Last Updated: 18 Mar 2026
This Privacy Policy (“Policy”) forms part of, and should be read together with, the SiteLeads Terms of Service. It explains how Extend Studio SRL (“SiteLeads,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use the SiteLeads WordPress plugin and associated services (collectively, the “Services”).
We take the privacy of our users seriously. Please read this document carefully. If you have any questions, please contact us using the details at the end of this Policy.
1. Who This Policy Applies To
This Policy applies to two distinct groups of people:
Plugin Users (“You” or “User”) — website owners and administrators who install and configure the SiteLeads plugin on their WordPress websites.
Website Visitors (“Visitors”) — individuals who visit a website where SiteLeads has been deployed and may interact with a Widget or AI Assistant.
The information we collect and how we use it differs for each group, and both are described in this Policy.
2. Information We Collect
2.1 Information Collected from Plugin Users
When you create a SiteLeads Account, configure the plugin, or use our Services, we may collect:
Account Data: Your name, email address, company name, and any other information you provide when registering or managing your account.
Configuration Data: Widget settings, channel configurations, AI Assistant training content (including website URLs you submit for crawling, uploaded documents, and custom text), targeting rules, and other plugin settings you configure.
Billing Data: If you subscribe to a paid plan, we collect billing details including name, billing address, and payment method information. Payment processing is handled by third-party payment processors and we do not store full credit card details on our servers.
Usage Data: How you interact with the Services, including features used, widgets created, AI Assistant conversations, leads captured, clicks, and performance metrics viewable in your dashboard.
Technical Data: Your IP address, browser type and version, operating system, device type, and access timestamps, collected automatically when you use the Services or visit our website.
Communications: Records of any support requests, feedback, or other communications you send to us.
2.2 Information Collected from Website Visitors
When a Visitor interacts with a SiteLeads Widget or AI Assistant deployed on your website, we and the Plugin User may collect:
Interaction Data: Messages exchanged with the AI Assistant, channels clicked, time of interaction, and how the Visitor navigated through the widget.
Lead Data: Contact information voluntarily submitted by Visitors through lead capture forms, including name, email address, phone number, and any other fields configured by the Plugin User. This information is stored in the Plugin User’s dashboard.
Technical Data: IP address, browser type, operating system, referring URL, and approximate geographic location (country or region level), collected automatically to provide and improve the Services.
Cookies and Tracking: We may use cookies or similar technologies to recognize returning Visitors and support widget functionality such as remembering whether a Visitor has interacted with the widget before. See Section 5 (Cookies) for more details.
Important Note for Visitors: When you visit a website that uses SiteLeads, the website owner’s own privacy policy applies to your visit. The Plugin User is responsible for providing you with appropriate privacy disclosures and obtaining any required consents for the collection of your personal information through the widget. SiteLeads processes Visitor data on behalf of the Plugin User as a data processor.
3. How We Use the Information We Collect
3.1 For Plugin Users, we use your information to:
3.2 For Website Visitors, we use information to:
4. With Whom We Share Information
We do not sell your personal information. We may share information in the following limited circumstances:
Service Providers: We share information with trusted third-party vendors who help us operate the Services, including cloud hosting providers, payment processors, email delivery services, analytics providers, and AI infrastructure providers. These providers are contractually required to protect your information and may only use it to provide services to us.
AI Processing: To provide AI Assistant functionality, Visitor messages and AI Assistant training content may be processed by third-party AI providers. By using the AI Assistant features, you acknowledge and consent to this processing.
Plugin Users (for Visitor data): Lead Data and interaction data collected from your Visitors is made available to you, the Plugin User, through your dashboard. You are responsible for how you use and handle this data.
Legal Requirements: We may disclose information if required to do so by law, court order, or government authority, or where we believe in good faith that disclosure is necessary to protect our legal rights, prevent fraud, or respond to an emergency involving risk to safety.
Business Transfers: If SiteLeads is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
Aggregated Data: We may share anonymized, aggregated data that cannot identify any individual with third parties for business analysis, product improvement, or reporting purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies on our website and within the Services:
Essential Cookies: Required for the Services to function, including authentication, session management, and widget state tracking.
Analytics Cookies: We use analytics tools (such as Google Analytics) to understand how users interact with our website and Services. This data is aggregated and anonymized.
Preference Cookies: Used to remember your settings and preferences, such as your dashboard configuration.
Marketing Cookies: We may use cookies to track the effectiveness of our marketing campaigns.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services. For cookies placed by the SiteLeads widget on your visitors’ browsers, you as the Plugin User are responsible for obtaining any required consents from your Visitors in accordance with applicable law.
6. Data Retention
Plugin User data is retained for as long as your Account is active. If you close your Account, we will delete your personal data within a reasonable period, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
Lead Data and Visitor data collected through your widgets is retained in your dashboard for as long as your Account is active. You may delete individual leads or request full data deletion at any time.
Billing records may be retained for a longer period as required by applicable tax and financial regulations.
To request deletion of your Account and all associated data, please contact us using the details at the end of this Policy or use the account deletion option within your dashboard (if available on your plan).
7. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (SSL/TLS), access controls, and regular security reviews.
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk. You are also responsible for maintaining the security of your own WordPress installation, including keeping the plugin and all other software up to date.
8. International Data Transfers
Your information may be stored and processed in countries other than your own, including countries that may have different data protection laws. Where we transfer personal data from the European Economic Area (EEA) or United Kingdom to countries outside those areas, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.
9. GDPR and Your Rights (EEA and UK Users)
If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at [[email protected]]. We will respond within the timeframes required by applicable law (generally 30 days).
For Plugin Users acting as data controllers in relation to Visitor data: you are responsible for handling data subject requests from your Visitors relating to Lead Data collected through your widgets. We will assist you in fulfilling such requests where technically feasible.
Legal Basis for Processing: For EEA/UK users, we process your personal data on the following legal bases: performance of a contract (to provide the Services), legitimate interests (product improvement, security, fraud prevention), compliance with legal obligations, and consent (for marketing communications).
10. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect about you, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell personal information. To exercise your California privacy rights, contact us at [email protected].
11. Children’s Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.
12. Third-Party Links and Services
The Plugin connects with third-party communication platforms (such as WhatsApp, Messenger, Telegram, and others). When Visitors interact with these channels, they are subject to those platforms’ own privacy policies. We have no control over, and are not responsible for, the privacy practices of third-party platforms.
13. Your Choices
Marketing Emails: You may opt out of receiving marketing emails from us at any time by clicking the “unsubscribe” link in any such email or by contacting us directly. Please note that you will continue to receive transactional and administrative emails related to your Account.
Cookies: You can disable cookies through your browser settings, though this may affect certain features of the Services.
Account Deletion: You may request deletion of your Account and associated data by contacting us or using the in-dashboard option where available.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this Policy. For material changes, we will provide notice by email to the address associated with your Account or by displaying a prominent notice within the Services. We encourage you to review this Policy periodically.
Your continued use of the Services after changes are posted constitutes your acceptance of the revised Policy.
15. How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected].
