In effect 17 September 2026
Privacy Policy
What we collect, why we have it, who else sees it, and how to make us delete it. We do not sell personal information and we do not run advertising trackers — the rest is detail.
01The short version
We do not sell personal information, we have never sold personal information, and we do not run advertising or cross-site tracking of any kind. We hold business contact details so we can offer businesses a website, and customer details so we can run the websites we build. Ask us to delete anything we hold about you and we will, without needing a reason.
02Businesses we have not met yet
We build a sample website for a business before we contact it. To do that we collect information that is already public:
- The business name, address, phone number, opening hours and service area.
- Its public listing — photographs, review counts and review text.
- Its existing website, if it has one.
- A publicly listed business email address, where we can find one.
This comes from Google’s business listings and from the business’s own website. We use it for one purpose: building the sample and getting in touch about it. We do not sell it, we do not rent it, and we do not add anyone to a list we pass on.
We also keep a note of whether we have contacted a business and what it said back, so we do not pester anyone twice. If a business asks us to stop, that note is what makes the stop permanent.
Ask us to remove your business and we will delete the sample site within 24 hours and erase what we hold about you. Email privacy@westboundatlas.com or jonny@westboundatlas.com. You do not have to explain why.
03When you open a preview we sent you
We record that the page was opened: which sample site, which page, the time, and the browser identification string your device sends with every web request. If you tap the phone number, the directions link, an email address or a text button, we also record which kind of button it was. That is the whole record we keep ourselves. It holds no cookie, no advertising identifier and no IP address, and we do not know who you are from it.
The pages also carry Vercel Web Analytics, the traffic counter of the company that hosts them. It sets no cookie. For each page view Vercel records the page address, the page you came from, the time, your country, region and city, and your device type, browser and operating system. It tells one visit from the next with a hash made from the request, which it discards after 24 hours, and it does not keep your IP address. We see totals, never a person, and there is no advertising pixel or cross-site tracker on the page.
Why we keep it: it tells us a business has looked at what we built, which is when a follow-up is worth making and when it would be a nuisance. On a site that has become a customer’s, the same page-view and tap counts are shown to that business in its own portal as its visitor numbers, and nothing more is added.
The pages set no cookies of their own. Two things on a page come from someone else and may set cookies under their own privacy policies: the map on the contact section, embedded from Google Maps, which loads whether or not you touch it; and, on a site that offers online booking, the scheduling page from Cal.com or Calendly, which loads only when you open the booking panel.
If a page breaks while you are on it, an error report goes to Sentry so we can fix it. That report can include your IP address, the address of the page and what the page was doing at the time. It is kept for ninety days and used for nothing but the repair.
We do not respond to “Do Not Track” browser signals, because there is no cross-site tracking here for them to switch off; the record above is the same with the signal or without it.
04When you become a customer
We hold what running your account requires:
- Your name, email address and phone number.
- Your billing status, plan and payment history — held by Stripe, who process the payment. We never see or store your card number.
- Your sign-in records for the portal, and the changes you make to your own site.
- The messages you send us.
We use it to run your site, deliver your enquiries, bill you, and answer you. Nothing else. The portal and the claim page carry the same Vercel traffic counter described above, and nothing more. We do not market other products to you, and we do not pass your details to anyone selling anything.
05Enquiries your customers send you
When someone fills in the contact form on a site we run, we store their message and any photographs they attach, and we deliver them to the business. We are handling that information on the business’s behalf — it is theirs, not ours. We do not market to the people who send it, and we never sell it.
Each site carries its own privacy policy explaining this to the person filling in the form, linked from the form itself.
06Who else the information reaches
We keep the list of suppliers short on purpose. These are the ones a request actually touches, and each is used only for the job named:
- Vercel — hosting, the anonymous traffic counts described above, and storage for photographs attached to enquiries.
- Neon — the database the records above are stored in.
- Stripe — payments, card details and invoices.
- Resend — sending email: enquiries, sign-in links and billing notices.
- Twilio — sending enquiry alerts by text message, where a plan includes it.
- Google — the public business listings the samples are built from, and the embedded map.
- Anthropic — the AI model that drafts a sample site’s wording from that public information. It is not used on your customers’ enquiries.
- Sentry and Checkly — error reporting and uptime monitoring, so we find out a site is broken before you do. An error report can carry the IP address and page request of whoever hit the error.
- Linear — our internal to-do list, which holds business names and the work outstanding on them.
Beyond those, we share information only when the law requires it. We do not sell personal information to anybody, for any purpose.
07How long we keep things
Sample sites and the public business information behind them come down within 24 hours of being asked.
Customer records are kept while you are a customer and for as long afterwards as tax and accounting law requires us to keep billing records. Enquiries sent through your site are kept as your record of them until you ask us to delete them.
08What you can ask us to do
Whoever you are, and whichever group above you fall into, you can ask us to:
- Tell you what we hold about you.
- Correct anything that is wrong.
- Delete it.
- Stop contacting you — permanently, not just for now.
Email privacy@westboundatlas.com. We answer within 30 days and usually the same week. We will not charge you, and we will not treat you any differently for asking.
09Cold email and text messages
When we email a business for the first time, the message carries our real name, our postal address, and a way to tell us to stop. Reply with “unsubscribe”, or “stop” to a text, and that is the end of it: we mark it permanently and we do not contact you again. You do not need to say anything else.
We only send text messages after you have agreed to receive them — for most people that means you said yes when we asked on a phone call, and for customers it is part of signing up for a plan that includes text alerts. Message frequency varies and message and data rates may apply. Reply “STOP” to any text to opt out permanently, or “HELP” for help.
We do not share your mobile number, your consent to receive texts, or any text-messaging opt-in information with third parties or affiliates for their marketing or promotional purposes.
10Changes, and getting in touch
If we change this policy we will change the date at the top, and if the change is significant we will email our customers about it.
Questions, requests, or complaints: privacy@westboundatlas.com, or by post to Westbound Atlas, 2021 Fillmore St PMB 2451, San Francisco, CA 94115. Our terms of service cover the rest of the relationship.