Privacy policy

Last updated 28 October 2026

SiteLamp helps people look after the SEO and social media of their websites. This page explains what information SiteLamp keeps, why, and what it never does with it. SiteLamp is run from New Zealand and follows the New Zealand Privacy Act 2020.

What SiteLamp keeps

Your email address, so you can sign in (we email you a link; there are no passwords), and the date you last used SiteLamp.
The websites you add: their address, and the brand profile you write (what the business does, where, how it sounds).
What SiteLamp finds on those websites: page titles, descriptions, links and speed results, read from the public website like any visitor would.
Information from Google, if you connect it (see below).
Photos and posts you upload or approve for social media, and the connection to the social accounts you choose to link.

Google user data

If you connect a Google account to a site, SiteLamp asks for read-only access to Google Search Console. It uses this only to show you how that site appears in Google search: the searches people used, clicks, impressions and average position. SiteLamp:

only reads Search Console data for the sites you add, and shows it only to people you’ve given access to that site;
never changes anything in your Google account;
never sells Google data, uses it for advertising, or shares it with anyone except as needed to run SiteLamp;
never uses Google data to train AI models.

SiteLamp’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect a Google account on SiteLamp’s Google page at any time, or remove SiteLamp’s access from your Google account permissions.

Facebook and Instagram

If you connect a Facebook Page to a site, SiteLamp asks Facebook for permission to see the Pages you manage, the Instagram professional accounts linked to them, and to publish posts to them. It uses this only to publish the posts you approve in SiteLamp, at the times you choose, and to link to them once they’re up. SiteLamp:

keeps only the Page and Instagram account names and ids, and an encrypted access token for each Page;
never reads your messages, friends, followers or anything else on Facebook or Instagram;
never posts anything you haven’t approved;
never sells or shares this information, or uses it for advertising or to train AI models.

When a post goes out, Facebook or Instagram fetches its photos from SiteLamp through a private address that stops working after an hour.

Deleting your Facebook and Instagram information

To remove everything SiteLamp keeps from Facebook: open the site in SiteLamp, go to Social → When to post and press Disconnect. The Page tokens and names are deleted straight away. You can also remove SiteLamp in Facebook under Settings → Business integrations. If you can’t sign in to SiteLamp any more, email polychromenz@gmail.com and it will be deleted within 7 days. Posts already published stay on Facebook and Instagram; delete them there if you want them gone.

Where it’s kept

SiteLamp runs on Cloudflare. Your information is stored in Cloudflare’s database and storage, and connection tokens are encrypted. Suggested titles, descriptions and captions are written by AI models run by Cloudflare (Workers AI). Only the page wording needed for a suggestion is sent, and it isn’t used to train those models.

What SiteLamp never does

Sell or rent your information.
Change your website. SiteLamp suggests fixes; you decide whether to make them.
Post to social media without your approval of each post.

Cookies

SiteLamp uses one cookie, to keep you signed in. There are no advertising or tracking cookies.

Removing your information

Deleting a site in SiteLamp removes everything kept for it. To have your account and all its information removed, or to see what’s held about you, email polychromenz@gmail.com.

Changes

If this policy changes, the date at the top will change too. Big changes will be emailed to people using SiteLamp.