Privacy policy

Last updated 8 November 2026.

Sitepages places and reports on advertising for businesses. This policy explains what information we handle when a business connects its accounts, and when someone responds to one of its ads.

When you connect a Facebook Page

When you sign in with Facebook to connect a Page, we receive a temporary access token and the list of Pages you manage (their names, ids and pictures, and any linked Instagram account). We use the token only to add our business account as an agency on the Page you choose, so ads can run under that Page's name. The token is kept encrypted and deleted within 30 minutes. We keep the chosen Page's id, name and picture for as long as the business uses Sitepages.

When you respond to an ad

When someone arrives from an ad, the business's page records the ad's click identifier. If that person then fills in a form or places an order, we tell the ad platform that the ad led to a result, so it can measure the ad and show it to similar people. Email addresses and phone numbers are sent only as one-way SHA-256 hashes, never in readable form. We do not sell personal information and we do not use it for any purpose but measuring and delivering that business's ads.

Who receives information

The platforms the ads run on (Meta Platforms for Facebook and Instagram), under their own terms; and the business whose ads they are. Information is stored with our hosting providers in the United States and the European Union.

How long we keep it

Ad results and the click identifiers behind them are kept for 13 months, then deleted. A sign-in's access token is deleted within 30 minutes. A connected Page's id, name and picture are kept while the business uses Sitepages.

Your choices

You can disconnect Sitepages from your Page at any time (see data deletion). For anything about information a business collected through its own forms or orders, contact that business: it decides how its customer information is used.