Skip to content
SitebarnSitebarn.co

Privacy Policy

Last updated: 2026-05-07

Sitebarn is a service of Rightway LLC, a Wyoming company. Two audiences this policy covers, and the rules differ — read the section that applies.

  • Site visitor. You filled out a contact form on a website we built for a local business and you want to know what happens to that information.
  • Sitebarn customer. You’re a business paying us to operate your website.

Site visitors: contact-form submissions on a Sitebarn-operated site

The websites we build for locksmiths, plumbers, HVAC, towing, and other local-service businesses are operated by Rightway LLC on behalf of those businesses. When you fill out a contact or dispatch form, here’s exactly what happens.

What’s collected

  • What you typed. Name, phone number, email address, street address, lock type or vehicle (depending on the form), urgency level, any notes you added.
  • Your SMS-back consent. If you ticked the “OK to text or call me back” box, we record that consent and the time it was given.
  • Technical context. The page you submitted from, the page that referred you there, your browser’s user-agent string, and your IP address. Recorded once at submission to help the local business identify the lead and to deter form-spam abuse.

What happens to it

  • It is delivered to the local business operating the site. We forward the submission by SMS (to their owner number) and email (to their dispatch inbox), and store a copy in a per-site database for their records. They own the lead.
  • We don’t sell or rent it. The local business owns it; we don’t repackage, broker, or resell anything submitted through these forms.
  • In-transit subprocessors. The notification path uses third-party email and SMS delivery services so the message actually leaves our infrastructure. They process it in transit on our behalf and don’t get permission to use it for their own purposes.

SMS specifics

If you opted in to SMS contact:

  • Reply STOP to opt out. Opt-outs are honored across every Sitebarn-operated site, not just this one.
  • Reply HELP for help. Message and data rates may apply, depending on your carrier plan.
  • The sender brand on the SMS is Rightway LLC’s A2P 10DLC registration; the local business’s name appears in the message body so you know who’s contacting you.

Retention

The local business owns the lead and decides how long to keep it. By default we retain submissions in their per-site database indefinitely so they have a record of who reached out, subject to the deletion paths below. Aggregate page-view and call-click counters used to keep the site working are kept rolling.

Asking us to delete what we have on you

Either path works — pick whichever is easier:

  1. Submit a request through our contact form. We’ll find your submission across our sites, delete it, and tell the local business that we removed a lead at the visitor’s request.
  2. Contact the local business directly through the phone number or email on their site. They can delete their copy and tell us to do the same.

We’ll confirm the deletion within a few business days.

Sitebarn customers: business paying for the site

What we collect

  • Public business information, when we draft a candidate site for you. Name, address, phone, hours, photos, reviews, services — sourced from Google Business Profile and similar public listings, before any contract.
  • Account information if you activate. Email address, billing name, the phone number you want lead SMS sent to. Payment information goes through Stripe — we never see or store your card number.
  • Operational data about your site. Aggregated traffic counters, lead volume, which pages are getting submitted from. Used to keep the site working and to improve the platform; not sold.

What we don’t do

  • We don’t sell or rent your information.
  • We don’t run ad-tech tracking on your site or this site.
  • We don’t store payment card numbers — Stripe does, under their PCI compliance.
  • We don’t email you marketing campaigns. The only emails you’ll get from us are about your site, your account, or in direct reply to something you sent.

Subprocessors

Two third parties have access to data in the normal course of running your account:

  • Stripe processes your subscription payments. They store your card details under their own privacy policy and PCI compliance; we never see the card number.
  • Rightway-operated infrastructure. We host customer sites on infrastructure that Rightway LLC operates ourselves — not AWS, Cloudflare, or another major cloud — so your site data and your visitors’ submissions stay within our own control plane. We use third-party services to deliver email and SMS in transit; those providers handle the message but don’t get repurposing rights.

We can’t speak for what Stripe does with payment data on their end — see Stripe’s own privacy policy. We can speak for everything inside our own control plane, and that’s the rest of this document.

Cookies

Necessary cookies for site function only. No third-party cookies, no advertising cookies, no cross-site tracking. Customer sites we build follow the same rule by default.

Your rights

You can ask us at any time to delete the data we hold about your business or your account. Use our contact form and we’ll confirm within a few business days. California residents and others with statutory rights of access, correction, or deletion can use the same form — we don’t gate this behind a separate “data subject request” form.

Changes

If we change this policy materially, we’ll update the “last updated” date above. The current version is what governs.