards required by applicable law.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in-product notice before they take effect.

13. Contact

Privacy questions or requests: hello@easywebsites.app, or use the contact page.