Social

Privacy Policy

Last updated: 18 February 2026

Sitebite is a service of Octo B.V., based at Nieuwe Teertuinen 23, 1013 LV Amsterdam, the Netherlands. In this privacy policy we explain which personal data we collect, why we do so, who we share it with, and what rights you have.

Octo B.V. (trading as Sitebite)
Nieuwe Teertuinen 23, 1013 LV Amsterdam, the Netherlands
Chamber of Commerce (KvK) number: 75365650
VAT number: NL852640675B01
Email: info@sitebite.co

1. What data do we collect?

1.1 Account data

When you create an account, we collect:

  • First and last name
  • Email address
  • Phone number (optional)
  • Profile photo (optional)
  • Language and theme preference (light/dark)
  • Notification preferences (onboarding, product updates, weekly report)

1.2 Login data

  • Password (stored as an encrypted hash, never in readable form)
  • Google account ID (when logging in via Google OAuth)

1.3 Organisation and billing data

  • Organisation name
  • Billing address (street, number, postcode, city, country)
  • Billing email address
  • Payment details are processed by our payment provider Mollie (see section 3)

1.4 Website content

Everything you create through Sitebite, including:

  • Text, images and videos
  • Menus and menu data
  • Forms and form submissions from visitors to your website
  • Logos, colour schemes and style settings
  • Pages, navigation and SEO settings

1.5 Usage data

  • Page views and interactions within the Sitebite dashboard
  • IP address and estimated location (for analytics)
  • Device and browser information
  • Session data

2. What do we use your data for?

We process personal data on the basis of the following grounds:

Performance of the contract

  • Creating and managing your account
  • Providing the Sitebite service (website builder, hosting, domain connection)
  • Processing payments and sending invoices
  • Providing customer support

Legitimate interest

  • Improving and securing our service
  • Analysing usage to optimise our service
  • Preventing fraud and abuse

Consent

  • Sending product updates and marketing communications (you can unsubscribe at any time via your account settings)

3. Third parties and data sharing

We only share personal data with third parties when necessary to provide our service. Below is an overview of the main parties involved.

Payments

  • Mollie — Processes payments (iDEAL, credit card) and manages subscriptions. Mollie receives your billing details and payment information. Mollie’s privacy policy

Authentication

  • Google OAuth — When you log in via Google, we receive your name, email address and Google account ID from Google. Google’s privacy policy

Email services

  • Postmark — Handles sending transactional emails (password resets, invoices, notifications). Postmark receives the recipient’s email address and the content of the message. Postmark’s privacy policy

Storage and hosting

  • AWS S3 / DigitalOcean Spaces — Files you upload (images, videos, documents) are stored with one of these cloud storage services.
  • Bunny CDN — Used to quickly deliver videos and files to visitors of your website.

AI services

Sitebite uses artificial intelligence for features such as analysing menus, generating content text and SEO analysis. For this, data may be shared with:

The data shared relates solely to the content you enter or upload (e.g. a menu). No personal account data is shared with AI services.

Google services (optional, connected by you)

  • Google Search Console — For SEO insights and sitemap management
  • Google Business Profile — For managing your Google business listing
  • Google Analytics — For visitor statistics on your website
  • Google Places API — For location data and geocoding

Error monitoring

  • Flare (Spatie) — For detecting and resolving technical errors in our application. Error reports may contain technical data such as IP address and session data.

Bot protection

  • Google reCAPTCHA / Cloudflare Turnstile — To protect against automated abuse during registration. Device and browser data is shared with Google and Cloudflare respectively.

Optional integrations (set up by you)

As a user, you can activate integrations for your website yourself. Sitebite is not responsible for data processing by these third parties. Examples include:

  • Booking systems: Formitable, Resengo, Tebi, Zenchef, Guestplan, GoTable, SevenRooms
  • Marketing tools: MailChimp, Klaviyo, ActiveCampaign, Facebook Pixel
  • Analytics services: Google Analytics, Google Tag Manager, Fathom Analytics, Hotjar
  • Cookie management: Cookiebot, CookieYes

4. Cookies

Necessary cookies

Sitebite uses session cookies to keep you logged in and to make the dashboard function correctly. These cookies are strictly necessary and do not require consent.

Analytical cookies

We use Google Tag Manager on the Sitebite dashboard to analyse and improve the use of our service.

Cookies on your website

For the websites you build with Sitebite, you can choose for yourself which cookies and tracking scripts are placed (e.g. Google Analytics, Facebook Pixel). You are responsible for informing your visitors and obtaining their consent, for example via a cookie solution such as Cookiebot or CookieYes, which you can connect through Sitebite.

5. Retention periods

  • Account data: Retained for as long as your account is active. After your account is deleted, your data is removed as quickly as possible.
  • Billing data: Retained for 7 years after the financial year in which the invoice was issued, in line with the Dutch statutory retention obligation.
  • Website content: Retained for as long as your website is active. After cancelling your subscription, the content is removed after a reasonable period.
  • Form submissions: Retained for as long as your website is active.
  • Log data and analytics: Aggregated and anonymised periodically.

6. Security

We take appropriate technical and organisational measures to protect your data, including:

  • Encrypted connections (HTTPS/TLS)
  • Hashed passwords (bcrypt)
  • Session security and session renewal upon login
  • Access control based on roles and organisation membership
  • Regular security updates

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Access — You can request which data we process about you.
  • Rectification — You can have incorrect data corrected.
  • Erasure — You can request deletion of your data. You can delete your account via the dashboard. Note: account deletion is not possible while you have an active subscription or an ongoing payment mandate.
  • Restriction — You can request restriction of processing.
  • Portability — You can request to receive your data in a structured, commonly used format.
  • Objection — You can object to processing based on legitimate interest.

To exercise your rights, contact us at info@sitebite.co. We respond to your request within 30 days.

Filing a complaint

If you believe we are not processing your data correctly, you can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl), or with the data protection authority in your own country.

8. Changes

We may update this privacy policy from time to time. In the event of material changes, we will notify you by email or via a notification in the dashboard. The most current version is always available on our website.

9. Contact

Do you have questions about this privacy policy or about the processing of your data? Get in touch:

Octo B.V. (Sitebite)
Nieuwe Teertuinen 23
1013 LV Amsterdam, the Netherlands
info@sitebite.co