This policy explains how Lodesta collects, uses, shares, and protects information when people use the Lodesta platform or interact with Lodesta-hosted websites.
Lodesta is an AI-powered website and local-presence platform for U.S. small businesses. Questions or privacy requests can be sent to willie@lodesta.com.
When you sign in with Google, Lodesta receives your name, email address, profile image when available, and Google account identifier. Supabase processes the authentication flow. Lodesta uses this information to create and secure your account, provide account access, and communicate with you about the service. Lodesta does not receive your Google password or use Google account information for advertising.
Lodesta may collect business details, source website URLs and public website content, business profile information, uploaded assets, authoring instructions, generated website content, domain settings, and support communications. We use this information to create, customize, host, publish, and maintain websites and local-presence services requested by account owners.
Lodesta-hosted websites may collect inquiry form submissions, including names, email addresses, phone numbers, messages, and other fields selected by the site owner. Lodesta may also process page views, clicks, form activity, performance measurements, referral information, device and browser details, pseudonymous visitor identifiers, user agents, and IP-derived hashes for first-party analytics, security, attribution, fraud prevention, and service improvement.
Lodesta uses authentication cookies required to keep users signed in. Lodesta product interfaces and hosted websites may use local storage for interface preferences and pseudonymous visitor identifiers. These technologies support account security, product operation, first-party analytics, and user preferences rather than third-party behavioral advertising.
We use information to authenticate users; provide website creation, hosting, editing, publishing, analytics, inquiry, and local-presence features; operate and secure the platform; diagnose failures; prevent abuse; communicate service information; respond to support requests; and improve Lodesta. Public source website content, business information, and authoring instructions may be processed by AI systems to generate and maintain requested website content.
Lodesta uses service providers to operate the platform. These currently include Supabase for authentication and database services, Railway for application hosting, Cloudflare and R2 for networking and artifact storage, OpenAI for website research and generation, OpenRouter when its optional model-routing capability is enabled, and Resend for operational email. These providers may process information only as needed to perform their respective services.
Lodesta does not sell personal information or use it for third-party behavioral advertising. We may share information with service providers described above, when directed by an account owner, to comply with law or valid legal process, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards. Site owners control the forms and content published on their websites and are responsible for notices and consent required for their businesses.
Raw first-party website analytics events are retained for 14 months so site owners can make year-over-year comparisons. A site-scoped pseudonymous visitor identifier may remain in a visitor’s browser for up to 13 months and is not used to identify a person across Lodesta websites. We retain other information for as long as needed to provide the service, keep owned websites and retained published versions functional, meet security, audit, legal, and dispute-resolution obligations, and maintain reliable records. When information is no longer required, we delete or de-identify it where reasonably practical.
Lodesta uses reasonable technical and organizational safeguards designed to protect information, including access controls, encrypted network connections, restricted server-side repositories, and secret-management practices. No storage or transmission system can be guaranteed completely secure.
You may request access to, correction of, export of, or deletion of certain personal information by contacting Lodesta. An account that owns Lodesta sites cannot be deleted until those sites are transferred or explicitly disposed of, so that retained websites and public artifacts are not unintentionally broken. We will respond to verified requests as required by applicable law.
Lodesta may update this policy as the service changes. We will post the updated policy at this URL, revise the effective date, and provide additional notice when required by law.