Privacy Policy

Last updated: 31 August 2026

Short version: we collect the details you enter in the onboarding form and use them only to build and support your website. We don't sell your data. We use a small number of well-known service providers to run the business.

1. What we collect

Onboarding details you submit: business name, contact name, email, phone, website preferences, and any notes or links you provide.
Payment information is processed by Stripe. We never see or store your full card number.
Project communications — messages you send through the client portal or by email.
Basic technical data such as your IP address and browser, used for security and rate-limiting.

2. How we use it

To design, build, deliver and support your website; to take payment; to send you transactional email about your project; and to meet legal and accounting obligations. We do not use your information for third-party advertising.

3. Who we share it with

Only the service providers we need to operate:

Supabase — database hosting for your project records.
Railway — application hosting for our API.
Stripe — payment processing.
Resend — sending transactional email.

Each processes data on our behalf under their own terms. We may also disclose information if required by law.

4. Data retention

We keep project and billing records for as long as needed to provide the service and to meet tax and legal requirements, then delete or anonymise them. You can ask us to delete your personal data at any time, subject to records we're legally required to keep.

5. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@99websites.co and we'll respond within 30 days.

6. Cookies

The marketing site uses no tracking or advertising cookies. The client portal and admin dashboard store a small token in your browser so you stay signed in — nothing more.

7. Contact

Privacy questions: hello@99websites.co.