Privacy Policy

Site Armor is a WordPress monitoring and remediation product operated by BrandBees (“BrandBees,” “we,” “us,” or “our”). This Privacy Policy explains how we process personal data when you visit https://www.sitearmor.io, use the Site Armor application, or connect third-party services such as Google.

Contact for privacy questions: hello@brandbees.net.

This policy applies to agency and freelancer customers who create Site Armor accounts, users invited to an agency workspace, visitors to our marketing site, and end clients who view white-label client portals when an agency shares a portal link.

It does not replace privacy notices your agency may owe to its own website visitors or end clients for those clients’ WordPress sites.

Account and profile data: name, email address, password or authentication identifiers, agency/workspace details, billing and plan information, and support communications.

Site and service data: WordPress site URLs you add, audit and monitoring results (performance, SEO, security, malware, uptime, backups, reports), plugin/connection status, and configuration you set in Site Armor.

Technical and usage data: IP address, device/browser type, approximate location derived from IP, log data, cookies and similar technologies needed to run the service, and product usage events.

Credentials you choose to store: optional vaulted credentials (for example SSH or Cloudflare API tokens) are encrypted at rest and used only to perform the features you enable. We do not use vaulted secrets for advertising.

Google account data (only if you connect Google): see Section 5.

We use personal and service data to provide, secure, and improve Site Armor: account authentication, site monitoring and remediation workflows, alerts, backups, AI-assisted analysis and reports you request, customer support, billing, fraud and abuse prevention, and legal compliance.

We do not sell personal data. We do not use Google user data for advertising, or for independent personalized advertising of any kind.

If you choose “Connect Google” in Site Armor, we request OAuth access with read-only scopes so we can display analytics and search performance for sites you manage: Google Analytics (GA4) property metadata and metrics, and Google Search Console property metadata and search analytics. We do not request write access to modify your Google Analytics or Search Console settings through this connection.

When you connect, Google may share with us identifiers needed for OAuth (such as tokens), the Google account email associated with the grant, lists of GA4 and Search Console properties you can access, the property you select in Site Armor, and metric/report data we retrieve to power dashboards, SEO tools, and reports inside Site Armor.

We store OAuth tokens and selected property identifiers securely and use them only to retrieve and display that data for your workspace, refresh access as needed, and operate related Site Armor features you enable. You can disconnect Google in Site Armor; after disconnect we stop new Google API calls for that site/connection and remove or invalidate stored Google tokens associated with it according to our retention practices.

Google user data Limited Use: Site Armor’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data; we do not use it for advertising; and we do not allow humans to read Google user data except with your consent, for security/compliance investigation, or where required by law—and then only as permitted by Google’s policies.

We share data with service providers that help us host and operate Site Armor (for example cloud hosting, email delivery, error monitoring, and payment processors), under contracts that limit use to providing services to us.

We may disclose data if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

Agencies control what their invited users and client-portal recipients can see. Client portals expose site health and report content the agency chooses to share; they do not expose Google OAuth tokens.

We retain account and site data for as long as your account remains active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal obligations. Monitoring history, backups, and logs may be retained according to your plan and our operational retention windows.

Google OAuth tokens and connected analytics identifiers are retained while the Google connection remains active and are removed or invalidated when you disconnect or when the related site/account is deleted, subject to short-lived backups and security logs.

We use administrative, technical, and organizational measures appropriate to the risk, including encryption in transit (TLS), encryption of sensitive secrets at rest where applicable, access controls, and audit logging for privileged operations. No method of transmission or storage is 100% secure; please use strong passwords and protect access to your agency workspace.

Site Armor may be hosted and processed in countries other than where you are located. Where required, we use appropriate safeguards for cross-border transfers of personal data.

Depending on your location, you may have rights to access, correct, delete, or export personal data, to object to or restrict certain processing, and to withdraw consent where processing is consent-based (including disconnecting Google). To exercise rights, email hello@brandbees.net. You may also lodge a complaint with your local supervisory authority.

You can update account details in the product, remove sites, disconnect Google, and request account deletion by contacting support.

Site Armor is a business service and is not directed to children under 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will post the updated version at https://www.sitearmor.io/legal/privacy and change the effective date. Material changes may also be communicated through the product or by email where appropriate.

BrandBees — Site Armor privacy inquiries: hello@brandbees.net. Website: https://www.sitearmor.io.