SiteUpdate helps renovation contractors manage project updates and share progress with their clients. This policy explains what information we collect, why we use it, who we share it with, how long we keep it, and the choices you have.
Who we are
SiteUpdate is operated by an independent developer based in Israel. For any privacy question or request, contact support@siteupdate.app.
Information we collect
Information you give us
- Account details: your email address, your name, and your password. Passwords are handled by our authentication provider and are never visible to us. If you choose "Continue with Google", we receive the details needed to create your account, such as your email address.
- Profile details you choose to add: business name, contractor name and phone number.
- Client details you enter: client name and, if you add them, email, phone and notes.
- Project information: project name, address, type, dates, status, stages and checklist items, progress updates, and any expected revenue, estimated cost and estimated profit you enter.
- Photos you upload. When a photo is uploaded, we remove embedded metadata such as location data.
- Messages you send us by email.
Information collected automatically
- With your consent, our own analytics: pages visited, how you arrived (for example the referring website or campaign tags), approximate country, device type, browser and operating system type, and random identifiers stored in your browser. Private client-link addresses are recorded only as a generic pattern, never the link itself. We do not store IP addresses in our analytics.
- Technical and security logs kept by our infrastructure providers.
Billing information
Payments are handled by CREEM. We receive and store your plan, subscription status, renewal date, and CREEM customer and subscription identifiers. We do not receive or store your full card details.
How we use information
- To provide the service: your account, projects, photos, updates, client progress pages, and the emails you choose to send.
- To process subscriptions and billing.
- To send service emails, such as account confirmation and password reset messages.
- To keep the service secure and prevent abuse.
- To understand how the site is used so we can improve it, if you accept analytics cookies.
We do not sell your personal information, and we do not use it for advertising.
Client progress pages
Clients can view a project progress page through a link you share with them. Clients do not need an account. Anyone who has the link can view the page, so share it only with the people it is meant for. Photos shown on a progress page are stored at web addresses that can be opened by anyone who has them. You are responsible for what you choose to share.
Emails
We send emails needed to operate your account, such as account confirmation and password reset messages.
On the Pro plan, you can send a project update email to the client email address entered for a project. These emails are sent from a SiteUpdate address, and replies go to your email address.
Project update emails include an unsubscribe link. If a recipient unsubscribes, or if an address bounces or marks an email as spam, project update emails are no longer sent to that address. Email delivery is handled by Lovable, which hosts the unsubscribe page and processes bounce and spam-complaint notifications.
If you received an email through SiteUpdate and have a question about your data, contact us at support@siteupdate.app.
Service providers
We share information only with providers that help us run SiteUpdate:
- Lovable: website hosting, cloud infrastructure, Google sign-in, and email delivery, including unsubscribe and bounce handling.
- Supabase: database, authentication, file storage and server functions.
- Cloudflare: network delivery and security for our website, used by our hosting provider.
- CREEM: payments and subscription billing.
- Google: only if you choose "Continue with Google".
- WhatsApp: only if you choose to share a client link through WhatsApp. WhatsApp's own terms then apply.
How long we keep information
- Account, profile, clients, projects, updates, photos, and the history of update emails shown in a project: while your account is active, until you delete them.
- Our analytics records: automatically deleted after 13 months. For visitor records, the 13 months count from the last visit.
- The link between a browser and an account in our analytics: 13 months, or immediately when the account is deleted.
- Email delivery logs: 12 months.
- Unsubscribe, bounce and spam-complaint records: kept indefinitely, so we can keep honoring them.
- Records used to limit email sending: 7 days.
- If you had a subscription and delete your account: a minimal billing record without your name or email, for 7 years.
- A short record that an account was deleted, without name or email: 7 years.
Automatic deletion runs daily. Deleted information may remain in backups until they are replaced in the normal backup cycle.
Your choices and rights
- Edit your profile, clients and projects at any time in the app.
- Delete a photo, an update, a project, a client, or your whole account yourself in the app (Settings → Delete account). If you have an active subscription, cancel it first under Manage billing.
- Ask for a copy of your data, or make any other privacy request, at support@siteupdate.app. We respond within 30 days.
- Unsubscribe from project update emails using the link in any such email.
- Control cookies and browser storage as described in our Cookie Policy.
Depending on where you live, you may have additional rights, such as the right to object to or restrict certain processing, and the right to complain to your data protection authority.
When you delete your account
We delete your account, profile, clients, projects, updates, photos and email history. We keep only what is listed above: unsubscribe records, a deletion record and, if you had a subscription, a minimal billing record. Analytics data is no longer linked to your account and is deleted on its normal schedule. Emails that were already delivered, and copies kept by your clients, are outside our control.
Children
SiteUpdate is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
International processing
SiteUpdate is operated from Israel, and our service providers run infrastructure in several countries. Your information may therefore be processed outside the country where you live.
Data security
We use reasonable technical and organizational measures to protect your data. Users only have access to their own dashboard data. No system can guarantee absolute security.
Changes to this policy
We may update this policy. When we do, we will change the "Last updated" date and, for significant changes, let account holders know by email or in the app.