Last updated: May 28, 2026
SiteBrief is an AI-powered website operations platform for digital agencies. We are the data controller for personal data collected through our service available at sitebrief.net.
Contact: privacy@sitebrief.net
Email address, name, company name — collected when you register. Used to authenticate you and communicate about your account.
URLs, domain names, SSL certificates, and monitoring check results you configure. This data is necessary to provide the core service.
Email addresses of people who subscribe to your public status page. These are collected with explicit consent (double opt-in) and can be unsubscribed at any time.
When you connect a GitHub or GitLab account to use DevLab, we store an OAuth access token and the names of repositories you explicitly link. We use this token to read specific configuration files (e.g. netlify.toml, .htaccess) and open fix pull requests on your behalf. No repository code is sent to any third-party AI service.
Competitor URLs you add and publicly available content scraped from those URLs — used to generate AI-powered competitive briefs. Only publicly accessible pages are fetched. This data is sent to our AI provider (Anthropic) for analysis and is not stored beyond the session.
IP address, browser type, and usage logs — collected automatically for security and to improve the service. Retained for 30 days.
Our database is hosted on Supabase in the eu-west-1 (Ireland) region. We do not transfer personal data outside the EU/EEA without appropriate safeguards.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU (Ireland) |
| Resend | Transactional email alerts | EU/US (SCCs) |
| Netlify | Application hosting | US (SCCs) |
| ScreenshotOne | Screenshots on downtime | EU/US |
| Anthropic | AI analysis (insights, competitor briefs, health summaries) | US (SCCs) |
SCCs = Standard Contractual Clauses (EU-approved transfer mechanism).
To exercise any of these rights, email us at privacy@sitebrief.net. We will respond within 30 days.
We use only essential cookies required for authentication (session token) and user preferences (theme, language). We do not use advertising or tracking cookies. No third-party analytics scripts are loaded.
All data is encrypted in transit (TLS 1.2+) and at rest. Access to production data is restricted to authorised personnel only. We use Row Level Security (RLS) in our database to ensure users can only access their own data.
We may update this policy from time to time. We will notify registered users by email if changes are material. The date at the top of this page reflects the latest revision.
For privacy questions: privacy@sitebrief.net
If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In Ireland: dataprotection.ie