Privacy Policy

Information we collect

We collect the information you give us when you create an account, log in, buy a plan, contact support, or add a site for scanning. That may include your name, email address, password hash, plan details, billing metadata, the URLs you add, the scan results we generate from those URLs, and uptime check results including response times, status codes, and downtime incident logs.

If you submit a contact form, we also collect the message, email address, and any context you choose to include so we can respond.

Scan data may include public page content, page titles, metadata, and technical details from the URLs you submit. If a site contains personal information, we may process that information as part of delivering the service.

Children's privacy

SiteSprout is intended for business and professional use and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will review it.

Controller and location

SiteSprout is operated from Massachusetts, USA. We use service providers that may process data in the United States and other countries where they or their subprocessors operate.

If you use SiteSprout outside the United States, local privacy laws may give you additional rights. We will handle requests as required by applicable law.

How we use information

We use data to:

• Provide website scans, reports, alerts, and account access.
• Process payments and manage subscriptions through Stripe.
• Send transactional email and support replies.
• Detect abuse, improve reliability, and debug issues.
• Measure site and product usage if you opt into analytics.

Sharing and service providers

We share data only with vendors that help us run SiteSprout or when we are required to do so by law. Those vendors may include Stripe for billing, Resend for email, Google Analytics for usage measurement, Upstash for queue and rate-limit data, Neon/Postgres for storage, and Vercel for hosting.

These providers may process data in the United States and other countries where they or their subprocessors operate. We do not sell personal information or share it for targeted advertising.

Cookies and analytics

We use essential cookies and browser storage for authentication, security, and billing. If you allow analytics, Google Analytics may set cookies such as _ga and_ga_<container-id> to help us understand how the site is used.

You can change analytics preferences on the Cookies page, and you can also control cookies in your browser settings. If you do not allow analytics, those optional scripts should not load.

Retention and security

We keep data for as long as it is needed to provide the service, maintain records, resolve disputes, and comply with legal obligations. After an account is deleted or closed, some information may remain in backups or logs for a limited time before it is removed on our normal rotation schedule.

We use reasonable technical and organizational measures to protect the information we store, but no system is completely secure.

Your choices and rights

You can update your account details in the app, cancel paid plans in the Stripe customer portal, and change your analytics preference at any time on the Cookies page.

To request access, correction, deletion, or export of your data, email us at tyler.allen@meddkit.com. If your local law gives you additional privacy rights we will handle the request as required by law.

Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version here and change the last updated date. If the changes are material, we may also show a notice in the app or contact you directly when appropriate.