Privacy Policy

1. Who we are

SiteSketcher is a software-as-a-service platform that lets businesses design, launch, and operate online stores without writing code. We are based in and operate from the Arab Republic of Egypt. For any privacy question, or to exercise your rights, contact us at support@sitesketcher.net.

2. Our roles: when we are a controller and when we are a processor

SiteSketcher handles personal data in two distinct capacities, and it is important to understand the difference:

• As a data controller — for the account, billing, and usage information of the merchants and team members who sign up for and use SiteSketcher. We decide how and why this data is processed, and this Policy governs it.
• As a data processor — for the personal data of shoppers and contacts that a merchant collects through their own storefront (for example, order, shipping, and contact details). In that case the merchant is the controller and is responsible for their own privacy notice and lawful basis. We process that data only to provide the Service and in line with the merchant's instructions and our Terms. If you are a shopper, please direct privacy requests about a specific store to that store's owner.

3. Information we collect

We collect the following categories of information to operate and improve the Service:

• Account & identity data — your name, email address, phone number, password (stored only as a salted hash), company or store name, role, and language preference.
• Store & content data — products, images, pages, settings, domains, and other content you create or upload to your store.
• Billing & subscription data — your plan, subscription status, invoices, and the partial card details (such as the last four digits and card brand) returned by our payment partners. We never receive or store full card numbers — card payments are captured directly by PCI-DSS-compliant gateways (see Section 6).
• Storefront shopper data (as processor) — order details, customer names, email and phone, billing and shipping addresses, cart contents, and similar data your shoppers submit to your store.
• Usage & device data — IP address, browser and device type, pages viewed, referring URLs, store search queries, and diagnostic logs. IP addresses captured from marketing-form submissions are stored only as a one-way hash.
• Communications — messages you send us through contact or support forms, including your name, email, and the content of your message.
• Cookies & similar technologies — see Section 5.

4. How we use your information

We use personal data to:

• Provide, operate, secure, and maintain your account and the Service;
• Process subscription payments, manage billing, and prevent fraud and abuse;
• Respond to your enquiries and provide customer support;
• Send service, transactional, and security notices (for example, billing reminders, subscription-expiry notices, and important changes);
• Improve, develop, and analyse the performance of the Service;
• Comply with legal, tax, and regulatory obligations — including, where applicable, generating Egyptian Tax Authority (ETA) electronic receipts and retaining invoice records; and
• With your consent where required, send product news and marketing. You can opt out of marketing at any time.
• Our legal bases (where applicable) are: performance of our contract with you, our legitimate interests in running and securing the Service, your consent, and compliance with legal obligations.

5. Cookies and similar technologies

We and our merchants use cookies and similar technologies for several purposes:

• Essential — to keep you signed in, protect forms against cross-site request forgery, remember your language, and resolve which store to display. The Service cannot function without these.
• Preference & analytics — to remember settings and understand how the Service is used so we can improve it.
• Merchant-configured tracking — individual stores may enable their own marketing tools, such as the Meta (Facebook) Pixel and Conversions API. Where a merchant turns these on, the merchant is the controller of that tracking on their storefront and is responsible for obtaining any required consent.
• You can control cookies through your browser settings, though disabling essential cookies may break parts of the Service.

6. How we share information

We do not sell your personal information. We share data only as needed to run the Service, and only with parties bound by appropriate confidentiality and data-protection obligations:

• Hosting, storage & CDN — cloud infrastructure providers (including Cloudflare and Cloudflare R2 object storage) that host the application, store media, and deliver content.
• Payment processors — gateways such as PayTabs and Paymob, which process card payments for subscriptions and, where enabled, for your shoppers. Your card data is handled directly by these PCI-DSS-compliant providers under their own privacy policies.
• Communications providers — email and messaging services used to send transactional and support messages.
• Analytics & advertising — where you or a merchant enables them (for example, Meta).
• Legal & safety — authorities, regulators, or advisors where we are required by law, or to protect our rights, users, or the public.
• Business transfers — to a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. International data transfers

The Service runs on global cloud infrastructure, so your information may be processed in countries other than your own. Where personal data is transferred across borders, we take steps to ensure it remains protected by appropriate safeguards consistent with applicable data-protection law.

8. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After your account closes, we retain certain data where required to comply with legal, tax, and accounting obligations (for example, invoice and e-receipt records), resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it. As a processor, we retain shopper data on a merchant's behalf for as long as the merchant's account remains active or until the merchant instructs us to delete it.

9. How we protect your information

We use technical and organisational measures designed to protect personal data, including encryption in transit (TLS), hashing of passwords and marketing-form IP addresses, role-based access controls, and a centrally managed key ring for data-protection secrets. No method of transmission or storage is completely secure, but we work continuously to safeguard your data and to detect and respond to incidents.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to port your data, and to withdraw consent at any time. These rights are recognised under Egypt's Personal Data Protection Law (Law No. 151 of 2020) and, for users in the European Economic Area and the United Kingdom, the GDPR.

To exercise any of these rights, email us at support@sitesketcher.net. We may need to verify your identity before acting. If you believe we have not handled your data properly, you may also lodge a complaint with your local data-protection authority. If your request concerns data held in a specific store, we will direct you to, or coordinate with, the merchant who controls that data.

11. Children's privacy

The Service is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Merchant stores and third-party links

Stores built on SiteSketcher are operated independently by their owners. Each merchant is responsible for its own privacy practices, product information, and compliance with applicable law. This Policy does not cover how individual merchants use shopper data, nor the practices of any third-party website we may link to. Please review the privacy notice of the specific store or site you are dealing with.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after an update takes effect means you accept the revised Policy.