Privacy Policy
Last updated: March 1, 2026
Stonegate Labs LLC ("Stonegate Labs," "we," "us," "our") operates the Sitecito website builder platform at sitecito.com (the "Service"). This Privacy Policy explains how we collect, use, share, and protect your information.
By using the Service, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Account Information
When you register, we collect your name, email address, and password (hashed, never stored in plain text).
1.2 Business Information
During setup, you may provide your business name, phone number, address, and other details that appear on your published website.
1.3 User Content
You submit text, images, gallery photos, and other materials through the Service. This content is stored to publish and display your website.
1.4 Payment Information
Subscription payments are processed by Stripe. We receive your card brand, last four digits, and billing email from Stripe. We never see or store your full card number.
1.5 Site Visitor Data
When visitors to your Sitecito website submit a contact form, we collect the information they provide (name, email, message) on your behalf. You are the data controller for your visitors' data; we act as a data processor.
1.6 Usage and Log Data
We automatically collect IP addresses, browser type, pages visited, timestamps, and device information for security, debugging, and service improvement.
1.7 Cookies
We use only essential cookies: session, CSRF token, authentication ("remember me"), and cookie consent preference. We do not use tracking or advertising cookies.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide and operate the Service | All categories above |
| Publish and host your website | User Content, business info |
| Process payments | Billing info via Stripe |
| Send transactional emails | Email address |
| Security and fraud prevention | IP, log data |
| Improve the Service | Aggregated, de-identified usage data |
| Comply with legal obligations | As required |
We do not use your data for advertising, profiling, or selling to third parties.
3. Third-Party Service Providers
We share data with the following providers solely to deliver the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment method details, billing address |
| DigitalOcean | Cloud hosting and infrastructure | All Service data (encrypted at rest) |
| Mailgun | Transactional email delivery | Email addresses, email content |
| Cloudflare | CDN, DNS, DDoS protection, SSL | IP addresses, request metadata |
| Sentry | Error monitoring | Error logs, device info, anonymized usage data |
We require all providers to maintain appropriate security measures and use your data only for specified purposes.
4. Data Processor Role
When your website visitors submit contact forms or otherwise interact with your Sitecito website:
- You (the site owner) are the data controller for your visitors' data
- We (Stonegate Labs) act as a data processor, handling that data on your behalf
- You are responsible for obtaining any necessary consent from your visitors
- You should publish a privacy policy on your Sitecito website
- We will not use your visitors' data for any purpose other than providing the Service
5. Information Sharing
We do not sell, rent, or trade your personal information. We share your information only:
- With service providers listed in Section 3
- With your consent
- When required by law, regulation, or legal process
- To protect our rights, property, or safety, or the rights of others
- In connection with a merger, acquisition, or sale of assets
6. Data Retention
- Active accounts: Data retained as long as your account is active
- After cancellation/termination: Data retained for 30 days, then permanently deleted
- Backups: May retain copies for up to 30 additional days
- Legal requirements: Some data may be retained longer if required by law
7. Security
We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, secure password hashing, access controls, firewalls, and regular security monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Export your data in a portable format
To exercise these rights, contact hello@stonegate-labs.com. We will respond within 45 days.
9. California Privacy Rights (CCPA)
If you are a California resident:
Categories of personal information collected: Identifiers (name, email, IP), commercial information (subscription history), internet/electronic network activity (usage data).
Purpose: As described in Section 2.
Sale and sharing: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
Your CCPA rights: Right to know, right to delete, right to correct, right to opt out of sale/sharing (not applicable — we don't sell), right to non-discrimination.
How to submit a request: Email hello@stonegate-labs.com. We will verify your identity and respond within 45 days.
10. Children's Privacy
The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we learn a child under 18 has provided personal information, we will delete it promptly. Contact us at hello@stonegate-labs.com if you believe a child has provided us with information.
11. Do Not Track
We do not engage in cross-site tracking or behavioral advertising. As stated in Section 1.7, we use only essential cookies.
12. Data Breach Notification
In the event of a data breach affecting your personal information, we will investigate promptly, notify affected users within 72 hours where feasible, provide details about affected information, and notify relevant authorities as required.
13. Data Location
All Service data is processed and stored in the United States on servers provided by DigitalOcean. By using the Service, you consent to processing in the United States.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy with a new "Last Updated" date and by email for material changes. Continued use after changes constitutes acceptance.
15. Contact Us
Stonegate Labs LLC
2501 Chatham Rd Suite R
Springfield, IL 62604
Email: hello@stonegate-labs.com