How your data is handled
SiteNotePro holds professional records and personal data. In plain terms: your project records, files, voice notes and their transcription all stay in the EU, they are never used to train AI models, and a professional stays in control of anything the AI produces.
Your project data stays in the EU.
Every part of your project record stays inside the EU: the database, your uploaded files and photos, your voice notes, and the transcription that turns those voice notes into text. Our app hosting and our error reporting are in the EU too.
No training. No silent retention.
- No training: your records, voice notes and questions are never used to train AI models. Where a provider trains on customer data by default, we explicitly opt out — our voice transcription runs with Deepgram's model improvement programme turned off, which costs us the discount that comes with leaving it on.
- Processed in the EU: voice transcription runs on Deepgram's EU endpoint, so your audio does not leave the EU to become text.
- No silent retention: we do not keep AI prompts beyond what is needed to show you the answer inside your project record.
- Professional review: AI outputs are suggestions, clearly marked, and require professional review before they go into a report or a compliance record.
Your data stays yours.
Row Level Security on every table
Isolation is enforced at the database, so one customer's records are never visible to another.
Export, delete, restrict, on demand
Export your full project record at any time, and ask us to delete or restrict your data whenever you need.
- We do not sell data.
- We do not allow AI providers to train on your content.
- We do not share your knowledge base with other customers.
- We do not let SiteNotePro engineers read your project data unless you open a support ticket and explicitly consent.
- We do not display certifications we have not earned.
Who processes your data, and where.
Every provider we use, named, with where it actually processes your data. Where one sits outside the EU, it operates under a data processing agreement with standard contractual clauses. We will share the full data-flow map on request, and this list changes in the same breath as the code does.
Supabase
EU · IrelandDatabase, authentication and file storage — your project records, photos and voice notes, plus our waitlist and contact records.
Vercel
EU · IrelandApp and website hosting, our contact form, and cookieless performance metrics.
Deepgram
EUTurns your voice notes into text, on their EU endpoint, with model training opted out.
Sentry
EU · GermanyError reports, so we can find and fix faults. Not your project content.
Resend
USSends account emails — address verification, password resets and invitations.
Google Workspace
USReceives contact and waitlist form submissions, and our correspondence, in our own mailbox.
The tag on each card is where that provider processes your data. The two marked US handle email only — they never touch your project records — and both operate under a data processing agreement with standard contractual clauses, as set out in our Privacy Policy.