Privacy Policy

Privacy Policy

Last Updated: March 6, 2026 · Data Controller: Goldenrock LLC

SiteWagon ("we", "us", "our") is operated by Goldenrock LLC, a New Mexico limited liability company. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, create an account, or use our website builder services (collectively, the "Services").

By using the Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

We collect information in the following categories:

1.1 Personal Information You Provide

  • Name, email address, and other contact details when you register, contact support, or subscribe.
  • Billing information (processed securely via authorized payment processors - we do not store full card details).
  • Business name, industry, and preferences during project setup.
  • Any content, text, images, or files you upload to create your website ("Client Content").

1.2 Automatically Collected Information

  • IP address, browser type/version, operating system, device type, language, timezone.
  • Pages visited, time spent, referral sources, and interaction data.
  • Browser fingerprinting (hashed device characteristics) for fraud prevention and security – only after cookie consent.

1.3 Cookies & Similar Technologies

We use essential cookies for functionality, analytics cookies (Google Analytics – anonymized), and marketing cookies (if enabled). You can manage preferences via our cookie banner. Fingerprinting is used only for security/fraud prevention and is hashed + short-lived (30 days max).

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Services (e.g., generate your website, process subscriptions).
  • Communicate with you (support tickets, billing notifications, service updates).
  • Process payments securely via authorized payment processors.
  • Prevent fraud, abuse, and security incidents (including fingerprinting for device recognition).
  • Comply with legal obligations, resolve disputes, and enforce our Terms.
  • Analyze usage trends (aggregated/anonymized data only).

3. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal information. We may share data only in these limited cases:

  • With authorized payment processors solely to process transactions.
  • With service providers (hosting, analytics, email delivery) under strict confidentiality agreements.
  • To comply with legal obligations, court orders, or protect our rights/safety.
  • In the event of a merger, acquisition, or sale of assets (your data would be transferred under equivalent protection).
  • Aggregated/anonymized data for analytics or marketing (never identifiable).

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

After account termination or subscription expiry, we may retain limited data for legal/compliance purposes (typically up to 7 years for billing records).

6. Your Privacy Rights

Depending on your location (especially under GDPR for EU/EEA residents), you may have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure ("Right to be forgotten"): Request deletion (subject to legal retention obligations).
  • Restriction of processing: Limit how we use your data in certain cases.
  • Objection: Object to processing based on legitimate interests.
  • Data portability: Receive your data in a structured format.
  • Withdraw consent: Where processing is consent-based.

To exercise these rights, email support@sitewagon.com with "Privacy Rights Request" in the subject line. We respond within one month (extendable under GDPR).

7. International Data Transfers

Your data may be processed in the United States and other countries where our service providers are located (for example, processor infrastructure in the US/EU).

We ensure appropriate safeguards (e.g., standard contractual clauses, adequacy decisions) for transfers outside the EEA.

8. Children's Privacy

Our Services are not directed to children under 16 (or the relevant age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware of such collection, we will delete it promptly.

9. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices or legal requirements. The updated version will be posted here with a revised "Last Updated" date.

Material changes will be notified via email or in-app notice. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy questions, data rights requests, or concerns:

Data Controller:Goldenrock LLC
Address:1209 Mountain Rd Pl NE Ste N
Albuquerque, NM 87110
United States

For GDPR-related requests, include "GDPR Request" in the subject line. We respond within statutory timeframes.