Privacy Policy

Last updated: 19 October 2026

1. Introduction

SiteScript ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

We may collect information about you in a variety of ways, including:

• Personal Data: Name, email address, telephone number, company name, address, and postcode that you provide when registering for our services.
• Usage Data: Information about how you use our website and services, including browsing patterns and preferences.
• Device Data: Information about your device, including IP address, browser type, and operating system.
• SiteScript Office Callers: If a call is forwarded to SiteScript Office, we may collect the caller number supplied by the network, a recorded message, its transcript, and a draft enquiry brief. If you leave a message with SiteScript Office from a UK mobile number, we may use the number you called from to send you one short text message confirming what we understood and that the business will call you back.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your membership and transactions
• Send you promotional communications (with your consent)
• Respond to your enquiries and provide customer support
• Provide you with membership benefits and features
• Comply with legal obligations

If SiteScript Office sends you a text about your message, this text is a service message about your enquiry, not marketing. It is sent at most once per number per 24 hours. To stop receiving these texts, reply STOP or call the business on the number in the message. The number the text was sent to and the status of that text are kept with the enquiry in the builder's account.

4. Sharing Your Information

We may share your information with trusted service providers to deliver our platform features. We will never sell your personal information to third parties. We may also share information when required by law or to protect our rights.

Our processors include Supabase (authentication and data storage), Stripe (billing), Resend (email), Twilio (SiteScript Office call handling, temporary recording storage, and sending SiteScript Office text messages), Deepgram (transcription), and AI providers (draft enquiry briefs and quote generation).

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time