1.Who this covers
This Privacy Policy explains how Bluewater Holdings Group, LLC, doing business as NoSite AI (“nosite,” “we,” “us,” or “our”), collects, uses, shares, and sells information when you use nosite.ai, nosite.io, our apps, generated websites, and related services (the “Service”). It applies to our users (the people who sign up and sell sites), to the businesses and people they contact and build sites for (“Customers”), to visitors of generated sites, and to anyone who visits our websites. It does not cover third-party sites or services that we link to or that integrate with the Service. By using the Service you agree to this Policy and to our Terms of Service.
2.What we collect
In plain words: Your name, email, phone, and payment setup; what you search and build; who you contact and what you note about them; business listing info from Google; and the usual device and usage data.
Information you give us. Account details (name, email address, phone number, password-less sign-in data, plan); profile and preferences (default build price, settings); payment information (handled by Stripe; we receive identifiers, status, and the last four digits of a card, not full card numbers); communications with us; and anything you type into the Service, including notes about Customers, contact names, phone numbers, and email addresses of Customers, change requests, feedback, and survey answers.
Information about Customers and other third parties. When you search, we retrieve publicly available business listing data from Google and other sources (business name, address, phone, website status, category, hours, ratings, reviews, photos, and map links) and store it to build and serve sites. When you contact a business you may add the contact’s name, cell number, email, and notes. You are responsible for having the right to provide that information and for telling Customers how it will be used.
Information collected automatically. Device and browser type, IP address, approximate location derived from IP, pages viewed, links clicked, features used, searches run, sites built, buttons tapped (including call, text, and pay-link taps), timestamps, referring URLs, crash and performance data, and identifiers stored in cookies or similar technologies. For generated sites we also record view counts and when a site was first opened.
Payments and payouts. If you connect a Stripe account to get paid, Stripe collects identity, bank, and tax information directly from you under Stripe’s own privacy policy; we receive your account identifier, status (for example, whether charges are enabled), and payment events such as amounts and dates.
Calls and messages. Today, calls and texts go through your own phone, and we record only that you tapped the button and what outcome you logged. If we offer call routing or messaging through numbers we provision, we may collect call metadata (numbers, times, duration, connection status), message content, and, with required consent, recordings and transcripts.
Information from others. We may receive information from service providers (for example, email delivery status), from analytics and advertising partners, from data providers that help us enrich or verify business and contact information, and from public sources.
3.How we use it
We use information to: provide, operate, secure, and improve the Service; create accounts and authenticate you; find businesses and generate, host, and serve sites; provide scripts, links, QR codes, and messaging tools; process payments, payouts, hosting subscriptions, and web-address purchases; send transactional messages (sign-in links, receipts, alerts such as a Customer reactivating a preview); send marketing and product communications, which you can opt out of; provide support; analyze usage and build aggregate statistics; train, test, and improve our models, prompts, templates, scripts, and features, including with the content of generated sites, change requests, notes, and outcomes; detect, prevent, and investigate fraud, abuse, and violations of our Terms; comply with law and enforce our rights; and for any other purpose we describe when we collect the information or with your consent.
4.How we share it
We share information with: service providers and Agents who process it for us, including hosting and infrastructure (Vercel, Supabase), payments (Stripe), email (Resend), AI generation (Anthropic), listing and map data (Google), analytics, customer support, and, if enabled, telephony (Twilio); our affiliates, subsidiaries, parents, and agents for the purposes described in this Policy; Customers, who can see the generated site, that it was opened, and information you choose to send them; other users where a feature is designed for that (for example, a team plan); business partners and third parties as described in “Sale and sharing” below; parties to a business transaction such as a merger, financing, acquisition, bankruptcy, or sale of all or part of our business; law enforcement, regulators, and others when we believe disclosure is required by law or appropriate to protect rights, safety, or property, or to enforce our Terms; and anyone you direct us to share with.
We also share aggregated or de-identified information that cannot reasonably be used to identify you, without restriction.
5.Generated sites are public
Generated sites are web pages. Anyone with the link can view them, and live sites may be indexed by search engines. Information on a generated site, including business details, photos, reviews, and anything added through change requests, is public. Do not put information on a site that you or the Customer do not want public.
6.Cookies and tracking
We use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, measure and analyze use, and support advertising and attribution. Some of these are set by third parties. Most browsers let you control cookies, though blocking them may break sign-in and other features. We currently do not respond to browser “Do Not Track” signals; see Section 7 for Global Privacy Control.
7.Sale and sharing of information, and how to opt out
In plain words: We may sell or share personal information and usage data with other companies, now or later, unless you tell us not to. One email is all it takes to opt out.
We may sell, license, rent, or otherwise share personal information and usage data, including information about users, Customers, and visitors, with third parties such as data partners, marketing and advertising partners, lead-generation or business-information companies, analytics providers, and other businesses, for monetary or other valuable consideration, at any time and without further notice, to the extent permitted by law. The categories of information that may be sold or shared include identifiers (name, email, phone, IP address, device identifiers), commercial information (plans, purchases, sites built, outcomes), business and contact information about Customers, internet and usage activity, approximate location, and inferences drawn from any of these.
Opt out. You may opt out of the sale or sharing of your personal information at any time by emailing hello@nosite.ai with the subject line “Do not sell or share my information” and the email address or phone number associated with you. We will honor a valid request within 15 business days and will not sell or share your personal information afterward, except as permitted by law (for example, to service providers acting on our behalf). We also treat a recognized Global Privacy Control (GPC) signal from your browser as an opt-out request for that browser. Opting out does not stop us from using your information to provide the Service or as otherwise described in this Policy.
Customers and other people. If you are a business or person whose information appears in the Service because a user contacted you, you may opt out of sale or sharing, request access to or deletion of your information, or ask us to remove a site about your business by emailing hello@nosite.ai. We may need to verify your identity or your relationship to the business.
Sensitive information and minors. We do not knowingly sell or share sensitive personal information, and we do not knowingly collect or sell information about anyone under 18. The Service is for adults.
8.Your choices and rights
Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas, Oregon, and other U.S. states with privacy laws, or the EU/UK), you may have rights to: know what personal information we collect, use, sell, and share; access and receive a copy of it; correct it; delete it; opt out of sale, sharing, targeted advertising, or certain profiling; limit use of sensitive information; and not be discriminated against for exercising these rights. To exercise any right, email hello@nosite.ai or write to us at 1500 1st Ave N, Birmingham, AL 35203. We will verify your request, respond within the time the law requires, and may deny requests the law allows us to deny. You may use an authorized agent; we may require proof of authorization. If we deny your request, you may appeal by replying to our response.
You can update account information in Settings, unsubscribe from marketing emails using the link in any such email, and close your account by contacting us. Transactional messages (sign-in links, receipts, security notices) continue while you have an account.
California notice at collection. The categories of personal information we collect, the purposes, and the categories of third parties are described in Sections 2, 3, 4, and 7. We retain information as described in Section 9. We sell and share personal information as described in Section 7; you may opt out there. We have collected and sold or shared the categories listed in Section 7 in the preceding 12 months, or expect to.
9.Retention
We keep information for as long as needed for the purposes described here: account information while your account is open and for a reasonable period after; Customer and site information while a site is active and for a period after it expires or is archived; payment records as required by tax, accounting, and payment-network rules; logs and analytics for a limited period; and anything else as needed to comply with law, resolve disputes, and enforce agreements. Listing data obtained from Google is refreshed from the source and is cached only as its terms permit. We may keep de-identified or aggregated data indefinitely.
10.Security
We use reasonable administrative, technical, and physical safeguards, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, and we cannot guarantee the security of any information. You are responsible for keeping sign-in links and devices secure. If you believe your account has been compromised, contact us immediately.
11.Where information is processed
We are based in the United States and process information there and wherever our service providers operate. If you use the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S. and other countries whose laws may differ from yours.
12.Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13.Changes
We may update this Policy at any time. We will post the updated version with a new “Last updated” date and, for material changes, give notice by email or in the app. Continued use after the effective date means you accept the updated Policy.
14.Contact
Bluewater Holdings Group, LLC dba NoSite AI, 1500 1st Ave N, Birmingham, AL 35203, hello@nosite.ai.