SiteSpotMaker ("we", "us") turns business websites into social media posts and videos. We respect your privacy and handle personal data in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), and other applicable laws, including Kenya's and Uganda's data protection acts.
1. Who is responsible for your data
SiteSpotMaker is the data controller for personal data processed through this website. You can reach us about any privacy matter through our secure Talk to us form; choose "Other" and write "Privacy request".
2. What we collect
- Account data: your email address and sign-in details (passwords are stored only in encrypted, hashed form).
- Content you create: the websites you enter, the posts, captions, images, narration and videos you generate.
- Talk to us requests: the name, organisation, title, email, phone and message you choose to send.
- Consent records: your confirmation that you are 18 or over and accept our terms.
- Basic technical data: anonymous page-visit counts used to understand how the site is used. We do not use advertising cookies or sell tracking data.
3. Why we use it and our legal basis
- To provide your account and create your content — performance of a contract.
- To answer your requests — your consent and our legitimate interest in replying.
- To keep the service safe and remove content that breaks our rules — legitimate interest and legal obligation.
- To take payments, once paid plans start — performance of a contract and legal obligation (tax and accounting).
4. Who can see your data
Your creations are private to your account. They are never shown to other members or the public unless you share them yourself. Only the SiteSpotMaker owners can access account lists, requests and creations, and only to run the service, provide support, or moderate content that may break our Terms of Use. We never sell or rent your personal data.
We use trusted service providers who process data on our behalf under contract: our cloud hosting and database provider, AI model providers that generate text, images and voice from the material you supply, a website-reading service that fetches the public pages you enter, Google (if you choose Google sign-in), and a payment provider once paid plans launch. Some providers may process data outside your country, including in the United States; where required we rely on safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
5. How long we keep it
We keep account data and creations while your account is open. When you ask us to delete your account, we delete your account and creations within 30 days, except where the law requires us to keep records (for example payment records). Talk to us requests are kept for up to 24 months, then deleted.
6. Your rights
Depending on where you live, you have the right to: access your data; correct it; delete it ("right to be forgotten"); restrict or object to its use; receive it in a portable format; withdraw consent at any time; and not be discriminated against for using these rights. California residents may also ask what we collect and opt out of any "sale" or "sharing" — we do neither. To use any right, send us a request through the Talk to us form. We reply within one month (45 days under the CCPA).
You may also complain to your data protection authority — for example, your national authority in the EU, the Information Commissioner's Office (ICO) in the UK, the Office of the Data Protection Commissioner in Kenya, or the Personal Data Protection Office in Uganda.
7. Security
All data travels over encrypted connections. Each member's creations are locked to their own account by database security rules, and owner access is limited to two named owner accounts. No method is perfectly secure, but we take reasonable steps to protect your data and will notify you and the authorities of a serious breach as the law requires.
8. Children
SiteSpotMaker is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
9. Changes
We will post any changes to this policy here and update the date above. If changes are significant, we will tell signed-in members.