Privacy Policy

1. What this covers

This policy explains what information SiteCarePlusPro collects when you use sitecarepluspro.com, why we collect it, and what choices you have. By using the Service you agree to the practices described here. If you do not agree, please don't use the Service.

2. Who controls your data

SiteCarePlusPro is the data controller. Contact: sitecarepluspro@gmail.com.

3. What we collect

• Account data: name, email, company, password (stored hashed), avatar, optional phone.
• Site & access info: the URL of your site and any credentials you choose to share with us so we can do the work (stored encrypted, shown only to authorized staff).
• Work content: tasks you create, files you upload, brand assets, chat messages between you and our team.
• Billing data: handled by Stripe — we store the last 4 digits of the card, card brand, billing address, and transaction references, but never the full card number or CVC.
• Technical data: IP address, browser/user-agent, timestamps of requests, and basic event logs needed to run the platform securely.

4. Why we use it

• To provide the Service (deliver work, send invoices, run the dashboard and chat).
• To bill you and handle refunds via Stripe.
• To notify you about account activity (subscription changes, payment failures, replies to your tasks).
• To investigate and prevent abuse, fraud, and security incidents.
• To comply with legal obligations (tax records, lawful requests from authorities).

We do not sell your data. We do not use it to train third-party AI models. We do not run ad-tech tracking on the platform.

5. Service providers we share with

We rely on a small set of vendors to run the platform. They process data on our behalf under written agreements:

• Stripe — payments and subscription billing.
• DigitalOcean — hosting (United States data center).
• Let's Encrypt — TLS certificates.
• Telegram — internal admin notifications (we send only a summary line, not your content).

6. International transfers

Our servers are located in the United States. If you access the Service from outside the US, you understand that your information will be transferred to and processed in the US. Where required, we use the safeguards offered by our vendors (Stripe SCCs, etc.).

7. How long we keep it

• Account & work data: for the lifetime of your account, plus up to 90 days after you close it (in case of reversal requests, disputes, or audits).
• Billing records: retained as long as US/state tax law requires (typically 7 years).
• Backups: rolling encrypted backups, recycled within 30 days.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email sitecarepluspro@gmail.com from the address tied to your account. We'll respond within 30 days.

9. Security

We use TLS everywhere, hashed passwords (Django default PBKDF2-SHA256), encrypted storage for sensitive credentials, and restrict access to client data to the staff actively working on your account. No system is perfectly secure — if a breach involving your data occurs, we'll notify you without undue delay and as required by law.

10. Cookies

We use only essential cookies: a session cookie to keep you logged in and a CSRF token. We do not use marketing/advertising cookies and do not embed third-party trackers in the dashboard.

11. Children

The Service is not directed to children under 16. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us and we will delete the account.

12. Changes

We may update this policy. Material changes will be announced in-app or by email at least 14 days before they take effect.

13. Contact

Privacy questions or requests: sitecarepluspro@gmail.com.