Overview
PaveSite ("we," "us," or "our") operates the website builder platform available at pavesite.com and all associated subdomains. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.
By creating an account or using PaveSite, you agree to the collection and use of information as described in this policy. If you do not agree with any part of this policy, please do not use our service.
1. Information We Collect
Account Information
When you create a PaveSite account, we collect:
- Email address — used for authentication, billing communications, and support
- Name — used to personalize your account and site
- Password — stored in hashed form; we never store or have access to your plaintext password
- Business information — business name, industry, description, contact details, and other information you provide during site creation
Site Content
We store the content you provide or that our AI generates for your website, including:
- Text content (headings, paragraphs, service descriptions)
- Images and logos you upload
- Contact information you choose to display publicly
- Design preferences and chat-based editing history
- Custom domain configuration
Usage Data
We automatically collect certain information when you use PaveSite:
- Log data — IP address, browser type, operating system, referring page, pages visited, and timestamps
- Device information — device type, screen resolution, and general hardware characteristics
- Interaction data — features used, chat messages sent to the AI editor, and actions taken within the dashboard
- Performance data — page load times, errors, and service availability metrics
Cookies and Similar Technologies
We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use PaveSite. See the Cookie Policy section below for full details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the service — to build, host, and maintain your website, process your chat-based edits, and deliver your site to visitors
- Account management — to authenticate your identity, manage your subscription, and process payments
- Communication — to send transactional emails (billing receipts, password resets, site status updates), monthly performance reports, and important service announcements
- Improvement — to analyze usage patterns, debug issues, improve AI generation quality, and develop new features
- Security — to detect and prevent fraud, abuse, and unauthorized access to accounts
- Legal compliance — to comply with applicable laws, regulations, and legal processes
We do not sell your personal information to third parties. We do not use your site content to train AI models. Your business information is used solely to generate and maintain your website.
3. Data Storage and Security
PaveSite is built on Cloudflare's infrastructure, including Cloudflare Workers, R2 object storage, and D1 database. Your data is stored in Cloudflare's globally distributed network, which provides:
- Encryption in transit (TLS/SSL) for all connections
- Encryption at rest for stored data
- DDoS protection and Web Application Firewall (WAF)
- Automatic backups and data redundancy
We implement industry-standard security practices including hashed passwords, secure session management, role-based access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
If we become aware of a data breach that affects your personal information, we will notify you via email within 72 hours of discovery and take immediate steps to mitigate the impact.
4. Third-Party Services
We use a limited number of third-party services to operate PaveSite. Each has their own privacy policy governing their use of data:
Stripe (Payment Processing)
We use Stripe to process subscription payments. When you subscribe, Stripe collects your payment card details directly. We never see, store, or have access to your full card number. We receive only a confirmation of payment, the last four digits of your card, and basic billing information necessary to manage your subscription. Stripe's handling of your payment data is governed by their privacy policy.
Anthropic (AI Services & Content Moderation)
We use Anthropic AI services to generate website content and moderate user-submitted content for compliance with our acceptable use policy. Content submitted for generation and moderation is processed according to Anthropic's data usage policies. We do not share your account information or personal details with Anthropic — only the content being generated or reviewed.
Cloudflare (Infrastructure)
Our entire platform runs on Cloudflare infrastructure. Cloudflare processes request data (IP addresses, headers) as part of delivering your website to visitors and providing security services.
5. Your Rights
You have the following rights regarding your personal information:
- Access — You can view your account information and site content at any time through your PaveSite dashboard.
- Correction — You can update your account details and site content through the dashboard or by contacting support.
- Data export — You can request a complete export of your data, including your site HTML, uploaded images, and account information. Contact [email protected] and we will provide your export within 30 days.
- Deletion — You can request deletion of your account and all associated data by contacting [email protected]. Upon receiving a verified deletion request, we will delete your personal data within 30 days. Some data may be retained for up to 90 days in backups before being permanently removed. Data required for legal compliance or legitimate business purposes (such as billing records) may be retained for the legally required period.
- Portability — You can request your site code (HTML/CSS) to move to another hosting provider at any time.
To exercise any of these rights, email us at [email protected]. We will verify your identity before processing requests and respond within 30 days.
6. Data Retention
We retain your data as follows:
- Active accounts — Data is retained for as long as your account is active and your subscription is current.
- Cancelled accounts — After cancellation, your site goes offline at the end of your billing period. We retain your data for 90 days in case you wish to reactivate, then permanently delete it.
- Trial accounts that do not convert — Data from expired trial accounts is deleted 90 days after the trial ends.
- Billing records — Payment transaction records are retained for 7 years as required for tax and legal compliance.
- Server logs — Aggregated and anonymized log data may be retained indefinitely for analytics and service improvement.
7. Children's Privacy
PaveSite is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will promptly delete that information.
Users between the ages of 13 and 18 may use PaveSite only with the involvement and consent of a parent or legal guardian.
8. Cookie Policy
PaveSite uses cookies and similar technologies for the following purposes:
Essential Cookies
These cookies are necessary for the service to function and cannot be disabled:
- Session cookie — Maintains your authenticated session while logged in
- CSRF token — Protects against cross-site request forgery attacks
Functional Cookies
These cookies remember your preferences and improve your experience:
- Dashboard preferences — Remembers your layout and display preferences
- Editor state — Preserves your position in the chat editor between sessions
Analytics Cookies
We may use anonymized analytics to understand how the service is used. We do not use third-party tracking scripts (such as Google Analytics or Facebook Pixel) on the PaveSite marketing site or dashboard. Any analytics we collect are first-party and anonymized.
Most web browsers allow you to control cookies through their settings. Blocking essential cookies may prevent you from using PaveSite. Visitor-facing websites built with PaveSite do not set any cookies unless you, as the site owner, add third-party integrations.
9. International Data Transfers
PaveSite uses Cloudflare's global network, which means your data may be processed in data centers outside your country of residence. Cloudflare maintains appropriate data protection safeguards in compliance with applicable international data transfer requirements. By using PaveSite, you consent to the transfer and processing of your data in these locations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice in the PaveSite dashboard at least 30 days before the changes take effect. Your continued use of PaveSite after the effective date constitutes acceptance of the updated policy.
We encourage you to review this page periodically for the latest information on our privacy practices.
11. Contact Us
If you have questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, contact us at:
Email: [email protected]
Website: pavesite.com
We aim to respond to all privacy-related inquiries within 5 business days.