Privacy Policy

WebsitesForFree ("we", "us", "our") is a website design and hosting service for local businesses, operated at websitesforfree.net. We build professional websites for free and charge $15/month for ongoing hosting and support.

If you have any questions about this policy, contact us at [email protected].

We collect information you provide directly to us:

• Account information — email address and password when you create an account.
• Business information — business name, type, description, address, phone number, services, and social media links you submit through our intake form.
• Billing information — payment details processed securely by Stripe. We never store your card number.
• Files and assets — any photos or files you upload for use on your website.
• Communications — messages you send us through the platform or by email.

We also automatically collect basic usage data (pages visited, browser type, IP address) via our hosting provider for security and performance purposes.

• To build and host your website.
• To communicate with you about your project and account.
• To process payments and manage your subscription.
• To send transactional emails (status updates, receipts, support replies).
• To improve our service and fix issues.

We do not sell your personal information. We do not use your data for advertising.

We use the following third-party services to operate our platform. Each has its own privacy policy:

• Supabase — database and authentication.
• Stripe — payment processing.
• Vercel — website hosting and infrastructure.
• Resend — transactional email delivery.
• Google Maps — address autocomplete in the intake form.

We retain your account and project data for as long as your account is active. If you cancel your subscription or request deletion, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g. payment records).

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.

To exercise any of these rights, email us at [email protected].

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

We use industry-standard security practices including HTTPS encryption, secure authentication via Supabase, and payment processing via Stripe (PCI-compliant). No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

Our service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the site. Continued use of the service after changes constitutes acceptance of the updated policy.