Privacy Policy

Who we are

• SitePrep is a consumer planning product operated by Lima Labs LLC.
• Support and privacy requests can be sent to hello@siteprep.app.
• Mailing address placeholder: Mailing address coming soon (counsel/business operations to finalize before launch).

What we collect

• Account information, such as full name, email address, password credentials handled through our authentication provider, and profile details you add to your workspace.
• Uploaded files and images, including explanation of benefits documents, plan PDFs, screenshots, scans, and similar materials you choose to review with the product.
• Manual planning data, such as deductible and out-of-pocket accumulators, expected allowed amounts, therapy frequency, network assumptions, household planning settings, and override choices.
• Billing and subscription information, such as Stripe customer, subscription, invoice, and billing-contact metadata. Payment card details are processed by Stripe and are not stored directly by us.
• Device, cookie, and analytics data, including essential session information, optional functional cookies, and optional analytics events when analytics is enabled.
• Support and communications data when you contact us or respond to onboarding, account, reminder, or rights-request messages.

How we use information

• Create and secure your account, authenticate you, and maintain your workspace.
• Process uploaded documents, run OCR/extraction, present assumptions checklists, and generate planning estimates and reminders.
• Provide subscriptions, billing support, customer portal access, and payment operations.
• Protect the service, investigate fraud or abuse, debug performance issues, and maintain security logging.
• Respond to support requests, privacy-rights requests, and product-feedback messages.
• Measure product usage and improve the service when analytics or similar optional tools are enabled with consent where required.

Local preview versus saved workspaces

• Preview mode is designed so uploaded files and planning inputs can stay local in your browser by default while you test the experience.
• If you choose to create or use a saved account workspace, uploaded content, extracted fields, assumptions, forecasts, and related planning data may be stored server-side so account features can work across sessions and devices.
• If you choose optional assisted extraction or similar smart-parse features, we may send redacted text or structured field data off the device to support that processing. Raw preview files are intended to stay local unless a feature clearly tells you otherwise.
• Some features may clearly indicate when local-only processing ends and account-backed storage begins.

Third-party processors and infrastructure

• Stripe for hosted checkout, subscription billing, and billing customer management.
• Supabase for authentication, database-backed account features, and transactional auth workflows.
• Vercel for hosting, deployment, and operational infrastructure.
• PostHog if enabled for optional product analytics.
• OCR-related libraries or services needed to support local or remote document processing paths, depending on the feature you use.

How we share information

• We may share information with service providers that help us operate the product, process payments, provide hosting, authenticate users, or provide analytics and support.
• We may disclose information when required by law, legal process, or to protect rights, safety, and security.
• We may share information in connection with a merger, financing, acquisition, bankruptcy, or sale of all or part of the business.
• We do not sell consumer health data or personal information for money. If our practices change, we will update this policy before launch of the changed practice.

Retention

• We retain account and workspace information for as long as needed to provide the service, meet legal obligations, resolve disputes, enforce agreements, and maintain security records.
• Preview-mode local data may remain in your browser until you clear it, overwrite it, or the browser removes it.
• Billing, checkout, and invoice records may be retained for financial reporting, fraud prevention, tax, and bookkeeping obligations.
• Support and rights-request records may be retained long enough to document the request, verify identity, and comply with legal obligations.

Your rights and choices

• You can request access, correction, deletion, export, or portability for eligible data we hold about you.
• You can request privacy help by emailing hello@siteprep.app. We aim to respond to verified privacy and support requests within 30 days.
• You can withdraw optional cookie consent from the cookie banner or browser controls.
• You may also use the same contact path for state privacy and consumer health data requests, including deletion and access requests tied to uploaded documents or planning history.
• Where required by law, you may have rights to appeal a denied privacy request. We will explain available options in our response.

Important planning notice

Security

• We use administrative, technical, and organizational safeguards designed to protect information, such as transport security, access controls, and operational monitoring.
• No system is perfectly secure, and we cannot guarantee absolute security.

Children

Consumer health data

Changes to this policy