Privacy Policy

Last updated: November 13, 2026

We don't sell personal information, and we don't run advertising trackers on our own website. This policy explains what we collect, why, who receives it, and how to have it removed.

1. Who this covers

Brighter Edge Tech LLC, doing business as Really Sites, designs and hosts websites for businesses. This policy covers reallysites.com, our client panel, demo previews, and the research and outreach we do to find customers.

Websites we host for clients are different. When you submit a form on an insurance agency's website, that agency decides how your information is used, and its privacy policy applies. We store and deliver the information on the agency's behalf. Please contact the agency first about your information.

2. What we collect

Visitors to our website. Your website address, your email and, if you choose, what you pay for your website now, which you give us. A scrambled version of your IP address and your browser type, for spam protection, from your browser.

People trying our design tool. Your website address, your email and the words you pick, which you give us, and what's on your public website. Your email is confirmed with a one-time code.

Clients and their team members. Name, email, business details, website content and photos, what you type into the AI editor, plan and billing status, and sign-in records, from you and from Stripe. We don't receive your full card number.

Visitors to a client's website. What you enter in its forms, such as your name, phone, email and request. The page you were on, a scrambled version of your IP address and your browser type, from your browser.

People at businesses we research. Business name and website, public business contact details, names and job titles, insurance license names and lines, business size from public filings, and the content and technology of the business's public website, including staff names and photos. This comes from public state license records, public government filings, the business's website and public web search.

We don't intentionally collect home addresses from license records. Visitor analytics on client websites are counted by day, page and referring website, not by person.

3. How we use it

We use information to:

• reply to you, and design, build, host and support websites
• deliver leads and related emails for our clients
• take payment and keep accounts secure
• detect spam and abuse
• improve the Service, using statistics that don't identify anyone
• meet legal obligations and protect our rights

Business outreach. We use business contact information and public website content to decide which businesses to approach, prepare demo previews, and contact them about our service. Every marketing email lets you opt out.

Our website form. If you send us the form on our home page, we use your details to look at your site and reply to you. We don't add you to a marketing list.

AI. We send website content, photos, business details and what clients type into the AI editor to AI providers to create and change websites. We don't send lead form submissions to AI models. Clients should not paste a lead's details into the editor. We don't train our own AI models on this information.

4. Who receives it

We share information with these providers so they can run the Service for us:

• Cloudflare: website hosting, form capture, storage, backups and email. It receives website files, form submissions, visitor network data, and the email addresses and content of the emails we send and receive, including lead notifications.
• A cloud server provider: runs our application, and receives everything in our database.
• Stripe: payments and billing. It receives billing contact and payment details.
• Anthropic: AI design, writing and editing. It receives website content, business details and editor requests.
• OpenRouter, and the model providers it routes to (currently Moonshot AI, Google, OpenAI, xAI and Anthropic): AI design, image descriptions, images, narration and AI search checks. They receive website content and photos, business details and design requests.
• Google: fonts on our pages and client websites, and any embedded maps. It receives visitor IP addresses and browser details.

Some of these providers may process information outside the United States. Before we send sales email through another provider, we'll add it to this list.

Client choices. A client may connect Google Analytics, Plausible, webhooks or other tools to its own website. Those are the client's choices, and that client decides what they receive.

Other sharing. We may disclose information when the law requires it, to protect people or our rights, or as part of a merger or sale of our business. We don't sell personal information or share it for targeted advertising.

5. Cookies and analytics

Our client panel uses one sign-in cookie, which lasts up to 30 days. Our own website doesn't use cookies for analytics or advertising. We count page visits and where they came from without cookies.

Client websites use the same cookie-free counting. If a client adds its own analytics tool, that tool may set cookies, and the client's privacy policy should say so.

6. How long we keep it

• Sign-in links: single use, and up to 7 days.
• Email confirmation codes: 15 minutes to use, deleted after about 2 days.
• Sign-in sessions: up to 30 days.
• Client accounts, website content and leads: while the account is active, then until we delete the client, within 90 days after the account ends.
• Database backups: one copy a night, kept for 30 days.
• Billing records: as long as tax and accounting rules require.
• Demos and research on businesses that don't become clients: up to 12 months after last contact.
• Opt-out and removal requests: kept as a minimal record, so we honor them in future.
• Records that a client agreed to our Terms (email, version, step, browser and time): as long as a dispute could arise, including after the client is deleted.

Deleting a client removes its site, addresses, files and backups, but not its record of agreeing to our Terms.

7. Security

We use safeguards such as encrypted connections, hashed sign-in tokens, email confirmation and limited staff access. No system is perfectly secure. If an incident affects your information, we'll notify you, or the client responsible for your information, as the law requires.

8. Your choices

Stop marketing email. Use the opt-out link in the email, or contact us. We'll honor it within 10 business days.

Remove a demo or research record. Ask us and we'll remove the demo and research we hold about your business, and keep a minimal record so we don't contact you again.

See, correct or delete your information. Contact us at privacy@reallysites.com. We may need to confirm who you are. Some records we must keep, such as billing records. Some state laws give residents further rights, and we'll respond to requests under those laws. You won't be treated differently for making a request.

Form submissions on an agency's website. Contact that agency first, because it controls that information. We'll help the agency respond.

9. Other things to know

Children. The Service is for businesses and isn't directed to children under 13. We don't knowingly collect their information.

United States. We run the Service from the United States, and it's meant for US businesses.

Changes. We'll post updates here and change the date above. We'll email clients about material changes.

Contact. Brighter Edge Tech LLC doing business as Really Sites, 901 S Detroit Ct #1041, Morton, IL 61550, privacy@reallysites.com.