Privacy Policy

Overview

SiteCAD is built by Digithought LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the SiteCAD application and related services (the "Service").

We believe in transparency and minimal data collection. We collect only what's necessary to provide the Service and improve your experience.

Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your email address and any profile information you choose to provide.
• Site Data: The sites, scenarios, and entities you create within SiteCAD. This data is stored locally by default and synced to our servers only if you enable cloud sync.
• Support Communications: If you contact us for support, we retain the content of your communications to assist you and improve our Service.
• Feedback: Any feedback, suggestions, or bug reports you submit through the feedback widget or other channels.

Information Collected Automatically

• Usage Data: We collect anonymized information about how you use the Service, including features accessed, actions taken, navigation paths, and session duration. This helps us understand usage patterns and improve the product.
• Error Data: When errors occur, we automatically capture technical information (browser, OS, stack trace) to diagnose and fix problems.
• Device Information: Basic information about your device and browser, such as screen resolution, viewport size, browser version, connection type, and memory usage.
• Referral Data: The referring URL (if any) and marketing campaign parameters (UTM tags) that brought you to SiteCAD.

Information From Visitors of Published Sites

If you publish a site as a shareable viewer, we collect anonymized visit data on that site and make aggregate statistics available to the publisher: visit counts, session duration, and general engagement signals. Visitors may also submit feedback comments tied to the published site; these comments and any contact details they voluntarily provide are visible to the publisher. We do not attempt to identify end visitors beyond what they choose to share in a feedback submission.

Publisher compliance responsibility. When you publish a site, you — the publisher — are responsible for providing any privacy notices, cookie disclosures, consent banners, and data-handling information required by the laws that apply to your audience (for example, GDPR, ePrivacy, CCPA, children's-privacy laws). Our collection of viewer analytics and feedback does not substitute for your own compliance obligations to your visitors. See the Terms of Service for the full allocation of compliance responsibility.

AI Assistant & Agent Data

When you use AI features, your prompts and the context needed to answer them (selected entities, relevant scene snippets, recent chat history) are transmitted to third-party LLM providers to generate a response. We do not use your prompts or site content to train AI models, and our current providers contractually commit not to train on your data. We log AI usage volume and errors for billing, rate limiting, and abuse prevention.

Information We Do Not Collect

• We do not use third-party tracking cookies
• We do not sell or share your data with advertisers
• We do not track your activity across other websites

How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your transactions and manage your subscription
• Respond to your support requests and communications
• Send essential service notifications (account security, billing, major updates)
• Analyze usage patterns to improve the product (in aggregate, not individually)
• Detect and prevent fraud, abuse, or security incidents

Data Storage and Security

Local-First Architecture

SiteCAD uses a local-first architecture. Your site data is stored primarily in your browser's IndexedDB storage. This means:

• Your data works offline
• Your data never leaves your device unless you enable cloud sync
• You can use SiteCAD without creating an account

Cloud Sync (Optional)

If you enable cloud sync, your site data is transmitted to and stored on our servers. This data is:

• Encrypted in transit (TLS 1.3)
• Encrypted at rest (AES-256)
• Stored in secure data centers with access controls
• Backed up regularly to prevent data loss

Data Retention

• Account data: Retained until you delete your account
• Site data: Retained until you delete it or your account
• Support communications: Retained for up to 3 years
• Usage analytics: Aggregated data retained indefinitely; individual session data deleted after 90 days

Data Sharing

We do not sell your personal information. We may share data only in these circumstances:

• Service Providers: We use third-party services for payment processing (Stripe), email delivery, infrastructure hosting, and LLM model providers (for AI assistant and agent features — see "AI Assistant & Agent Data" above). These providers access only the minimum data necessary to perform their functions.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation.
• Business Transfers: If Digithought is acquired or merged, your information may be transferred to the new owner. We will notify you of any such change.

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your site data in standard formats at any time
• Opt-out: Disable analytics tracking (see below)

To exercise these rights, contact us at privacy@sitecad.com or use the data management options in your account settings.

Analytics Preferences

You can control whether SiteCAD collects anonymized usage data to help us improve the product. This setting is stored locally in your browser and applies to this device only.

Note: Even with analytics enabled, we never collect the content of your sites, your geographic location, or any personally identifiable information. We collect feature usage patterns, navigation paths, and technical diagnostics (device info, connection type, memory usage) to understand which tools are most useful and to diagnose performance issues.

Regional Compliance

European Users (GDPR)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to data portability and the right to lodge a complaint with your local data protection authority.

Our legal basis for processing your data is: (1) contract performance (providing the Service), (2) legitimate interests (improving the Service, preventing fraud), and (3) your consent where specifically requested.

California Users (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

Children's Privacy

SiteCAD is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the Service or sending you an email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: