Privacy Policy

Who operates SiteFixPlan

Media Yard LLC operates SiteFixPlan and is responsible for the information practices described in this policy. References to “SiteFixPlan,” “we,” “us,” or “our” mean Media Yard LLC doing business as SiteFixPlan. Our mailing address is Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.

Our data-protection roles

Media Yard LLC generally acts as a controller for account, support, usage, security, and billing information. When a business customer submits URLs and related information for an audit, we generally act as its processor or service provider for that customer content. If you use SiteFixPlan for a client, you are responsible for having the authority and notices needed to provide that information. Our Data Processing Addendum provides additional business-customer terms.

Information we collect

• Account and workspace information: email address, authentication details handled by our authentication provider, workspace name, membership, and role.
• Audit information: URLs you submit, scan settings, technical findings, generated recommendations, report history, and share-link settings.
• Usage and subscription information: audit counts, plan, subscription status, Stripe customer and subscription identifiers, and billing events. SiteFixPlan does not store complete payment-card numbers.
• Technical information: security, diagnostic, and request information made available by our hosting and infrastructure providers, plus aggregate page-view and visitor information used to understand whether the service is working effectively.

How we use information

We use information to authenticate users; operate, secure, troubleshoot, and improve SiteFixPlan; run requested audits; generate explanations; enforce usage limits; process subscriptions; provide support; prevent abuse; and comply with legal obligations. We do not sell personal information, and we do not use customer audit content to train our own AI models.

Website audits and AI

When you request an audit, the submitted URL is sent to website-analysis services such as Google PageSpeed Insights. Relevant audit inputs and findings may be sent to an AI provider to produce plain-English explanations. Do not submit confidential, private, or sensitive information in a URL or page that you ask us to analyze. Read our AI Transparency Notice for details about AI-assisted guidance and its limitations.

Service providers

We use vendors to provide the service, including Supabase for authentication and database services, Vercel for hosting, Stripe for billing, Google for website analysis, and OpenAI for AI-assisted explanations. Vercel also provides privacy-focused website analytics. These providers process information under their own terms and privacy commitments as needed to perform services for us.

Subprocessors and international processing

Our principal service providers include Vercel (hosting and analytics), Supabase (authentication and database), Google (PageSpeed website analysis), OpenAI (AI-assisted explanations), and Stripe (billing). These providers may process information in the United States or other countries where they or their subprocessors operate. Where required, we rely on contractual and other lawful transfer safeguards. Business customers can review the Data Processing Addendum for more detail.

Sharing and selling

We disclose information to service providers, workspace members according to their roles, and authorities or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or protection of rights. We do not sell personal information or share it for cross-context behavioral advertising.

Reports and public links

Reports are private by default. If you create a public share link, anyone with that link may view the shared report until you revoke it. Avoid sharing a link publicly if its report contains information you do not want others to see.

Retention

We retain account, report, usage, and billing records while needed to provide the service and for legitimate security, dispute, accounting, and legal purposes. Retention periods vary by data type. Deletion requests may be subject to limited legal, fraud-prevention, backup, and shared-workspace exceptions.

Your choices and rights

Signed-in users can export their account data and request deletion from Settings. You may also request access, correction, or deletion by emailing privacy@sitefixplan.com. We may verify your identity before completing a request. Depending on where you live, additional rights may apply.

Cookies and browser signals

We use essential browser storage and cookies for authentication, security, and session continuity. We also use aggregate website analytics to understand visits and page usage. We do not use advertising cookies or sell analytics information. Because there is no uniform interpretation of browser “Do Not Track” signals, SiteFixPlan does not respond to them; we will update this policy if our practices change.

Security

We use safeguards intended to protect information, including access controls and database row-level security. No online service can guarantee absolute security, so keep your password confidential and notify us if you suspect unauthorized access.

Children

SiteFixPlan is intended for adults using it for business or professional purposes. People under 18 may not create an account. We do not knowingly collect personal information from children.

Changes and contact

We may update this policy as the service evolves. We will post the revised effective date and provide additional notice when required. Questions for Media Yard LLC can be sent to privacy@sitefixplan.com or mailed to Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.