Privacy Policy
The short version: Shopstead stores your business details, website content, and published sites. It uses AI to rewrite copy and generate structured data. Published sites have first-party analytics only - no IPs, no cookies, no third-party trackers. You can download your full site as a static pack at any time while you are subscribed.
Account Required
Shopstead requires a Lotlsoft account to function. See the Lotlsoft Privacy Policy for details about account data.
What We Store
When you use Shopstead, we store:
- Account - Email address and display name you sign up with. Used to identify your account and send occasional service emails.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Shared with: email provider.
- Content - Business details you enter (name, ABN, industry, addresses, hours, services, photos) and the content blocks for every site on your account. Extracted content from URLs you ask us to read.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service).
- Analytics - Aggregate visitor counts for your published site: page views, referrer category, and device class. Uses a daily-rotating salted hash that cannot be reversed to an IP address. No IPs, no cookies, no cross-site trackers.Stored on our server. Kept: 24 months then aggregated. Legal basis: legitimate interests. Shared with: analytics processor.
- Billing - Subscription state and payment receipts. Payment card details are processed by our payment provider and never seen by Shopstead.Stored on our server. Kept: 7 years for tax. Legal basis: contract (needed to run the service). Not individually deletable. Shared with: payment processor.
Cookies
We do not use cookies for tracking. We use localStorage to save preferences and sessionStorage during the sign-in process.
Analytics
We use our own privacy-focused analytics (Lotl Observe) to collect minimal anonymous usage data:
- Page views - Which pages are visited (no personal data)
- Anonymous identifiers - A random visitor ID to count unique visitors (not linked to your identity)
- Error reports - Technical errors for debugging (no personal data)
We do not use third-party analytics services like Google Analytics.
Third Parties
We do not sell or share your data. The only external services we use are:
- Payment provider for subscription billing (card details are handled directly by the processor and never stored by Shopstead)
- AI provider for the Humanise pass (content block text is sent for rewriting and is not retained by the model provider for training)
- Google Maps Platform for map images on published sites that show a map. Your visitor's browser fetches the image directly from Google, which sees the visitor's IP address, their User-Agent, the page they were on, and Shopstead's Google Maps API key (used for billing). Google does not receive any Shopstead account identifier tied to the visitor.
Your Rights
You can:
- Access your data (view within the app or export from account settings)
- Correct your data (update profile in account settings)
- Delete your data (from within the app)
- Withdraw consent (sign out and stop using the service)
Contact
Questions about privacy? Visit the Lotlsoft Privacy Policy to send us a message.
Last updated: 2026-04-14
Back to Shopstead