Last updated November 8, 2026
This policy explains what SiteWish collects when you use our website and console, and when people visit or contact a website hosted on SiteWish. We collect only what we need to run the service, and we don't sell personal information.
Your account. Your email address, and a securely hashed password if you set one. If you sign in with Google, we receive your Google account's email address and basic profile.
Your business and website. The business details you give us or import (name, description, phone, address, opening hours, services, prices, FAQs, brand notes), photos you upload, and the websites and versions we create for you.
Your conversations with the AI. What you type to the assistant in the console, so it can answer and make the changes you ask for.
Billing. Your plan, credit balance and usage. Payments are handled by our payment provider (see below); we never see or store your full card number.
Messages from your site's visitors. When someone uses the contact form on a website hosted on SiteWish, we store their name, the contact details they enter, their message and their IP address (to limit spam), and show it to the site owner.
Lists and forms on your site. Site owners can keep lists (for example a menu, events or a waitlist). When a visitor fills in a form that adds to a list, we store what they entered and their IP address (to limit spam). Entries visitors send are only visible to the site owner. Email and phone fields are never shown on a website.
Services you connect. If you connect an outside service to your account (for example your Cal.com booking calendar), you sign in on that service and approve the access it lists. We store the access tokens it gives us, encrypted, and use them only when you ask the assistant something that needs that service: for example to look up your upcoming bookings or your bookable hours. The assistant never changes anything in a connected service on its own — it shows you the exact change and nothing happens until you confirm. We keep a log of those actions in your account. You can disconnect a service at any time in the console, which deletes the stored tokens; you can also revoke access from the service's own settings.
Reports. If you report a site, we keep the report and any contact details you give us so we can review it.
Technical data. A session cookie that keeps you signed in, and standard server logs (such as IP address and request time) kept by our hosting provider for security and troubleshooting. We don't use advertising or analytics cookies.
We use service providers that process data on our behalf, only for the purposes above:
We may also disclose information when required by law, or to protect people from fraud or harm.
Content you publish on your website is public. If your site collects messages from visitors, you are responsible for how you use those messages, and for telling your visitors how you handle their information.
We keep your account and website data while your account is active. You can delete a website from the console at any time. To delete your account and its data, contact us; we will delete it unless we need to keep some records to meet legal or accounting obligations, or to handle an open report.
You can see and change your business details in the console and export your website's files at any time. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to how we use it. Contact us to make a request.
We use encrypted connections, hashed passwords and HttpOnly session cookies, and limit access to personal data to what is needed to run the service. No system is perfectly secure, so please tell us right away if you suspect a problem.
SiteWish is a service for businesses and isn't directed at children under 16.
We may update this policy. If a change materially affects you, we will tell you before it takes effect.
Questions or requests: please use the contact address on our website.