SiteSherpa is an AI guide that businesses add to their websites. It is run by Intrakit LLC, a Utah limited liability company ("SiteSherpa", "we", "us"). This policy explains what information we collect, how we use it, and the choices you have.
It covers three groups of people:
- Customers: businesses and agencies that sign up for SiteSherpa and the people on their team who use the dashboard.
- Visitors: people who chat with SiteSherpa on a customer's website.
- People who visit sitesherpa.ai or contact us.
Our role for visitor information
When you chat with SiteSherpa on a business's website, that business decides to use SiteSherpa and what it does with the conversation. We process visitor information on the business's behalf, as its service provider. The business's own privacy policy explains how it uses your information. If you want to see, correct or delete what you shared in a chat, contact the business first. We will help them handle your request.
Information we collect
From customers
- Account details: name, email address, password (stored only as a secure hash), your website address and platform, and optional two-factor or passkey settings.
- Billing details: billing email, legal name, address and tax ID if you add them. Card payments are handled by Stripe. We never see or store your full card number; we keep only Stripe's reference IDs, invoice amounts and payment status.
- Your website content: the pages our crawler reads from your site, text you paste in, and the instructions and settings you give your guide.
- Security records: when you are signed in to the dashboard, we record your IP address and browser in your session and in an audit log of account changes.
From visitors who chat
- Conversations: the messages you send and the replies, the page you started on, and any rating or feedback you leave.
- A random visitor ID so a conversation can continue as you move between pages. It is not tied to your name unless you give it.
- Contact details you choose to share: if you fill in a contact form in the chat (for example name, email, phone or a note), or ask for a copy of the conversation by email. If the business asks for marketing consent, we record your choice, the wording you agreed to and when.
- Link and purchase activity: when you click a link the guide suggests, we record the click and your browser type. On stores that report orders to us, we record the order number, total and currency so the business can see which conversations led to a sale. We do not receive your payment or shipping details.
- IP address: we use it to prevent abuse but store it only as a one-way hash, never in readable form. We do not look up your location.
From visitors to sitesherpa.ai
- If you use our contact form, we receive what you enter (name, email, company, website, number of sites and your message) by email.
- Our hosting provider, Cloudflare, processes basic request data such as your IP address to serve and protect the site.
How we use information
- To run SiteSherpa: answer visitor questions from the business's content, deliver leads and transcripts, and show the business its reports.
- To bill customers and send account emails such as verification, invitations, reports and statements.
- To keep the service secure, prevent spam and abuse, and fix problems.
- To reply when you contact us.
We do not sell personal information, and we do not use customer content or visitor conversations to train AI models. We do not run advertising trackers on the SiteSherpa chat or dashboard.
How AI is used
To write answers, we send the visitor's message, recent messages from the same conversation, details about the page, and relevant passages from the business's website to our AI providers. Contact details entered in the chat's forms are never sent to the AI model. Customers' report features also send short excerpts of visitor questions to the same AI provider to find common questions the website doesn't answer yet; emails and phone numbers are removed from those reports.
Who we share information with
We share information only with service providers that help us run SiteSherpa, and only what they need:
- Anthropic: AI model that writes answers and summaries.
- Voyage AI: search over the business's website content, using visitor questions and site passages.
- Stripe: card payments and invoices.
- Resend: sending email, such as account emails, lead alerts and transcripts.
- Railway: hosting for the SiteSherpa app and database, in the Netherlands.
- Cloudflare: hosting for sitesherpa.ai, and a bot check on the signup page.
- Sentry: error monitoring. Request bodies, cookies, headers and user details are removed before errors are sent.
When a customer connects their own tools, we send leads to them at the customer's direction. For example, a Klaviyo account (contact details, the page and whether the visitor agreed to marketing) or a webhook the customer sets up. Those tools are governed by the customer's agreements with them.
We may also share information if the law requires it, to protect people or our service, or as part of a merger or sale of our business, in which case this policy will continue to apply to it.
Cookies and browser storage
- The chat on customer websites sets no cookies. It saves a random visitor ID and the current conversation in your browser's local storage so the chat can continue between pages. A saved conversation is not picked up again after 24 hours.
- Shopify stores: only if the store reports that you allowed analytics, the chat stores a short reference in the store's local storage and on your cart, so the business can tell whether a chat led to a sale.
- The dashboard uses cookies that are needed to keep you signed in and protect forms, plus two that remember your theme and sidebar preference.
- sitesherpa.ai sets no cookies of its own.
How long we keep information
- Conversations, their messages and link clicks are deleted automatically 365 days after the conversation's last activity, unless the customer sets a different period.
- Visitor IDs are deleted once they have no conversations left.
- Leads stay until the customer deletes them.
- Order records are kept for reporting, with the link to the visitor and conversation removed when the conversation is deleted.
- Billing records are kept as long as we need them for accounting and tax.
- If you close your account, email us and we will delete your account data, except what we must keep by law.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to object to or limit how it is used.
- Customers can update account details in the dashboard and can delete a visitor's conversations and leads, or erase an email address everywhere it appears. Note that erasing data in SiteSherpa does not remove it from tools you have connected, such as Klaviyo.
- Visitors should contact the business whose website they chatted on. You can also email us and we will pass your request on.
- You can unsubscribe from marketing using the link in the email or by contacting the business that sent it.
We will not treat you differently for using these rights.
Security
We use encrypted connections, hash passwords and visitor IP addresses, encrypt stored integration secrets, and limit who can see contact details in the dashboard to account owners and admins. No system is perfectly secure, but we work to protect your information and will tell affected customers about a breach as the law requires.
International transfers
Intrakit LLC is based in the United States, and our app is hosted in the Netherlands. Some of our service providers process information in the United States and other countries. Where the law requires, we use appropriate safeguards for these transfers.
Children
SiteSherpa is not meant for children under 13, and customer accounts are for people 18 or older. We do not knowingly collect information from children under 13. If you think a child has given us information, email us and we will delete it.
Changes to this policy
We may update this policy. We will change the date at the top, and for significant changes we will tell customers by email or in the dashboard before they take effect.
Contact us
Intrakit LLC, Utah, United States
Email: hello@sitesherpa.ai