Privacy Policy

1. What we collect

Account details: your name, email address and password (stored only as a secure, one-way hash), and the plan and add-ons you choose.

Your website: everything you add to build your site: business details, text, photos, logos, blog posts, menus, listings, products, contact details and domain names.

Payments: handled by Stripe. We receive what we need to run your subscription, such as whether a payment succeeded, your Stripe customer and subscription IDs, and the amounts paid. Your card details go straight to Stripe; we never see or store them.

Messages: emails you send us and requests you make (such as a logo design brief).

Technical information: like most websites, our servers log IP addresses, browser type, pages requested and the date and time, to keep the service secure and fix problems.

2. Cookies and similar technology

We use a small number of cookies, all needed for the service to work:

• Sign-in cookie (sl_session): keeps you signed in and protects forms from forgery. It ends when you sign out or after a period of inactivity.
• Referral cookie: if you arrive through a partner's link, we remember the partner for 60 days so they can be credited if you sign up.

Your browser's local storage remembers a few preferences, such as accessibility toolbar settings and your editor view. This information stays on your device. We don't use advertising cookies or sell data to advertisers.

3. How we use your information

• To build, host and publish your website and run your account.
• To process payments and send receipts and billing notices.
• To connect your domain and issue SSL certificates.
• To send service emails (such as password resets, publishing and domain updates) and, if you haven't opted out, our tips emails. Every tips email has a one-click unsubscribe link.
• To answer your questions and provide support.
• To keep Greedbegone NOVA secure, prevent fraud and abuse, and meet legal obligations.
• To understand how the service is used so we can improve it.

4. Who we share it with

We share information only with companies that help us run Greedbegone NOVA, and only what they need:

• 20i: our web hosting provider, where your account and site are stored and served.
• Stripe: payments, subscriptions and online store checkouts.
• Let's Encrypt and our host: SSL certificates. Domain names in SSL certificates are published in public certificate logs, as they are for every website.
• Unsplash and Google Fonts: stock photos and fonts on sites load from their servers, which see the visitor's IP address.
• YouTube and Vimeo: only if you embed their videos on your site.
• Referral partners: if you signed up through a partner's link, the partner sees that a customer signed up, the business name and the plan, so their commission can be paid. They don't see your content or payment details.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of our business (in which case this policy will still apply to your information).

5. Your website's visitors

When people visit your published site, we host the pages and receive the technical information described above. If your site has a contact form, online store or tracking (such as Google Analytics or a chat widget you add), information your visitors provide or that those tools collect belongs to you as the site owner, and you're responsible for telling your visitors about it, for example with your own privacy policy. For online stores, we store order details (such as the buyer's name, email and shipping address) on your behalf so you can fulfil orders.

6. How long we keep it

We keep your account and site information while your account is open. Each site's version history keeps snapshots for 20 days. After you close your account, or your site has been offline for unpaid fees for 60 days, we may permanently delete your site and content. We keep payment and tax records as long as the law requires, and server logs for a limited time for security.

7. Security

We use HTTPS everywhere, hash passwords, keep sensitive keys out of public folders and limit who can access customer data. No online service can be perfectly secure, so please use a strong, unique password.

8. Your choices and rights

You can view and update most of your information in your account and editor, and unsubscribe from tips emails at any time. You can also ask us to give you a copy of your personal information, correct it or delete it by emailing matt@greedbegone.com. We'll respond within 30 days and won't treat you differently for making a request.

Depending on where you live (for example California, Colorado, Virginia, the UK or the EU), you may have additional rights, such as to know what we collect, to opt out of certain uses, or to complain to a data protection authority. We'll honor those rights as the law requires. We don't sell or share personal information for cross-context behavioral advertising.

9. Children

Greedbegone NOVA isn't meant for children under 13 (or under 16 where the law sets a higher age), and we don't knowingly collect their personal information. If you think a child has given us information, contact us and we'll delete it.

10. Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll tell you by email or in your account before it takes effect.

11. Contact

Questions or requests about your privacy? Email matt@greedbegone.com.