Privacy Policy
Last updated: 4 July 2026
SiteChat (“we”, “our”, “us”) is operated by lab.radical, based in Sydney, Australia. This Privacy Policy explains how we collect, use, store, and share information when you use our service at sitechat.labradical.com.au.
By using SiteChat, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use the service.
1. Information We Collect
Account information
When you sign up, we collect your email address and, if you subscribe, your billing details (processed securely by Stripe — we never store card numbers).
Website data
When the SiteChat widget is active on your site, it reads your publicly accessible web pages to generate answers. We temporarily cache page content to improve response speed. We do not store the full content of your pages permanently.
Visitor chat data
When visitors interact with your SiteChat widget, we collect the conversation (questions and responses) and any contact details they voluntarily provide (name, email). This data is stored in your Supabase instance, not ours — you own it.
Usage data
We collect aggregate usage statistics (reply counts, active sites) to operate and improve the service. This data is never sold or used for advertising.
2. How We Use Your Information
- To provide and operate the SiteChat service
- To process payments and send billing communications
- To send transactional emails (trial expiry, reply limit warnings, lead notifications)
- To improve our AI models and infrastructure, using only aggregate anonymised signals
- To comply with legal obligations
We do not use your data to train third-party AI models, sell to advertisers, or share with data brokers.
3. Data Storage and Security
SiteChat is hosted on Vercel (global CDN, servers in Australia and the US). Your Supabase database — where chat history and leads are stored — is hosted by you on your own Supabase project. We do not have permanent access to your visitor data unless you grant it for support purposes.
All data in transit is encrypted via TLS/SSL. We use industry-standard security practices and conduct regular reviews of our infrastructure.
4. Third-Party Services
We use the following third-party services to operate SiteChat:
- Stripe — payment processing. Subject to Stripe's privacy policy.
- Vercel — hosting and edge functions.
- Supabase — database (your own instance).
- OpenAI / Anthropic / other AI providers — to generate chatbot responses. Visitor queries are sent to these providers. They are not used to train their public models under our agreements.
5. Cookies
SiteChat uses minimal cookies: a session cookie for authentication on the dashboard, and a small anonymous identifier in the widget to maintain conversation context. We do not use tracking or advertising cookies.
6. Your Rights (Australian Privacy Act)
Under the Australian Privacy Act 1988, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your account and associated data
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, email us at hello@sitechat.labradical.com.au. We will respond within 30 days.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. billing records, which are kept for 7 years under Australian law).
8. Children's Privacy
SiteChat is not directed at children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this policy from time to time. We will notify you by email and update the “last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Email us at hello@sitechat.labradical.com.au.