Privacy Policy.

Short version: we collect what we need to build your site, take your payment, send you email, and keep the lights on. We don't sell your data. We don't share it with advertisers. If you ever want to see what we have or delete it, just ask.

1. Who we are

yoursiteisdone is a website-building service operated by Atlas Unchained, based in Yorba Linda, California. In this policy “yoursiteisdone,” “we,” “us,” and “our” mean the same thing. “You” means the person reading this — whether you're a customer, a prospective customer, someone we contacted with a sample site, or just a curious visitor to our website.

This policy covers information we collect through yoursiteisdone.com, through our intake forms, through our email and SMS correspondence, through our payment processor, and through any website we build and host for you. It does not cover websites or services run by other companies, even if we link to them.

2. What we collect, and when

We try to collect the smallest amount of information that lets us actually do our job. There are two ways we get information about you.

Information you give us directly

• Account & intake information. Business name, owner or contact name, email address, phone number, business address, industry, and the answers you give in our intake form (the kind of business you run, who your customers are, your color and tone preferences, page choices, and so on).
• Site content. The text, photos, logos, menus, customer reviews, product information, hours, service descriptions, and any other material you send us or ask us to put on your website.
• Billing information. Your payment details (card number, expiration, CVC, billing zip) are collected and stored by Stripe, our payment processor, not by us. We see only the last four digits of the card, the card type, the billing zip, and the transaction history.
• Correspondence. Emails, SMS messages, support requests, and other things you send us when working with our team.

Information we collect automatically

• Site analytics. When you (or your customers) visit yoursiteisdone.com or a website we host for you, we record basic visit data: pages viewed, approximate location (city or region, from IP address), browser type, device type, referring page, and time of visit.
• Server logs. Our hosting infrastructure records standard request logs (IP address, URL requested, response code, timestamp) to operate and protect the Service. These logs help us debug problems and detect abuse.
• Error and performance monitoring. If something breaks on a page, we record the technical details (which page, which browser, what the error was) so we can fix it. This may include the URL of the page and a few lines of context, but not the contents of any form you were filling out.
• Cookies and similar technologies. See section 6.

Information we collect from public sources (cold outreach)

This one is important enough to call out by name.

Part of how we get new customers is by building sample websites for local businesses we haven't met yet, and then emailing the owner a preview. To do that, we look at publicly available information — Google Maps and Yelp listings, public business directories, the business's existing website if it has one, and similar public sources — to pull together things like business name, industry, city, phone number, public email address, a few photos already on the listing, and a sense of what the business does. We use this to draft a sample site and to address the email.

If you came to yoursiteisdone because we contacted you first: nothing in your sample site came from anywhere private. We didn't buy a list of your customers. We don't have your supplier information, your employee details, your private documents, or anything else that wasn't already on the public internet for anyone to see. If you'd like the sample taken down, or you'd like to opt out of future contact, email hello@yoursiteisdone.com and we'll handle it within one business day. Every cold email we send also includes a one-click unsubscribe link as required by the U.S. CAN-SPAM Act.

3. How we use what we collect

We use the information described above to:

• Build, launch, host, and maintain your website.
• Process your payments and send invoices and receipts.
• Communicate with you about your account, your site, edits you've requested, and changes to the Service.
• Send you occasional updates about new features or related services we think you'd want to know about. You can unsubscribe at any time using the link in any such email.
• For prospective customers we've contacted with a sample site: follow up about the sample and answer questions about our service.
• Detect, prevent, and respond to fraud, abuse, security incidents, and policy violations.
• Improve the Service — the intake form, the build process, the templates we draw from, the kind of sites we offer.
• Comply with the law and respond to lawful requests from authorities.

We do not use Your Content to train general-purpose AI models, sell to data brokers, or build advertising profiles on you or your customers.

4. Who we share it with

We share information with a small number of service providers who help us run the business. These providers only get the information they need to do their specific job, and they're contractually required to protect it and use it only on our behalf.

The main categories of service providers we use:

• Payment processing. Stripe handles all card payments, subscription billing, and stored payment methods. Stripe's privacy policy applies to information you give them: stripe.com/privacy.
• Hosting infrastructure. Our hosting providers store and serve the websites we build, including yoursiteisdone.com itself.
• Email and CRM tools. We use email and customer-relationship tools (currently including GoHighLevel and Instantly, among others) to send transactional email, manage outreach, and keep track of conversations with customers and prospects.
• Analytics. Privacy-conscious analytics tools that tell us roughly how many people visit a page and where they came from, without tracking individual people across other websites.
• Error and uptime monitoring. Tools that alert us when something breaks or goes down.
• Domain and DNS providers. Companies that handle the technical plumbing of routing your domain to your site.
• Professional advisors. Accountants, lawyers, and similar advisors who help us run the business, under standard confidentiality terms.

We also share information when:

• You tell us to. If you ask us to integrate your site with Mailchimp, Calendly, a CRM, or another tool, we'll send the information needed to make that integration work.
• The law requires it. If we get a valid subpoena, warrant, or other lawful demand, we'll comply. We'll try to give you notice first when we're allowed to.
• We have to protect someone. If we believe sharing information is necessary to investigate fraud, stop a security threat, or protect someone's safety, we may share what's reasonably needed.
• The business changes hands. If yoursiteisdone or Atlas Unchained is acquired, merged, or restructured, information may transfer to the new owner. We'll tell you before that happens.

We do not sell your personal information, and we do not share it with advertisers or data brokers for their own marketing.

5. How long we keep it

We keep your information for as long as you have an active account, and for a reasonable period after that to handle tax records, fraud investigations, and other legitimate business needs. As a rule of thumb:

• Active accounts: for as long as the subscription is active.
• Site content after cancellation: up to 30 days in our active systems, after which we delete it. Encrypted backups may persist for up to 90 days before being overwritten.
• Billing and tax records: at least 7 years, to comply with U.S. tax law.
• Email correspondence: as long as is reasonable for our records, typically up to 7 years.
• Cold outreach records: if you opt out, we keep a record of your email address on a suppression list so we don't contact you again.

6. Cookies and tracking

Our marketing website (yoursiteisdone.com) uses a small number of cookies and similar technologies, mostly for things like remembering whether you've dismissed a notification or keeping track of an intake form in progress. We use privacy-respecting analytics that count visits without building a profile across other websites.

We do not use third-party advertising cookies on yoursiteisdone.com, and we do not allow other companies to use our site to track you across the web. If we ever add a tool that does either of those things, we'll update this policy and tell active customers by email.

The websites we build for customers may use additional tools you choose to add — for example, Google Analytics, Meta Pixel, or a chat widget. If you ask us to install one of those, the privacy practices of those tools apply on top of this policy. We'll let you know in plain English what each one collects.

Most browsers let you control cookies through their settings. Blocking cookies may make parts of the Service work less smoothly.

7. How we keep it safe

We take reasonable steps to protect your information — encrypted connections (HTTPS) on all of our sites, encrypted backups, access controls on internal tools, and a habit of collecting only what we actually need. No system is perfectly secure, though. If we discover a breach that affects your information, we'll notify you and the relevant authorities as required by applicable law.

8. Children

yoursiteisdone is a service for businesses and is not intended for children under 13. We don't knowingly collect information from anyone under 13. If you believe we've collected information from a child under 13, please email us at hello@yoursiteisdone.com and we'll delete it.

9. Your rights

No matter where you live, you can ask us to:

• Tell you what personal information we have about you.
• Correct anything that's wrong.
• Delete information we no longer need to keep (subject to legal exceptions, like tax records).
• Stop sending you marketing email (unsubscribe link in any such email, or just write us).
• Take your content with you when you go — we'll provide a copy in a reasonable format.

To exercise any of these, email hello@yoursiteisdone.com from the address on file. We may ask a couple of questions to confirm it's really you before we make changes. We respond to requests within 45 days.

10. If you live in California (CCPA / CPRA)

If you're a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you some extra rights on top of the ones above. In the past 12 months we have collected the categories of personal information described in section 2 (identifiers, customer records, commercial information, internet activity, geolocation at the city level, and the contents of your communications with us).

As a California resident, you have the right to:

• Know what categories of personal information we've collected about you, what we use it for, and who we've shared it with in the past 12 months.
• Access the specific pieces of personal information we have about you.
• Correct inaccurate personal information.
• Delete personal information we hold about you, subject to legal exceptions.
• Opt out of “sale” or “sharing” of your personal information. We don't sell or share your personal information for cross-context behavioral advertising, so there's nothing to opt out of today, but the right is yours if that ever changes.
• Limit the use of sensitive personal information. We don't use sensitive personal information for any purpose beyond what's strictly necessary to provide the Service.
• Be free from retaliation for exercising these rights. We won't deny you service, charge you a different price, or give you a lower-quality experience for asking.

To make a request, email hello@yoursiteisdone.com with “California Privacy Request” in the subject line. You can also have an authorized agent make a request on your behalf if you give them written permission. We'll verify the request before acting on it, and respond within 45 days (with one possible 45-day extension if the request is complex).

11. Other state privacy laws

If you live in Colorado, Connecticut, Delaware, Iowa, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or another U.S. state with a general privacy law, you generally have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of any sale or targeted advertising. We honor those rights using the same email address above.

12. International visitors

yoursiteisdone is operated from the United States and our servers are in the United States. If you visit us or sign up from outside the U.S., your information will be transferred to and processed in the United States, where privacy laws may be different from the ones where you live. By using the Service, you understand that.

13. Third-party links and integrations

Our website and the sites we build may link to or integrate with services run by other companies (Stripe, Google Maps, Calendly, OpenTable, and so on). When you click through to one of those services or use it on your site, that company's privacy policy applies, not ours. We pick partners we trust, but we don't control what they do.

14. Changes to this policy

We may update this policy from time to time. If we make a material change, we'll email active customers at least 14 days before it takes effect, and update the “Last updated” date at the top of this page. Less significant changes (a clearer sentence, a new service provider listed by name) we'll just publish.

15. How to reach us about privacy

Email is the fastest way. Use “Privacy” in the subject line so it lands with the right person:

hello@yoursiteisdone.com
yoursiteisdone — a product of Atlas Unchained
19454 Via del Caballo
Yorba Linda, CA 92886
United States