Who we are
Sixerr generates, hosts and serves websites. The service is operated by Sixerr LLC, a company registered in Wyoming, United States.
This policy covers your account, the sites you build with us, the sites we serve for you, and this marketing site. Write to us through the contact page at sixerr.com/contact/ with any question about it.
What we collect
We collect what the service needs to run. We do not sell any of it, and none of it is shared for advertising.
- Account details: your email address and a hashed password, or the profile Google returns when you sign in with a Google account.
- Site content: your intake answers, every message in the chat, every version of the site we generate, and the text you write yourself.
- Files you upload: your logo, and anything you add to a site’s media library.
- Usage records: one row for every AI call, holding the site, the task, the provider, the model, the tokens used and what the call cost.
- Traffic counters: requests, bandwidth and an approximate visitor count per day for each site we serve.
- Billing state: the plan on each site, your invoices, and whether a payment succeeded. Stripe takes the payment. We never see or store card numbers.
- Enquiries: when a visitor submits the contact form on a site we host, we store that submission and deliver it to the recipient address the site’s owner chose.
- Security events: your IP address, your browser’s user agent and the time, on signup, on a sign-in that works, on a sign-in that fails, on a password reset, on a public form submission and on a rate-limit hit.
- Email records: every email we send you, its type, the provider’s message id, and whether it was delivered, bounced or failed.
On this marketing site, we store your waitlist email, signup time, signup page and subscription status in Cloudflare D1. We use your address for your invitation and Sixerr updates. To leave the list or request deletion, email hello@sixerr.com. Amazon SES delivers a confirmation link to verify your address before your subscription becomes active. You can unsubscribe using the link in that email. When you use our contact form, we store your name, email address, message and submission time in Cloudflare D1 and send the message to our team through Amazon SES. We use these details to respond to your enquiry.
How we use it
- To run your account, and to generate, build, host and serve your sites.
- To meter what each site uses, and to charge the right amount for it.
- To send transactional email: verification, password reset, enquiry delivery and billing notices.
- To answer your support tickets.
- To find and stop abuse, and to keep our model spend under control.
- To keep the service working, and to work out what went wrong when it does not.
We do not sell your personal data, and we do not use it for advertising or profiling.
How the AI handles your words
When you finish intake or ask for a change in the chat, we send that text to our model provider through Cloudflare AI Gateway. The provider is named in the table below.
The model returns a structured description of your site. We check that description against our own schema before we store it or build anything. Model output is data, never code: we never run it, and we never let it choose a file path, a command, a query or a web address.
We record the provider, the model, the tokens and the cost of every call. Those records drive your usage meter and our own spend limits.
When our staff read your conversations
Our support staff can read the chat conversations on your sites. We do this to answer a support ticket, or to work out why a generation failed.
Opening a conversation is a privileged action. The system records who opened it, which site it belongs to, when, and the reason the person typed before the transcript appeared. That record is kept and cannot be edited afterwards. Exporting security or IP data is recorded the same way.
Our staff never edit your site content. Only you and your own AI edits change it.
IP addresses and security events
We log your IP address, your user agent and the time when you sign up, when you sign in, when a sign-in fails, when you reset a password, when a public form is submitted, and when you hit a rate limit.
We use these records to stop stolen-password attacks, signup farming and form abuse. Free generation costs us money, so we need to see who is consuming it.
How long we keep it
| What | How long we keep it |
|---|---|
| IP and security events | 12 months, then aggregated or deleted |
| Per-call AI records | 12 months, then aggregated or deleted |
| Site traffic counters | 12 months, then aggregated or deleted |
| Chat conversations | As long as the account exists |
| Billing records | As long as the account exists |
| An unpaid preview site | Deleted after 60 days without your activity, with a warning email at day 45 |
A scheduled job does the deleting at the end of the 12 months. Deleting your account removes its conversations and its personal data. We keep the billing records the law requires us to keep.
Who else processes it
We use a short list of providers to run the service. Each one handles only what its job needs.
| Provider | What it does for us | Where it processes data |
|---|---|---|
| Cloudflare | Hosting, storage, the edge network that serves your site, and the gateway our model calls pass through | See the provider |
| OpenAI | The model that writes and edits your site, reached through the Cloudflare gateway | See the provider |
| Stripe | Payments, subscriptions and invoices | See the provider |
| Amazon SES | Marketing waitlist confirmations, signup notifications and contact form enquiries | See the provider |
| Sign-in, if you choose to sign in with a Google account | See the provider | |
| Pexels | The stock image library your first draft draws its pictures from | See the provider |
| GitHub | Pushing your exported site source to a repository you own, when you ask for it | See the provider |
We sell worldwide, so these providers may process data outside the country you are in. Each one publishes its own list of locations and safeguards.
Your rights
- Ask what we hold about you, and get a copy of it.
- Ask us to correct anything that is wrong. You can change most of it yourself in the dashboard.
- Delete any project yourself. That stops the site serving immediately, and it cannot be undone.
- Ask us to delete your account. We remove its conversations and its personal data.
- Stop the product email. Every one of those emails carries an unsubscribe link.
Write to us through the contact page at sixerr.com/contact/ and tell us what you want. Where the law where you live gives you more rights than this page describes, those rights still apply.
Children
Sixerr is a product for businesses. It is not for children, and we do not knowingly collect personal data from anyone under 16. Write to us through the contact page at sixerr.com/contact/ if you believe a child has created an account, and we will delete it.
Changes to this policy
We update this page when the product changes. The effective date and the version at the top tell you which text you are reading. When a change affects how we use your personal data, we email the account holder before it takes effect.
Contact
Write to us through the contact page at sixerr.com/contact/ about anything on this page. The legal entity behind Sixerr is Sixerr LLC, a company registered in Wyoming, United States. If you have an account, you can also open a support ticket from the dashboard.