Privacy Policy

This Privacy Policy explains how NoSiteSearch ("No-Site Search," "we," "us," or "our"), operator of No-Site Search and the application available at https://app.nositesearch.com, collects, uses, shares, and protects information when you use our website and services (collectively, the "Service"). It also describes the rights you have over your personal data and how to exercise them.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Who we are

No-Site Search is a lead-discovery and website-generation platform. It helps users find local businesses that do not have a website, obtain outreach-ready contact details, and optionally generate and host a website for those businesses. The data controller for the personal data described in this Policy is NoSiteSearch. You can contact us at any time at help@nositesearch.com.

2. Information we collect

We collect the following categories of information:

• Account information. When you create an account we collect your email address and authentication details. If you sign in through a third-party identity provider, we receive your email and basic profile information from that provider.
• Payment information. Subscriptions and credit purchases are processed by our payment processor, Stripe. We do not store your full card number. We receive limited billing details from Stripe such as the last four digits of your card, card brand, billing country, and transaction status to manage your account and billing history.
• Third-party business contact data. The core function of the Service is to surface contact information for local businesses. This data is sourced from publicly available sources, including Google Maps and other public business listings, and may include a business name, category, address, phone number, public email, website status, and map coordinates. This data concerns businesses rather than your own personal account, but where a business is a sole trader or an individual, this information can constitute personal data under applicable law. We describe how this data is handled in Section 6.
• Usage and analytics data. We use Google Analytics (measurement ID G-0E3T68J5X8) to understand how visitors use our website. This includes information such as pages viewed, approximate location derived from IP address, device and browser type, referring URLs, and interactions with the site.
• Cookies and similar technologies. We use cookies and local storage to keep you signed in, remember preferences, and measure traffic. See Section 8.
• Content you generate. When you use our website-generation features, we store the inputs you provide and the generated output so we can host and serve the resulting site.
• Support communications. If you contact us, we keep a record of the correspondence and any information you provide.

3. How we use information

• To provide, operate, and maintain the Service.
• To run searches, return business contact results, and generate and host websites you request.
• To process payments, manage subscriptions and credit balances, and send billing-related messages.
• To authenticate you, secure your account, and prevent fraud and abuse.
• To send transactional emails (for example, account, billing, and security notices) through our email provider.
• To analyze usage and improve the performance, reliability, and features of the Service.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract — to provide the Service you have signed up for, including account management and billing.
• Legitimate interests — to secure and improve the Service, prevent abuse, compile aggregate business-listing data from public sources, and understand how the Service is used, balanced against your rights and interests.
• Consent — for non-essential cookies and analytics where consent is required. You can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, and other legal requirements.

5. Third-party processors and service providers

We rely on a small number of trusted vendors to operate the Service. Each processes data only as needed to provide its function and is bound by appropriate data-protection terms:

• Stripe — payment processing and subscription billing.
• Apify — collection of publicly available business listing data used to generate search results.
• Anthropic — AI processing used to generate website content and related features.
• Resend — delivery of transactional and account-related email.
• Cloudflare — content delivery, DNS, and security.
• Neon (PostgreSQL) — database hosting for account and application data.
• Vercel — application and website hosting.
• Google Analytics — website usage analytics.

We do not sell your personal data. We share information with these providers only to deliver the Service, and we may disclose information where required by law or to protect our rights, users, or the public.

6. Business contact data and your responsibilities

The business contact data returned by the Service is compiled from publicly available sources. We provide this data to help you identify and reach out to businesses. You are solely responsible for how you use it. You must comply with all applicable laws governing marketing and outreach, including the CAN-SPAM Act, the Telephone Consumer Protection Act, the GDPR, the ePrivacy rules, and any other laws that apply to your communications. If a business or individual asks us to remove their information, contact us at help@nositesearch.com and we will act on the request as required by applicable law.

7. Data retention

We retain personal data for as long as your account is active and for as long as needed to provide the Service. After account closure we retain limited information where necessary to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized. Billing records are retained for the period required by applicable financial regulations. Aggregated and anonymized data that no longer identifies you may be retained indefinitely.

8. Cookies

We use strictly necessary cookies to keep you logged in and to secure your session. We also use analytics cookies through Google Analytics to measure traffic and improve the Service. You can control cookies through your browser settings, and blocking some cookies may affect how the Service works. Where required by law, we request your consent before setting non-essential cookies.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Portability — request an export of your data in a portable format.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your personal data. You can delete your account directly from the account settings in the app, which removes your account data subject to the retention rules above.
• Restriction and objection — ask us to restrict or object to certain processing.
• Withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email us at help@nositesearch.com. We will respond within the timeframes required by applicable law. EEA and UK residents also have the right to lodge a complaint with their local data protection authority.

10. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information and we do not share it for cross-context behavioral advertising. To exercise your California rights, contact us at help@nositesearch.com.

11. International data transfers

We and our service providers may process and store data in countries other than the one in which you live, including the United States. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your information.

12. Children's privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at help@nositesearch.com. We will respond to privacy requests within 30 days.