Privacy Policy

NoSite ("we") is operated by nosite.app. NoSite is a marketplace that helps web professionals find small businesses that do not yet have a website. This policy explains what personal data we process, why, and the choices you have.

Account data. Your email address, an optional name, and a hashed password - or, if you sign in with Google, the email, name and profile picture Google shares with us. We use these to create and secure your account.

Usage data. Which leads you reveal or claim, your outreach notes and status flags, credit purchases and spend. This is the service itself: it lets you see your contacts and lets us charge each reveal exactly once.

Payments. Credit packs are paid through PayPal. We receive a transaction identifier and the pack purchased; we never see or store your card or bank details.

Technical data. A sign-in token is stored in your browser's local storage so you stay logged in. Our servers keep standard access logs (IP address, timestamp, requested page) for security and debugging.

Analytics (Microsoft Clarity). We use Microsoft Clarity to understand how people use the site: it records page interactions (clicks, scrolling, mouse movement), produces heatmaps and session replays, and sets first- and third-party cookies. We configure it to mask the contact details of listed businesses and everything you type into forms, so that information does not appear in recordings. Microsoft processes this data under its privacy statement; we use it only to improve the product. We do not run advertising trackers.

The leads in NoSite are small businesses whose public profiles indicate they have no website. We collect only information those businesses have made public - a public Instagram bio, business name, category, publicly listed phone number or email, location, and public posts - from Instagram and Google Maps. We do not collect private messages, private accounts, or non-public data.

We process this information with automated tools, including AI models, to judge whether a profile is a business, what it does, and where it is. Contact details are shown only to registered users who spend a credit to reveal them, and only for the purpose of offering the business web-development services.

If you are a business owner and want your listing corrected or removed, email nosite.app@gmail.com with your profile link. We remove listings on request and block them from being re-collected.

PayPal (payments); Google (Sign in with Google; Gemini models for classifying public business profiles); Mistral AI and OpenAI (the same classification and for drafting outreach messages); Microsoft (Clarity analytics); our hosting provider. Each processes data only to provide its service to us. Public business profile text is sent to AI providers; your account data is not.

Account and usage data are kept while your account is active and for up to 12 months after closure, unless a longer period is required for tax or payment records. Business listings are kept while they meet our inclusion rule (no website) and are removed on request.

You can access, correct or delete your account data, and export the contacts you have revealed, by emailing nosite.app@gmail.com. Where data-protection law applies to you (for example the GDPR), you also have the rights to restrict or object to processing and to lodge a complaint with your supervisory authority.

Passwords are stored hashed (bcrypt). Contact details are gated server-side and never sent to a browser that has not paid to reveal them. Access to production systems is limited to the operator.

NoSite is a business tool and is not directed at anyone under 18. We do not knowingly collect data from minors.

We will post any changes here with a new effective date. Material changes will also be announced in the app.