Privacy Policy
Who we are
Devgo, trading as Sitehold, Box D6305, Keurenplein 41, 1069 CD Amsterdam, the Netherlands, KvK 42208309, is the controller for the data below. Contact: support@sitehold.app.
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name and email (via WorkOS sign-in), beta key, account settings | Run your account | Contract | Until you delete your account, plus 30 days |
| Sites, files and deployments you upload | Host and publish them | Contract | Previews 7 days; the last 20 published versions per site, until you delete the site |
| Connected domains and certificate status | Serve your sites on your domains | Contract | While connected |
| Application logs (emails redacted; no headers, cookies, bodies or query strings) | Security, abuse prevention, debugging | Legitimate interest | Up to 30 days |
| Emails we send you | Account notices | Contract | 30 days |
| Campaign attribution for your signup (UTM, referrer) | Know which campaigns work | Legitimate interest | 13 months |
| Billing data (after the beta, via Paddle) | Payments and tax records | Contract, legal obligation | 7 years (Dutch tax law) |
| Emails you send us | Answer you | Legitimate interest | 2 years |
| Invite key details: recipient's name or email as entered by us, redemption time, accepted agreement version | Manage beta access and prove you accepted the beta agreement | Legitimate interest, contract | As long as the key record exists |
We do not sell your data and do not use it for advertising. The sitehold.app home page sets no cookies and runs no tracking script. We count visits per campaign and referring site without storing IP addresses, user agents or cookies, and keep those counts 3 months. The account app uses one strictly necessary session cookie. Sitehold adds no tracking to the sites you publish.
Who receives data
Only the vendors that run Sitehold: Scaleway (application hosting, Paris), PlanetScale (database, Frankfurt), Cloudflare (serving sites worldwide, file storage in the EU, certificates, email routing) and WorkOS (sign-in, United States). After the beta, Paddle handles payments as reseller. For transfers to the United States we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
Your rights
You may ask to access, correct, delete or export your data, object to processing based on legitimate interest, or restrict processing. Email support@sitehold.app. We answer within one month. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority where you live.
Security
We use encryption in transit, encryption at rest at our storage providers, restricted admin access, and logs that leave out request bodies, cookies, headers and keys.
Changes
We will email you about material changes before they apply.