Privacy Policy

This policy explains what information MySiteHandled.com collects, why, and what choices you have. MySiteHandled.com is operated by Flipvo LLC ("we," "us," "our"), based in Melbourne, Florida. We've kept it short and honest — we collect what we need to run the service and nothing we don't.

Information we collect

Information you give us. When you start a site or contact us, you submit details through our brief and contact form — things like your name, email, business name, website, and what you're looking for. If you become a client, we also keep the business details and content needed to build and maintain your site.

Payment information. Billing is handled by Stripe. You enter your card details directly with Stripe, and they process the payment. We never see or store your full card number — we only receive confirmation and basic billing status.

Information collected automatically. With your consent (via the cookie banner), we use analytics (Google Analytics 4) to understand how this site is used — pages viewed, rough location, device and browser type — and marketing measurement (the Meta Pixel and Meta's Conversions API) to understand which of our ads lead to inquiries and sign-ups. When we report a conversion to Meta, contact details like your email or phone number are hashed (one-way, irreversibly) before they're sent, per Meta's matching spec. None of these tools load or set cookies until you accept the banner, and we don't sell this information.

How we use your information

We use your information to respond to your inquiry, build and host your site, provide support, process billing, keep the service secure, and improve what we offer. We send service-related messages (for example, about your project or your account); we don't send marketing email you didn't ask for.

Text messages (SMS)

If you opt in, we send SMS lead notifications to you — the business owner — when a new customer inquiry comes in for your site. The text includes the lead's name, phone, email, and a short message snippet. We do not text the people who fill out your forms, and our texts do not include links. Message frequency varies with how many inquiries you receive. Message and data rates may apply.

Reply HELP for help, or STOP to cancel. Opt-outs are honored immediately.

How consent is given. You can opt in five ways:

1. Our public SMS consent form
2. The optional checkbox on start your site (only required if you enter a mobile number — checkout itself does not require SMS)
3. The optional checkbox when you create an account (unchecked by default — signing up does not require it)
4. The SMS toggle on your account page after you're logged in
5. When our staff record consent you already gave offline (for example on a call or in person), with your permission

What we keep as evidence of consent. For every opt-in we store the phone number and the time of consent. For web opt-ins (the public form, start-your- site, registration, and account toggle) we also store the IP address the request came from. A verbatim snapshot of the disclosure wording is stored for the portal account toggle; staff-recorded offline opt-ins store who on our team recorded it, how consent was obtained (for example verbal, in person, email, or text), and the attestation they confirmed. We keep this so we can show we had your permission if asked.

How to withdraw. Reply STOP to any of our texts, turn the toggle off on your account page (before we activate texts, that removes your number), or email us through our contact page and we'll switch them off.

We do not sell, rent, or share mobile numbers or SMS consent. Mobile phone numbers and SMS consent are never sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. Numbers are shared only with our messaging provider (Twilio) for the sole purpose of delivering the messages you asked for.

Who we share it with

We don't sell your personal information. We share it only with the service providers we need to run the business — for example cloud hosting, Stripe for payments, our email provider, Twilio for SMS delivery (only the number and message content needed to send a text you opted into), Google Analytics, and Meta (for the ad measurement described above, with contact details hashed) — and only as needed for them to do their job. We may also disclose information if required by law or to protect our rights.

Mobile numbers and SMS consent are not sold, rented, or shared with third parties or affiliates for their marketing — same rule as in the Text messages (SMS) section above.

Cookies and analytics

This site uses a small number of cookies for basic functionality, analytics, and marketing measurement. Analytics and marketing cookies (Google Analytics, the Meta Pixel) load only after you accept our cookie-consent banner — nothing is set before you say yes. You can also control cookies through your browser settings, opt out of Google Analytics with Google's opt-out browser add-on, and manage how Meta uses ad data via your Facebook ad preferences.

Data retention

We keep your information for as long as you're a client and as long as needed for the purposes above — for example, to provide the service, meet legal and tax obligations, and resolve disputes. We don't delete these records automatically on a schedule today; if you ask us to, we delete what we're not required to keep.

Your choices

You can ask us to access, correct, or delete the personal information we hold about you, and you can opt out of analytics as described above. To make a request, reach us through our contact page. We'll respond within a reasonable time.

If you're in the EEA or the UK (GDPR and UK GDPR)

We work with businesses anywhere in the world. If you're in the European Economic Area or the United Kingdom, the GDPR or the UK GDPR gives you the rights below, and this section explains how we meet them.

Who is responsible for your data. The controller of your personal information is Flipvo LLC, which operates MySiteHandled.com. For any privacy question or request, email privacy@mysitehandled.com.

Why we're allowed to use it (lawful bases).

• To perform our contract with you, or to take steps you asked for before one: replying to your inquiry, building, hosting and maintaining your site, running your account, and billing you.
• To meet legal obligations, such as keeping tax and accounting records.
• Our legitimate interests in running a secure, working business: keeping the service secure, filtering spam and abuse, finding and fixing errors, and sending service messages about your project or account. You can object to any of these (see below).
• Your consent: analytics and marketing cookies (Google Analytics, the Meta Pixel), reporting an inquiry you send us or a purchase you make to Meta (with your email hashed) so we can measure which of our ads work, and SMS lead notifications. You can withdraw consent at any time: use the Cookie preferences link at the bottom of any page, or see the Text messages (SMS) section above. Withdrawing doesn't affect what we did before you withdrew.

You don't have to give us your information, but we need your contact and business details to reply to you and to build your site, and billing details to bill you.

Information we handle for our clients. When we pass on an inquiry that someone sent through one of our clients' websites (for example, an SMS lead notification to the business owner, or a spam check on the message), we're handling that information on our client's behalf and on their instructions. If you sent an inquiry to one of our clients, contact that business about your data, and we'll help them respond.

Where your data goes (international transfers). We're a US company and the service runs in the United States: our servers, database and file storage are hosted by Amazon Web Services in its US East (Ohio) region. If you're in the EEA or the UK, your information is transferred to and processed in the US. These are the service providers that process personal information for us:

• Amazon Web Services: hosting, database and file storage
• Stripe: payments and billing
• Resend: sending and receiving our email
• Sentry: error monitoring (configured not to send request bodies)
• Google: Google Analytics, only after you accept cookies
• Meta: ad measurement, as described above
• Twilio: SMS lead notifications, only if you opt in
• Retell AI: our published phone line is answered by an AI receptionist run by Retell. If you call us, your phone number, the audio of the call, and a transcript and summary of it are processed by Retell in the US
• Anthropic: spam screening on the websites we run for clients. Where it is switched on, a message sent through a client site's contact form is checked by Anthropic's AI model to decide whether it is spam, together with the sender's name, email address and phone number. Whether or not Anthropic's model is used, we keep each message sent through a client site's contact form or mailbox, with the sender's name and email address and the subject, for 30 days. Our staff can read it during that time, so we can see what was held as spam and put right a wrong call. A daily clean-up deletes it after that

Each of these providers processes this information under its published data processing terms, which include the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum.

Our team's inbox is a Google Gmail account. Copies of the inquiries, emails and billing notices we handle are delivered there, so Google also stores them in the US, under Google's own terms.

How long we keep it.

• Inquiries and client records: while you're a client, and afterward for as long as the law requires (for example, tax and accounting records) or as we need to resolve a dispute. We don't delete these records automatically on a schedule today, and that includes inquiries that didn't lead to working together, so they stay until you ask us to delete them. When you ask, we delete everything we're not required to keep.
• Backups: our database is backed up nightly, and those routine backups are deleted automatically after 90 days. Information we delete from our live systems can remain in a backup until that backup expires.
• Error reports sent to Sentry are deleted within 90 days.
• Server logs, which include IP addresses, are deleted after about 30 days.
• Our internal audit log of account and billing actions is deleted after one year, apart from a few entries we keep as billing and account records.
• Stripe and our other providers keep their own records under their own policies. For example, Stripe keeps payment records it is legally required to keep.

Your rights. You have the right to:

• access the personal information we hold about you and get a copy of it
• rectification: have inaccurate information corrected
• erasure: have your information deleted
• restriction: ask us to limit how we use your information
• portability: receive the information you gave us in a structured, machine-readable format, or have it sent to another company
• objection: object to our using your information based on our legitimate interests
• withdraw consent at any time, where we rely on it
• complain to a supervisory authority: the data protection authority where you live or work, or, in the UK, the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort out your concern first.

How to exercise your rights. Email privacy@mysitehandled.com or use our contact page. We may need to confirm your identity before we act on a request. We don't charge for it, and we'll respond within one month. If a request is complex and needs more time, we'll tell you why within that first month.

Security

We take reasonable measures to protect your information, and we rely on established providers (such as Stripe and our hosting platform) that maintain their own security programs. No method of transmission or storage is perfectly secure, but we work to keep your data safe.

Children

The service is intended for businesses and isn't directed to children under 13, and we don't knowingly collect information from them.

Changes to this policy

We may update this policy as the service grows. When we make a material change, we'll update the date above. Please check back from time to time.

Contact

Questions about your privacy? Reach us through our contact page.