Last updated: April 12, 2026
NewSiteLead ("we," "us," or "our") operates the newsitelead.com website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or purchase Diagnostic Reports.
1. Information We Collect
Account Information
When you create an account, we collect your email address and store a cryptographically hashed version of your password. We do not store passwords in plain text.
Payment Information
Payment processing is handled by Stripe, Inc. We do not store your credit card number, expiration date, or CVV on our servers. We retain your Stripe customer ID and subscription ID for billing management. For Diagnostic Report purchases, we also retain the transaction record (amount, date, associated questions).
Diagnostic Report Data
When you purchase a Diagnostic Report, we collect:
- The domain name you wish to analyze
- Optional business context notes you provide at checkout
- Your email address for report delivery
This information is used to generate your report and is processed by our AI provider (see Section 6). Business context notes may contain sensitive business information — you should only provide information you are comfortable being processed by AI systems.
Usage Data
We automatically collect information about how you interact with our Service, including pages visited, searches performed, domain detail views, exports generated, and API calls made. This data is used to enforce plan limits, improve our service, and detect abuse.
Login and Security Data
We record your IP address and timestamp each time you log in to the Service. We maintain a login history to detect unauthorized access and protect your account. IP addresses associated with your sessions may be retained for security and fraud prevention purposes.
Domain Data
The domain intelligence data we provide is derived from publicly available internet data sources and public DNS records. This data pertains to domain names and websites, not individual persons.
2. How We Use Your Information
- To provide, maintain, and improve our Service
- To process subscriptions, one-time purchases, and manage billing
- To generate and deliver Diagnostic Reports using AI
- To enforce usage limits associated with your subscription plan
- To send transactional emails related to your account, purchases, and reports
- To detect and prevent fraud, abuse, and unauthorized access
- To display relevant third-party scan results on domain detail pages
- To comply with legal obligations
3. AI Processing
Our Diagnostic Reports are generated using Anthropic's Claude AI. When you purchase a Diagnostic Report:
- Your specified domain name and any business context notes you provide are sent to Anthropic's API for report generation
- Anthropic processes this data in accordance with their Privacy Policy and commercial API terms
- Under Anthropic's commercial API terms, data submitted through the API is not used to train their models
- Generated report content is stored on our servers and delivered to you
Blog content on our site is also produced with AI assistance. No personal user data is used in blog generation.
4. Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share information with:
- Payment Processor (Stripe): Your email address and transaction details are shared with Stripe for payment processing, subject to Stripe's Privacy Policy.
- AI Provider (Anthropic): Domain names and business context notes are sent to Anthropic for Diagnostic Report generation, as described in Section 3.
- Email Service Provider: Your email address is used to send transactional emails (account notifications, report delivery, password resets) through our email infrastructure.
- Legal Requirements: When required by law, regulation, subpoena, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
5. Cross-Platform Integrations
Our domain detail pages display scan results from affiliated services including WCAG Repair, Abbyseo, AI-Signed, and SiteDialect. To provide this feature:
- We query affiliated service databases using the domain name you are viewing (not your personal data)
- No personal information about you is shared with these services through the integration
- If you click through to an affiliated service, your interaction with that service is governed by its own privacy policy
6. Data Retention
- Account Data: Retained for as long as your account is active or as needed to provide services.
- Diagnostic Reports: Reports and associated data (domain, business context notes, generated content) are automatically and permanently deleted 200 days after generation. If you need to retain a report, download it before this period expires.
- Login History: IP addresses and login timestamps are retained for up to 12 months for security purposes.
- Usage Logs: API usage and activity logs are retained for up to 12 months.
- Deleted Accounts: Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for fraud prevention.
You may request deletion of your account and associated data at any time through the account dashboard or by contacting us at contact@newsitelead.com.
7. Data Security
We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Cryptographically hashed passwords (never stored in plain text)
- Hashed API key storage
- Access controls and authentication for all sensitive endpoints
- Firewalled internal infrastructure
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Cookies and Sessions
We use session cookies to maintain your authenticated state. These cookies are essential for the functioning of our Service and are not used for tracking, profiling, or advertising purposes. We do not use third-party advertising cookies.
9. Analytics
We use Umami, a self-hosted, privacy-focused analytics platform, to understand how our Service is used. Umami does not use cookies, does not collect personally identifiable information, and does not track users across websites. All analytics data is stored on our own infrastructure and is never shared with third parties.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Restriction: Request that we limit processing of your data
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your data for certain purposes
To exercise any of these rights, contact us at contact@newsitelead.com. We will respond within 30 days.
11. California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have additional rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: You may request deletion of your personal information, subject to exceptions
- Right to Opt-Out of Sale: We do not sell personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To make a CCPA/CPRA request, contact us at contact@newsitelead.com. We may need to verify your identity before processing your request.
12. Data Processing Agreement
If you require a formal Data Processing Agreement for your compliance needs (e.g., GDPR, CCPA/CPRA), our standard DPA is available at /dpa. The DPA supplements these terms and details our processor obligations, sub-processors, security measures, and breach notification procedures.
17. International Users
Our Service is operated from the United States. If you are accessing the Service from outside the U.S., your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We process data in accordance with applicable law regardless of where you are located.
13. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete it promptly.
14. Do Not Track
Our Service does not respond to "Do Not Track" browser signals. However, as described in Section 9, we use privacy-focused analytics that do not track users across websites or use cookies for tracking purposes.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For active subscribers, we will also send email notification of material changes at least 14 days before they take effect.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
NewSiteLead
25422 Trabuco Rd STE 184
Lake Forest, CA 92630
contact@newsitelead.com