Privacy Policy

• Account information. When you sign up we collect your email address and basic profile details through our authentication provider (Google sign-in) or an email magic link.
• Content & usage data. The URLs you submit to clone, the clones and templates you generate, your credit balance and usage history, and records of actions such as downloads and exports. For export and download events we store a hashed IP address and your browser’s user-agent string to prevent abuse.
• Contact submissions. If you contact us, we collect your email, your message, an optional URL, and your user-agent.
• Payment information. Payments are processed by Stripe. We receive your transaction and credit status but do not collect or store full payment-card numbers.
• Automatically collected data. Like most websites, we collect device and usage information (such as pages viewed, approximate location from IP address, and browser type) through analytics and cookies, as described below.

We do not intentionally collect special categories of sensitive personal data.

We use the information we collect to:

• provide and operate the Service, including processing the sites you clone;
• manage your account and credits and process payments;
• respond to your support requests;
• protect the Service, prevent fraud and abuse, and enforce our Terms;
• analyze usage to maintain and improve the product; and
• comply with our legal obligations.

We currently do not send marketing newsletters. If we introduce product or marketing emails in the future, we will include an unsubscribe option and honor your choice.

If you are in the EEA or the UK, we rely on the following legal bases:

• Performance of a contract — to provide the Service you request, including your account, clones, and payments.
• Legitimate interests — to secure the Service, prevent fraud and abuse, and improve the product, balanced against your rights and freedoms.
• Consent — where required by applicable law for optional processing.
• Legal obligation — to comply with applicable laws, such as tax and accounting requirements.

We use cookies and local storage for essential functions (keeping you signed in and remembering your theme and language preference) and for analytics. Our analytics provider, PostHog, helps us understand product usage; we configure it to avoid capturing sensitive fields, and it runs in production only. We also use Cloudflare Turnstile to distinguish humans from bots on our forms. You can control cookies through your browser settings, though some features may not work without them.

We rely on trusted providers to run the Service. They process data on our behalf under their own security and privacy commitments.

We do not sell your personal information. We share it only: with the subprocessors above to operate the Service; when required by law, legal process, or to protect the rights, safety, and integrity of the Service and its users; and in connection with a merger, acquisition, or sale of assets, in which case we will notify you.

We keep your information for as long as your account is active and as needed to provide the Service. Account, credit, and payment records are retained while your account exists and for a limited period afterward to meet tax, accounting, and legal obligations and to resolve disputes. Exported clone artifacts are stored via Cloudflare R2 and served through short-lived signed URLs. You can request deletion as described below.

We use measures such as encryption in transit, hashed IP addresses in abuse-prevention logs, and time-limited signed URLs for downloads. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities where required by applicable law.

Depending on where you live (for example, under the GDPR or the UK GDPR), you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email hello@clonesite.ai; we will respond as required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

If you are a California resident, you have the right to know the categories of personal information we collect, to access and delete it, to correct it, and not to be discriminated against for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The categories we collect are: identifiers (such as your email); commercial information (your credit and purchase history); internet and other activity (analytics and device data); and the content you submit (the URLs and clones you create). To exercise your rights, email hello@clonesite.ai.

We do not use your personal data to make decisions that produce legal or similarly significant effects about you through solely automated means.

We and our providers may process your information in the United States and other countries whose data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Questions or requests about your privacy? Email hello@clonesite.ai.
Stack Craft LLC, United States.