Privacy Policy
Last updated: 26 June 2026
Data controller
ComeBuyOur (hello@comebuyour.com).
What we collect
Email address (for magic link login), business information you provide during onboarding, payment details (handled entirely by Stripe — we never see your card number), and website enquiries submitted through your generated site's contact form.
How we use it
To build and host your website, to send you transactional emails (magic links, build notifications, billing), and to contact you about your account.
Payment data
Card and payment processing is handled by Stripe. See stripe.com/privacy.
Hosting
Our backend runs on Railway; generated sites are hosted on Cloudflare Pages. Both are GDPR-compliant processors.
Your rights
You have the right to access, correction, deletion, objection and portability under UK GDPR. Email hello@comebuyour.com to exercise them. You may also complain to the ICO (ico.org.uk).
Retention
Account data is kept while your account is active. Contact enquiries from your generated site are kept for 12 months.
Cookies
We use a single session token stored in localStorage for authentication. No tracking cookies.