Privacy policy
Last updated: September 26, 2026
Who we are
ElmSite is operated by NTech Inc, Cumming, GA 30040, USA ("we", "us").
Privacy questions and requests: [email protected].
What we collect
- Waitlist (only if sign-ups are ever paused): your email address and, if you choose, your type of business.
- Account: your name, email address and a securely hashed password.
- Your business: the answers you give in the questionnaire (for example business name, city, services, contact email) and any images you upload.
- Billing: your subscription status. Card details are handled by Paddle; we never see or store your full card number.
- Sites we host: messages sent through your site's contact form are delivered to you and stored in your account. We count visits and clicks to produce your reports without advertising trackers.
Why we use it
To provide and improve the service, build and host your site, send service emails (such as trial reminders, receipts and your monthly SEO report), prevent abuse, and meet legal obligations. We do not sell personal data.
Cookies
elmsite.com uses one essential cookie to keep you logged in. We don't use advertising cookies. Customer sites don't set tracking cookies by default.
Service providers we use
- Paddle: payments, tax and invoicing.
- Anthropic: AI writing of your site from your questionnaire answers.
- DataForSEO: search data. We send only your type of business and location, not personal data.
- Unsplash: stock photos. Photos load directly from Unsplash, so visitors' browsers connect to Unsplash.
- Cloudflare: hosting, security and custom domains.
- Our email delivery provider: sending service emails.
- Google: only if you choose to connect Google Search Console.
Some of these providers are based in the United States, so your data may be processed there.
Health information
ElmSite is not designed to collect health information. Therapist sites ask visitors not to include health or personal details in the contact form.
How long we keep data
Account and site data: while your account is active. After you cancel and your site goes offline, content is kept for 30 days and then deleted. Waitlist emails: until sign-ups reopen or you ask us to remove you. Billing records: as long as the law requires.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or US state laws), you may have the right to access, correct, export or delete your data, and to object to or restrict how we use it. Email [email protected] and we'll respond within 30 days. You can also complain to your local data protection authority.
Children
ElmSite is a service for businesses and is not directed at children.
Changes
We'll post changes here and email account holders about significant ones.