Privacy policy

What we collect, why, and who touches it — in plain language, because that's how we'd want it explained to us.

What we collect

• Account and billing details: your email address, your site name, and your chosen plan when you sign up.
• Payment information: handled entirely by Stripe or PayPal, whichever you pay with. Your card or account details go to them, not to us — we see your subscription status, not your card.
• Partner program details: if you apply to be a Stooplight partner, your name, email, PayPal email, website, and what you tell us about how you'd share Stooplight. We keep a record of the signups and commissions credited to you so we can pay you correctly.
• Support messages: what you send through the contact form, so we can reply.
• Concierge conversations: messages you type to the site's AI concierge, which are processed to generate a reply.
• Basic technical data: standard server logs and rate-limiting records that keep the service running and prevent abuse.

One measurement tool runs on stooplight.com itself: the Meta (Facebook) pixel, which helps us see whether our own ads bring people here. It applies only to this marketing site — the client sites built with Stooplight don't carry it or any other advertising tracker. We don't sell or rent anyone's data. Ever.

We also keep our own simple page counts on stooplight.com — which pages get visited and which site sent someone here. This uses no cookies and stores nothing about you personally: just daily tallies.

Referral links. If you arrive on stooplight.com through someone's referral link (a web address ending in ?ref= and a code, including the "Built with Stooplight" link on sites built with Stooplight), we set one first-party cookie, sl_ref, holding only that referral code. It lasts 60 days, and its only job is to credit the right person if you sign up. It doesn't identify you, isn't shared with anyone, and isn't set at all if you come here any other way. We also count the click against that code — a number, nothing about you.

Who processes it

Stooplight runs on a small set of services, each of which handles data only to provide their part of the service:

• Netlify — hosts the sites and processes form submissions and server logs.
• Stripe and PayPal — process subscription payments and store billing details. PayPal also delivers partner payouts.
• Anthropic — powers the AI concierge; chat messages are sent to their API to generate responses.
• Resend — delivers transactional emails like signup confirmations and support replies.
• Meta — receives standard pixel signals (like page views) from stooplight.com only, so we can measure our own advertising.
• Our tax-form service (such as Tax1099 or Avalara) — collects W-9 forms from partners whose earnings require one, so their tax ID numbers are never stored by us.

How long we keep it

Account and billing records are kept while your subscription is active and as long as needed for tax and accounting afterward. Temporary technical records (like rate-limiting data) are cleaned up automatically on a rolling basis. Support messages are kept so we have context if you write back.

Your choices

Want a copy of what we have about you, a correction, or deletion? Contact support and we'll take care of it. Deleting your account data doesn't reach into records we're legally required to keep (like payment records), but everything else goes.

Visitors to Stooplight-built sites

If you contact a business through a site built with Stooplight — a lead form, an event ticket, a concierge chat — your message goes to that business. They're responsible for how they use it; this policy covers what Stooplight's own systems do, which is deliver it and keep the service running.

Changes

If this policy changes, we'll post the new version here with a new effective date.

Questions

Contact support — happy to explain anything here in more detail.

Effective August 11, 2026. Updated October 22, 2026.