Privacy policy
What we collect, why, and who touches it — in plain language, because that's how we'd want it explained to us.
What we collect
- Account and billing details: your email address, your site name, and your chosen plan when you sign up.
- Payment information: handled entirely by Stripe. Your card number goes to Stripe, not to us — we see your subscription status, not your card.
- Support messages: what you send through the contact form, so we can reply.
- Concierge conversations: messages you type to the site's AI concierge, which are processed to generate a reply.
- Basic technical data: standard server logs and rate-limiting records that keep the service running and prevent abuse.
One measurement tool runs on stooplight.com itself: the Meta (Facebook) pixel, which helps us see whether our own ads bring people here. It applies only to this marketing site — the client sites we host don't carry it or any other advertising tracker. We don't sell or rent anyone's data. Ever.
We also keep our own simple page counts on stooplight.com — which pages get visited and which site sent someone here. This uses no cookies and stores nothing about you personally: just daily tallies.
Who processes it
Stooplight runs on a small set of services, each of which handles data only to provide their part of the service:
- Netlify — hosts the sites and processes form submissions and server logs.
- Stripe — processes payments and stores billing details.
- Anthropic — powers the AI concierge; chat messages are sent to their API to generate responses.
- Resend — delivers transactional emails like signup confirmations and support replies.
- Meta — receives standard pixel signals (like page views) from stooplight.com only, so we can measure our own advertising.
How long we keep it
Account and billing records are kept while your subscription is active and as long as needed for tax and accounting afterward. Temporary technical records (like rate-limiting data) are cleaned up automatically on a rolling basis. Support messages are kept so we have context if you write back.
Your choices
Want a copy of what we have about you, a correction, or deletion? Contact support and we'll take care of it. Deleting your account data doesn't reach into records we're legally required to keep (like payment records), but everything else goes.
Visitors to Stooplight-built sites
If you contact a business through a site we host — a lead form, an event ticket, a concierge chat — your message goes to that business. They're responsible for how they use it; this policy covers what Stooplight's own systems do, which is deliver it and keep the service running.
Changes
If this policy changes, we'll post the new version here with a new effective date.
Questions
Contact support — happy to explain anything here in more detail.
Effective August 11, 2026.