Legal
Privacy Policy
Last updated August 6, 2026
This explains what we collect, why we collect it, and how to make us delete it. Written to be read, not to be survived.
What we collect
What you type. Your business name, trade, city, services, hours, address, phone, booking link, and any logo or photos you upload. This is what the site is built from.
Your email. Required so we can send you the link to your site and so you can sign back in. There is no password to store.
How you got here. If you arrived from an ad, we record which one, plus a random identifier stored in your browser. This tells us which ads bring real customers. It is not sold and not used to build a profile of you elsewhere.
Payment. We never see or store your card. Our payment provider handles checkout and tells us only that the subscription started, renewed, or failed.
Technical. Standard server logs, including the address your request came from, used for security and to stop abuse of the free preview.
What we do not do
We do not sell your information. We do not call you. We do not add you to a marketing list you did not ask for. If you leave your email with a site you never published, we email you its link and up to three reminders inside the 7 day preview window, and then we stop.
Who else sees it
Only the companies that make the service work: hosting and content delivery, the payment provider, the email provider that delivers our messages, the domain registrar when you choose a domain, and the model provider that generates your site. Each gets only what its job requires, and none of them may use it for their own marketing.
Advertising
We measure ad performance with Meta. Events such as starting a site or publishing one are shared with a matching identifier so the same action is not counted twice. You can opt out of ad personalization in your Meta account settings, and browser level tracking protection also applies.
How long we keep it
Unpublished previews and their data are deleted 7 days after they are built. Published sites are kept while your subscription is active, and for 30 days after it ends so you can come back without starting over. Billing records are kept as long as tax law requires.
Your choices
Write to support@stau.io to get a copy of your data, correct it, or have it deleted. We answer within 30 days. Deleting your data takes your site offline, so we confirm with you before doing it.
If you are in California, the European Economic Area, or the United Kingdom, you have additional rights over access, correction, deletion, and objection. The same address handles those requests.
Children
Stau is for businesses and is not directed at anyone under 16. We do not knowingly collect their information.
Changes
If we change this policy in a way that matters, we email you before it takes effect.