PRIVACY POLICY

Last updated: [EFFECTIVE DATE]

This policy explains what personal information [COMPANY LEGAL NAME] ("WildFire", "we", "us") collects, how we use and share it, and the choices you have. It covers this website, the accounts of businesses that use WildFire, our website builder and AI editor, the websites we host for our customers, and our add-ons. Our Terms and Conditions cover the rest of our relationship with customers.

1. Who this policy is about

Customers: the businesses that sign up for WildFire, and the people who sign in to their accounts.
Visitors to this website: anyone browsing wildfiresites.com.
Visitors to our customers' websites: people who visit a website we host, or send a message through its contact form. For that information, our customer decides why it's collected and we handle it on their behalf (see section 5).

2. What we collect

Information you give us

Account details: your name, business name, email address, phone number, the domain you want to use, and your password (stored only as a secure hash). If you turn on two-factor sign-in, we store the key your authenticator app uses.
Your website: the text, photos, logos, business details and answers you give us to build and run your website, and anything you or our staff add with our tools.
Requests to the AI editor: what you ask it to do, and the changes it suggests.
Messages to us: what you tell us by email, phone or through our forms.

Billing information

Payments are handled by Stripe. We never see or store your full card number. We keep the information Stripe gives us to manage your subscription: your customer and subscription references, your plan, payment status, and invoices.

Information collected automatically

Sign-in and security records: when you sign in, we record the time, your IP address and your browser type, and we keep a log of important account actions, such as password changes and billing changes, to protect your account and investigate problems.
Server logs: like most websites, our servers record each request, including the IP address, the page requested, the browser type and the time. We use these logs to run, secure and fix the services and to limit abuse.

3. Cookies

When you sign in, we set one cookie that keeps you signed in. It's essential, and it's never used for advertising or tracking. We don't use advertising or analytics cookies on our signed-in pages. Some pages of this website show videos from Vimeo or YouTube, which may set their own cookies when you play them. Their privacy policies apply to those.

4. How we use information

To provide the services: build, host and edit your website, run your account, process payments and deliver any add-ons you buy.
To communicate with you: about your account, billing, your website, security and changes to our services or these policies.
To keep the services safe: prevent fraud, spam and abuse, enforce our terms, and check content against our rules.
To improve the services: understand what's working and fix problems.
To meet our legal obligations, such as tax and accounting records.

We don't sell personal information, and we don't share it for targeted advertising.

5. Your customers' information: contact forms and websites we host

When someone sends a message through a contact form on a website we host, we pass it to the business that owns the website by email. We don't keep the message itself after it's sent. We keep only counts of how many messages each website received, without their content, to show the business and to detect spam. Contact forms are for contact details and a short message only. They're not designed for health, medical, payment or other sensitive information.

For these visitors, our customer is responsible for its own privacy notice, and we process their information on our customer's behalf and according to its instructions. If you sent a message to one of our customers and want to ask about it, please contact that business directly.

6. Google account data (the SEO add-on)

If a business buys our local SEO add-on, it may connect its Google Search Console and Google Analytics accounts, or give us read-only access to them. We use that access only to read reporting figures, such as search impressions, clicks and website visits, for the business's own website, so we can measure our work and report on it to that business. We request read-only access, we don't change anything in those accounts, and the business can remove our access at any time from its Google account.

WildFire's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, we don't use it to train AI models, and we don't let people read it except where the business asks us to, for security, or to comply with the law.

7. Who we share information with

We share personal information only with service providers who help us run WildFire, under contracts that limit how they can use it, and only as much as they need:

Stripe, for payments and billing.
Anthropic, to answer requests to the AI editor. We send it your request and the relevant parts of your website.
Resend, to send our emails and contact-form messages.
DigitalOcean, which hosts our servers and stores your website's files.
Neon, which hosts our database.
Slack, where our staff receive notices about signups and account changes.
Google, only if you use the SEO add-on's Google connections (section 6).

We may also share information if the law requires it, to protect the rights, safety and property of WildFire, our customers or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to it.

8. How long we keep information

Account and billing information: while your account is open, and afterwards as long as we need it for legal, tax and accounting reasons.
Your website: while your subscription is active. If your website goes offline because you cancelled or didn't pay, we keep its files for up to 12 months, then may permanently delete them. We'll warn you first.
Sign-in sessions: until you sign out or the session expires.
Server logs and security records: for [LOG RETENTION PERIOD], unless we need them longer to investigate a problem.
Backups expire on their normal schedule.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords, optional two-factor sign-in, access limited to staff who need it, and records of important actions. No system is perfectly secure, so please use a strong password and tell us straight away if you think your account has been misused.

10. Your choices and rights

You can see and update most of your account information on your account page, and you can cancel at any time. You can also ask us to give you a copy of your personal information, correct it, or delete it. Depending on where you live, you may have other rights under the law, including the right not to be discriminated against for using them. To make a request, contact us using the details below. We may need to confirm your identity first, and we'll respond within the time the law requires.

If we send you marketing emails, you can opt out at any time with the unsubscribe link in them. We'll still send you messages about your account and billing.

11. Children

WildFire is for businesses and isn't directed at children. We don't knowingly collect personal information from anyone under 13. If you think a child has given us information, contact us and we'll delete it.

12. Where information is processed

WildFire is based in the United States, and we and our service providers process information in the United States and possibly other countries. By using the services, you understand that your information may be processed there.

13. Changes to this policy

We may update this policy. We'll post the new version here with a new date and, for material changes, tell customers by email before they take effect.

14. Contact

[COMPANY LEGAL NAME]
[POSTAL ADDRESS]
Email: [PRIVACY CONTACT EMAIL]
Phone: 385-225-9364