Privacy Policy

1. Information we collect

• •Account details: your name, email address, and a hashed password.
• •API credentials you save: AI provider keys and deploy tokens, encrypted at rest — never stored in plain text and never sent to your browser after saving.
• •Content you create: site configurations, generated pages, prompts, and blog posts.
• •Basic usage data: build counts and feature usage tied to your account for plan limits.

2. How we use your information

We use your information solely to operate LocalSiteAI: authenticating you, generating and storing your websites, enforcing plan limits, and providing support. We do not sell or rent personal data to third parties, and we do not use your content to train AI models.

3. Third-party services

Generation requests are sent to the AI provider you configure (e.g. OpenRouter, Azure, OpenAI, Google, DeepSeek, NVIDIA) using your own API key, and are governed by that provider's terms. Deployments go to Netlify or Vercel using your tokens. Our database is hosted on MongoDB Atlas.

4. Data security

API keys and tokens are encrypted with industry-standard symmetric encryption before storage. Passwords are hashed with bcrypt. Access to production data is restricted and audited.

5. Data retention & deletion

Your data is retained while your account is active. You can delete saved credentials at any time from Settings. To delete your account and all associated data, contact us and we will complete the deletion within 30 days.

6. Cookies

We use only essential cookies: a session cookie to keep you signed in. No advertising or cross-site tracking cookies.

7. Changes to this policy

If we make material changes, we'll notify you by email or an in-app notice before they take effect.

8. Contact

Questions about privacy? Email [email protected].