Legal
Privacy Policy
Effective date: September 4, 2026 · Last updated: September 15, 2026
1. Who we are
SiteSound is operated by Business ID 2563311-1. Contact us at support@sitesound.io.
2. What we collect
- Account data — your name and email address, provided through our authentication provider when you sign in.
- Billing data — handled directly by Stripe, our payment processor. We store which plan you're on and a reference to your Stripe customer record, not your card details.
- Site & monitoring data — the URLs you ask us to monitor, your check configuration, and the results of each check we run (status, response time, and — for broken links or failed checkout/form tests — details about what we found).
- Settings — your notification email (if different from your login email), notification preferences, and timezone.
- Concierge setup notes — if you request checkout or form monitoring, any notes you give us to set it up (e.g. which button to click, a discount code, a safe test email address).
- Basic usage analytics — page views and which buttons/links are used, on our marketing website and inside the dashboard, so we can see what's useful and what isn't. This runs on our own infrastructure (see section 5), doesn't use cookies, and doesn't identify you individually or track you across other websites.
We do not intentionally collect the personal data of your website visitors. Customers are responsible for ensuring they have the right to monitor the websites, pages, forms, or checkout flows they add to the Service.
We don't run any third-party advertising or tracking scripts on our website or dashboard.
3. How we use it
- To provide the Service: running your checks, sending you alerts by email and, if you enable it, browser push, and showing you your monitoring history.
- To bill you, via Stripe.
- To respond to support requests you send us.
We don't sell your data, and we don't use it to train AI models.
4. Legal basis (for users in the EEA/UK)
We process most of this data to perform our contract with you — providing the Service you signed up for. We may process limited data based on our legitimate interest in keeping the Service secure and working properly, or with your consent (for example, enabling browser push notifications).
5. Who we share it with
We use the following providers to run SiteSound. Each processes data on our behalf, under their own security practices:
| Provider | What for |
|---|---|
| Clerk | Authentication and account sign-in |
| Render | Application hosting and Postgres database hosting — where your account, site, and check data is stored |
| Resend | Sending alert and account emails |
| Stripe | Payment processing |
| Umami (self-hosted on Render/Neon, not a separate company we share data with) | Basic, cookie-free usage analytics — page views and button clicks, kept entirely on our own infrastructure |
| Your browser's push service (Google, Mozilla, Apple, etc.) | Delivering browser push alerts, if you enable them |
Where personal data is transferred outside the EU/EEA, we rely on approved transfer mechanisms such as the European Commission's Standard Contractual Clauses or adequacy decisions where applicable.
6. How long we keep it
We keep your account and monitoring data for as long as your account is active. If you delete your account from Settings, we permanently delete your account, your sites, and their check history as part of our automated deletion process — this can't be undone. We may keep minimal records required for tax or accounting purposes for longer, as required by Finnish law.
7. Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or disclosure.
8. Your rights
Under the GDPR, you can ask to access, correct, or delete your personal data, or object to or restrict some processing. You can update your notification email and delete your account and all its data yourself from Settings at any time; for anything else, email support@sitesound.io. You can also lodge a complaint with the Office of the Data Protection Ombudsman (tietosuojavaltuutetun toimisto) in Finland.
Browser push notifications can be disabled at any time through your browser settings.
9. Cookies
Our dashboard uses a session cookie set by our authentication provider so you can stay signed in — this is necessary for the Service to work and isn't used for tracking or advertising. Neither our marketing website nor our dashboard sets any analytics or advertising cookies — our usage analytics (section 2) works without cookies and doesn't need your consent to run.
10. Children
The Service is intended for business users and is not directed to children. We don't knowingly collect data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. We'll post the updated version here with a new "Last updated" date, and we'll email you about material changes.
12. Contact
Questions about this policy or your data? Email support@sitesound.io. See also our Terms of Service.