Privacy Policy
Last updated: 2026-08
What we collect
Account info (email / username / nickname), the site content, uploaded assets, domain settings and visitor form submissions you create or receive, and your conversations with the AI assistant. We do not collect full card numbers, CVVs or payment passwords.
How data is used
Only to save, publish and manage the websites you create, to operate forms or domains you enable, and — when you ask for it — to have AI generate or edit content. We do not sell your data or use it for advertising.
How data is protected
Account passwords are stored as salted Argon2 hashes, never in plaintext; sessions use expiring JWTs, and changing your password or signing out invalidates old credentials.
Retention and deletion
You can delete your projects; account-deletion requests can be submitted by email and remain subject to necessary security, backup, audit and legal retention periods (soft-deleted accounts are hard-deleted after the period).
Third parties
If you choose to sign in with your Tutu account (tutuid), that flow follows its privacy policy. When you use AI features, the content you submit is sent to the Tutu AI service for processing; visitor analytics for published sites are handled by Tutu Analytics, which does not store visitor IP addresses in plain text. TutuSite is a member of the Tutu suite, and your sign-in identity is federated across the suite.
Contact us
For privacy questions, contact us through the support email.