Privacy Policy
This Privacy Policy describes how SITE123 Ltd. (“we”, “our”, or “us”) handles personal data (“Information”) collected in connection with our website building platform, related tools, and associated services (collectively, the “Services”).
This policy applies to the following categories of data subjects:
Account Holders / Platform Customers – individuals or entities who register for the Services, build and manage websites, online stores, landing pages, calendars/bookings, newsletters, etc. (“Customers” or “Website Owners”).
Authorized Users on behalf of the Customer – contributors, collaborators, or invited users working on a Customer’s website.
Visitors of Customer Websites – individuals browsing websites built and hosted on our platform (“Customer Sites”).
Visitors of Company Assets – individuals visiting websites, apps, or landing pages operated by the company (“Company Sites”), registering for webinars/events, or receiving marketing content.
Use of the Services and Company Sites is subject to this Privacy Policy and our Terms of Use, and constitutes consent to the processing of Information as described herein. You are not required to provide us with Information; however, without certain Information we may be unable to provide access to the Services, in whole or in part.
What Information Do We Collect?
A. About Customers / Website Owners
Profile & Account: Name, email, phone, profile picture (if provided), role/company, user permissions, hashed password.
Business & Payment Details: Business name/ID, billing address, currency, payment methods via secure third-party processors (we do not store full card details), invoices and transaction records.
Usage & Configuration Data: Website/store settings, domains, active modules and apps, templates/code/design, calendars/bookings, third-party integrations (Analytics, pixels, CRM, payment gateways), logs and administrative records.
Technical Data: IP address, device/browser/OS type, resolution, language/time zone, app/advertising identifiers, cookies/pixels, anonymized click/scroll/heatmap data.
Support & Inquiries: Correspondence, chats, calls (including recordings where permitted), service requests, and resolution records.
AI Interactions & AI-Assisted Services: Prompts, messages, conversations, instructions, responses, generated outputs, feedback, files, images, documents, and other materials provided, created, or exchanged through AI-powered tools or AI-Assisted Support, together with related usage and interaction data. Where reasonably necessary to provide the requested AI-powered functionality, assistance, or guidance, we may also process information available within or associated with the Customer’s account, including information relating to websites, applications, digital products, services, projects, content, configurations, settings, integrations, features, tools, and account activity.
B. About Visitors of Customer Sites
Usage Data: IP address, browser/device/OS details, cookies/pixels and analytics (if enabled by the Customer), interactions and browsing behavior.
Forms & Registrations: Contact details, newsletter sign-ups, service inquiries, order/purchase details (via secure processors), and other content submitted on the Customer Site.
Note: This collection is under the Customer’s control and settings.
C. About Visitors of Company Sites
Usage data, cookies/pixels, contact forms, and marketing preferences.
D. From Third Parties
Payment processors, marketing/analytics tools, social networks (if accounts are connected), APIs or business partners – subject to your authorizations and applicable law.
Why Do We Use the Information?
Providing & Operating the Services: Website creation/hosting/management, add-ons, domains, identity verification, access management, billing, support.
Customization & Improvement: Usability analysis, performance monitoring, troubleshooting, developing new features.
Security & Fraud Prevention: Monitoring, logs, cybersecurity measures, enforcement of Terms of Use.
Operational & Marketing Communication: System messages, service updates, changes; promotional content subject to consent and applicable law.
Legal & Regulatory Compliance.
Aggregated/Anonymous Data: Creating and using statistics that cannot reasonably identify individuals.
Controller vs. Processor
For Customer/Account Holder data and Company Site visitors, we act as the Data Controller.
For Customer Site visitors, the Customer (Website Owner) is the Data Controller of the data collected on their site; we provide the infrastructure and may act as a Processor on their behalf.
Customers must publish a privacy policy on their site, implement cookie/consent mechanisms as required, and handle data subject requests in compliance with applicable law. We provide templates/tools, but the Customer is fully responsible for implementation.
Who We Share Information With
Service Providers: Data processing, hosting, cloud, CDN, payment, mailing, security, analytics, support, consulting, artificial intelligence model providers, generative AI providers, AI API providers, AI infrastructure providers, and other technology providers – limited to what is reasonably necessary for the applicable service and subject to appropriate contractual, data processing, confidentiality, and security arrangements.
Third Parties Connected by the Customer: Pixels/Analytics/CRM/payment providers, per Customer settings and authorization.
Authorities: If required by law or necessary to protect rights and safety.
Group Companies / M&A Events: In the event of a change of control or merger, subject to notice and safeguards.
With Consent: In all other cases, only with explicit consent. We may share anonymized/aggregated data that cannot identify individuals.
Data Location & Retention
Location: Israel and/or abroad (including EEA/US), with us and/or our service providers, subject to appropriate safeguards ensuring a level of protection not lower than Israeli law.
Retention: As long as necessary for the purposes outlined above and in accordance with legal/record-keeping obligations. Afterwards, data will be deleted or anonymized.
Cookies & Similar Technologies
We and Customer Sites (depending on Customer settings) use cookies/pixels/identifiers for operation, performance, security, analytics, and marketing. Preferences may be managed through browser settings or cookie banners (if enabled), but full blocking may impair functionality. See our Cookie Policy for details.
AI Tools and AI-Assisted Support
The Services may include tools, features, functionalities, and support services that are powered in whole or in part by artificial intelligence, machine learning, large language models, generative AI systems, or similar automated technologies (“AI Services”).
AI Services may be used, among other things, to generate, create, build, edit, configure, optimize, analyze, or suggest content, websites, applications, digital products, services, projects, workflows, designs, images, code, configurations, functionalities, and other digital experiences or outputs. AI Services may also be used to provide support, assistance, onboarding, guidance, recommendations, troubleshooting, and other services relating to the use of the Platform and our products and services (“AI-Assisted Support”).
Information We Process in Connection with AI Services
When you use AI Services, we may collect and process information relating to your interaction with those Services, including prompts, questions, messages, conversations, instructions, responses, generated outputs, actions, feedback, files, images, documents, and other content or materials you submit, provide, create, or exchange through the AI Services, together with technical, usage, and interaction data relating to such use.
Where you are logged into your account, and where reasonably necessary in order to provide a relevant, contextual, personalized, or useful response, functionality, recommendation, or assistance, our AI Services may access, retrieve, scan, analyze, and process information available within or associated with your account and your use of the Services.
Depending on the applicable functionality and context, such information may include information relating to websites, applications, digital products, services, projects, workflows, content, generated materials, structures, settings, configurations, integrations, active products or services, features and tools used, account activity and usage information, technical information, and previous requests or interactions with our support services.
How We Use Information in Connection with AI Services
We may use information processed in connection with AI Services in order to provide the requested service or functionality; understand your request and its context; provide support, assistance, guidance, onboarding, and troubleshooting; and assist with creating, building, configuring, managing, editing, operating, improving, or optimizing websites, applications, digital products, services, projects, workflows, content, features, and other experiences made available through or created using the Platform.
We may also use such information to personalize or improve the relevance of responses and recommendations and to suggest features, tools, configurations, products, services, upgrades, or other solutions offered by us that we believe may be relevant to your needs or your use of the Platform.
In addition, information and usage data relating to AI Services may be used for security and abuse prevention, quality assurance, troubleshooting, performance measurement, evaluating the effectiveness of our AI and support systems, identifying usage patterns and trends, generating statistics and insights, and improving, developing, testing, and optimizing the Platform, our AI Services, support services, products, features, and user experience.
Where reasonably possible and appropriate for the relevant purpose, we may perform such analysis and improvement activities using aggregated, anonymized, de-identified, or otherwise non-identifiable information.
Interactions with AI Services may, where appropriate, also be reviewed by authorized personnel or authorized service providers acting on our behalf for purposes such as customer support, quality assurance, security, abuse prevention, troubleshooting, testing, and service improvement.
Third-Party AI and Technology Providers
We may use third-party artificial intelligence providers, model providers, generative AI providers, API providers, cloud providers, infrastructure providers, and other technology and service providers in order to provide or operate AI Services.
Where we use such providers, information reasonably necessary to process a request, generate a response or output, perform an AI-powered action, or provide the applicable functionality may be transmitted to and processed by such providers on our behalf, subject to appropriate contractual, data processing, confidentiality, and security arrangements and the other provisions of this Privacy Policy.
AI Model Training and Service Improvement
Personal Information collected or processed in connection with AI Services will not be used to train general-purpose artificial intelligence models unless otherwise expressly disclosed to you and permitted under applicable law.
This does not prevent us from using aggregated, anonymized, de-identified, or otherwise non-identifiable information, or non-identifiable usage data, statistics, feedback, performance data, and insights, for purposes including measurement, analysis, evaluation, testing, development, improvement, and optimization of our AI Services, support services, products, features, and other Services.
Data Retention and Security
Information processed in connection with AI Services will be retained in accordance with the retention periods and principles described in this Privacy Policy and as reasonably necessary for purposes including providing the Services, maintaining service continuity, handling support requests, security, abuse prevention, troubleshooting, quality assurance, service improvement, and compliance with applicable legal obligations.
Information processed through AI Services is subject to the security measures and safeguards described elsewhere in this Privacy Policy.
Information Relating to End Users and Third Parties
If you provide, make available, or permit AI Services to process Personal Information relating to your customers, visitors, users, end users, employees, contractors, or other third parties, you are responsible for ensuring that you have all rights, permissions, consents, notices, and other legal bases required to permit such processing under applicable law.
Where we process such information on your behalf in connection with the Services, our respective roles as Data Controller and/or Data Processor, as applicable, will be determined in accordance with this Privacy Policy, our applicable agreements, and applicable law.
AI-Generated Responses and Outputs
AI Services and their outputs are provided for assistance and convenience. AI-generated responses, recommendations, suggestions, content, or other outputs may be incomplete, inaccurate, outdated, unreliable, or inappropriate for a particular purpose. Customers are responsible for reviewing, verifying, and adapting AI-generated outputs before relying upon, publishing, implementing, or otherwise using them
Communications
Service/Operational Notices: Sent as needed (changes, billing, security). Some are mandatory and cannot be opted out.
Marketing: Subject to consent and applicable law; opt-out available at any time.
Support: Inquiries, chats, calls, and emails may be logged for documentation and service improvement.
Data Security
We apply reasonable and industry-standard organizational and technical measures (encryption, access controls, monitoring, logical separation, backups) to reduce risks of unauthorized access, loss, or misuse. However, absolute protection cannot be guaranteed.
Data Subject Rights
Subject to applicable law (including Israel’s Amendment 13 to the Privacy Protection Law and GDPR), you may have rights such as: access, rectification, deletion, restriction of processing, data portability, and objection to direct marketing.
Requests should be sent to privacy@site123.com. We will verify identity and respond within legally required timeframes.
Where we process data on behalf of a Customer (Customer Site), we will direct the request to the Customer as Data Controller.
Minors
The Services are not intended for children under 18. We do not knowingly collect data about minors. If discovered, we will block or delete such data in accordance with law.
Third-Party Links & Services
Company Sites and Customer Sites may include links, scripts, or services from third parties. We are not responsible for their policies or practices. Use of such services is subject to the third party’s privacy policy.
Website Owner Responsibilities
You are responsible for reviewing the legal requirements applicable to your activities and consulting with relevant professionals.
A Customer (Website Owner) is generally the Data Controller of data collected on their site. They must:
Publish a tailored privacy policy.
Implement cookie/consent mechanisms.
Obtain proper consents (e.g., forms/newsletters).
Respond to data subject requests.
We provide templates and tools, but are not responsible for wording or implementation. You may be deemed a “Database Owner” or “Data Controller” under law. This section is general guidance only; you must seek professional advice and adapt your documents, settings, and processes accordingly before publishing your site.
Updates to this Policy
We may update this Policy from time to time. The latest version will be published on our sites. For material changes, we will notify you through a reasonable channel. Continued use after updates constitutes acceptance of the revised Policy.
Contact
Data Protection Officer Email: privacy@site123.com