Privacy Policy

1. Introduction

Sitenyx ApS ("Sitenyx", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website builder platform and related services. This policy applies to all users of sitenyx.com and websites created through our platform.

2. Data Controller

Sitenyx ApS, registered in Denmark, is the data controller responsible for your personal data. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection legislation. For any data protection inquiries, you can reach our data protection contact at [email protected].

3. Information We Collect

We collect several categories of personal data to provide and improve our services:

• Account Information: Name, email address, password (hashed), billing address, and payment details when you create an account or subscribe to our services.
• Usage Data: Information about how you interact with our platform, including pages visited, features used, website editor actions, and session duration.
• Device Information: Browser type and version, operating system, screen resolution, IP address, and device identifiers used for security and analytics purposes.
• Cookie Data: Data collected through cookies and similar tracking technologies as described in our Cookie Policy.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.
• Contractual Necessity: To fulfill our obligations under your service agreement, including account management, service delivery, and billing.
• Legitimate Interests: For fraud prevention, platform security, service improvement, and analytics, where our interests do not override your fundamental rights.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes, including tax and accounting requirements.

5. How We Use Your Information

We use the collected data to provide and maintain our website builder service, process transactions and send related information, respond to your requests and provide customer support, send you technical notices and security alerts, monitor and analyze usage patterns to improve our platform, detect and prevent fraud and abuse, comply with legal obligations, and personalize your experience based on your preferences.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with payment processors (Stripe) for transaction processing, cloud infrastructure providers (Cloudflare) for hosting and content delivery, analytics services to understand platform usage, and law enforcement or regulatory authorities when required by law. All third-party processors are bound by data processing agreements that ensure GDPR compliance.

7. International Data Transfers

Your data is primarily stored within the European Economic Area (EEA). Where transfers outside the EEA are necessary (e.g., for certain cloud services), we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Account data is retained for the duration of your account and up to 30 days after deletion. Billing records are retained for 5 years as required by Danish accounting law. Usage analytics are anonymized after 26 months. Support correspondence is retained for 2 years after resolution.

9. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

10. Account & Data Deletion

You can delete your account and all associated personal data at any time using any of the following methods:

• Account Settings: Log in to your account, navigate to Account Settings, and select "Delete Account". This will permanently remove your account, profile information, and all associated data within 30 days.
• Email Request: Send a deletion request to [email protected] from the email address associated with your account. We will process your request within 30 days as required by GDPR.
• Social Login Users: If you signed up using a social login provider (Google, Facebook, LinkedIn, or Apple), deleting your Sitenyx account will remove all data we received from that provider, including your name and email address. You may also revoke Sitenyx's access from your social provider's settings independently.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS 1.3) and at rest, regular security assessments, access controls and authentication requirements, and incident response procedures. While we strive to protect your data, no method of transmission over the internet is 100% secure.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at [email protected] or your local supervisory authority.