Privacy, plainly.

The short version

We collect as little as possible, sell nothing, and use your information only to show businesses what a better website could look like, and to build and run yours.

What we collect

• Contact form: the name, contact details and message you send us, together with the IP address the message came from and the page you sent it from. We use this only to reply and manage your project, and to keep out automated spam. Legal basis: Art. 6(1)(b) GDPR when it concerns your project, otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR).
• Question field: if you ask something in the question field on our website, your question is answered by an AI service (OpenAI, see Service providers), using information we provide about MeetYourSite. We do not store your question or the answer. To limit how many questions can be sent, we log the time of each question with a hash of your IP address and of the identifier in the mys_frage cookie, along with technical details such as whether it was answered. These hashes are pseudonymous, not anonymous. We delete the log after 30 days. Legal basis: our legitimate interest in answering questions quickly and keeping the field free of misuse (Art. 6(1)(f) GDPR).
• Phone calls: calls to and from our sales numbers run through our telephony providers (see Service providers). When our automated assistant (AI) calls your business about a demo, or answers when you call us back, it uses AI services to understand and answer you. Before it calls, we check only whether the number is a landline or a mobile line. The call is transcribed and summarized so a person can follow up, and a member of our team may listen in while the call is live. We do not record the audio. If you ask, the assistant tells you that the call is transcribed, and it ends the call if you prefer. Legal basis: our legitimate interest in answering every call quickly and in offering our websites to businesses (Art. 6(1)(f) GDPR).
• Demo websites: we find businesses through public listings (Google Maps, via the Google Places API) and build demos from publicly available information about the business: its listings, its website and its public reviews. AI services help us write and lay out the pages. We then contact the business by phone or email, using the details in its public listing, to show it the demo. Legal basis: our legitimate interest in showing a business what a better website could look like (Art. 6(1)(f) GDPR). You can object at any time (see Your right to object). If you want a demo removed, one email to info@meetyoursite.com is enough. It comes down promptly.
• Google reviews on demo websites: a demo can show the business’s rating and reviews from Google. They load straight from Google through the Google Maps Platform (Places UI Kit). To show them, your browser connects to Google, which receives your IP address, browser details and the address of the page. For businesses in the EU or EEA, or when we do not know the business’s country, nothing loads until you click to show the reviews. Otherwise they load as you scroll towards them. We do not receive or store the reviews or what Google learns from your visit. Legal basis: your consent when you click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), otherwise our legitimate interest in showing what customers say about the business (Art. 6(1)(f) GDPR). Google LLC is certified under the EU–U.S. Data Privacy Framework.
• Videos and maps on demo websites: a demo can show the business’s videos and a map. Videos from YouTube or Vimeo and maps from Google Maps load only when you click to play or show them; YouTube loads in its privacy-enhanced mode (youtube-nocookie.com) and Vimeo with “do not track”. When you click, your browser connects to that service, which receives your IP address, browser details and the address of the page, and may set its own cookies. Legal basis: your consent through the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). YouTube and Google Maps are provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC is certified under the EU–U.S. Data Privacy Framework), Vimeo by Vimeo.com, Inc. (330 West 34th Street, 10th Floor, New York, NY 10001, USA; processing in the USA under the EU Standard Contractual Clauses).
• Feedback on a demo: if you rate a demo, we receive your rating, your comment, your name and your company. If you agree, we may quote your rating and comment on meetyoursite.com with your first name, trade and city; you can withdraw this at any time by email to info@meetyoursite.com. Legal basis: our legitimate interest in feedback on our demos (Art. 6(1)(f) GDPR), and your consent for the quote (Art. 6(1)(a) GDPR).
• Customers: when you buy, your name, email address, billing details from Stripe, your domain and the content of your website. We use them to build, host and support your site (Art. 6(1)(b) GDPR) and keep invoices for as long as tax law requires (Art. 6(1)(c) GDPR). We need these details to fulfil your order. While we host your site and email, we process the data of your visitors and mailboxes on your behalf, as set out in our Terms.
• Payments: handled entirely by Stripe; we never see or store card numbers.
• This website: no advertising trackers and no third-party analytics. We set only cookies of our own, each for one task:
  • mys_code: when you arrive through a link sent to you by one of our team, it keeps the discount code from that link for 90 days, so the discount applies when you buy. The same code tells us which team member to credit for your purchase.
  • mys_frage: a random identifier, kept for one day, that limits how many questions can be sent through our question field. It contains no name and no content.
  • mys_portal: keeps members of our team signed in to their portal, for up to 12 hours.
  These cookies are strictly necessary for what you ask of us (Section 25(2) no. 2 TDDDG). We credit referrals based on our legitimate interest in paying our team fairly (Art. 6(1)(f) GDPR). We keep a log of visits to our website and to demo websites (page, referring page, IP address, browser). On a demo, we also note which design options are chosen, which plan is clicked, which discount code is entered and how the demo is rated. We use this to see whether our links work and how a business responds to its demo. After 7 days we delete the IP address and browser and shorten the referring page to its address; we delete the rest after 2 years at most. Our servers keep technical logs, which can include your IP address, for security and troubleshooting. They are deleted automatically after three months at most. Legal basis for both logs: our legitimate interest in links that work, in following up on the demos we show and in a secure service (Art. 6(1)(f) GDPR).
• How long we keep it: project data (our correspondence and records about your project) for as long as you are a customer and up to two years afterwards, so we can answer questions about your site. Your site and the data we host for it are deleted as set out in our Terms. Call transcripts, call summaries and an email address you give us on a call: 90 days. Records of our calls and emails to businesses we contact: up to 2 years after our last contact; if you object, we keep only what we need to respect your objection (the company name, phone number, email address or domain on our do-not-contact list). Feedback on demos: up to 2 years after our last contact; a published quote until you withdraw your consent.Visit logs: IP address and browser for 7 days, everything else for 2 years at most. Technical server logs: three months at most. Invoices and payment records: as long as tax law requires. Backups: 30 days at most, so data we delete can remain in a backup until then. Anything you ask us to delete goes sooner.

Service providers

We share data only with the services we need to run MeetYourSite. Never for advertising, never sold. They work for us under contract:

• Hosting and email: Contabo runs our servers and mailboxes in the USA (contract partner Contabo GmbH, Welfenstrasse 22, 81541 Munich, Germany). Our phone assistant runs on Oracle Cloud Infrastructure (Oracle Corporation) in Ashburn, Virginia, USA. Netcup (netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany) and Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France) send part of our email.
• Payments: Stripe (Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland), with processing also in the USA.
• AI services: OpenAI (OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; processing in the USA) for questions asked through the question field on our website, for demo pages, and as the backup for the phone assistant’s replies and, when you call us back, for its voice. Anthropic (Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; processing in the USA) writes the phone assistant’s replies and helps write and lay out demo pages. Eleven Labs Inc. (USA) recognizes speech and speaks the assistant’s replies; we delete the spoken replies from Eleven Labs after each call. Soniox, Inc. (USA) recognizes speech only if Eleven Labs fails. Google (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; processing in the USA; through the Gemini API and Google Cloud Vertex AI) writes the call summary and, when you call us back, is a backup for the assistant’s voice.
• Telephony: Telnyx (Telnyx LLC, 600 Congress Avenue, 14th Floor, Austin, TX 78701, USA).
• Business listings: Google (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland), through the Google Places API.
• Google reviews on demos: Google (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), through the Google Maps Platform (Places UI Kit). Google’s own use of the data is described in its privacy policy at policies.google.com/privacy.

Outside the EU

Our servers and mailboxes are in the USA, and our providers process data in the USA. For the USA, we rely on the EU–U.S. Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses.

Your rights

You can ask what we hold about you, have it corrected or deleted, restrict how we use it and take a copy with you: info@meetyoursite.com. We answer within one business day. You can also complain to a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA).

No automated decisions

We make no decisions about you that have legal or similarly significant effects by automated means alone.