Privacy Policy
Effective September 12, 2026
SubSaharaData LLC operates SiteThesis and is responsible for the personal information collected through this service. References to "SiteThesis," "we," or "us" mean SubSaharaData LLC.
Information we collect
We collect information you submit, including your name, email address, business concept, candidate locations, investment assumptions, project context and documents you choose to upload, such as site plans, lease materials, operating data and prior studies. Stripe processes payment-card information. SiteThesis and SubSaharaData LLC do not store complete payment-card details.
How we use information
We use submitted information to validate scope, process orders, prepare and deliver reports, send requested sample materials and one related follow-up, communicate with you, improve service quality, prevent misuse and comply with legal obligations. Customer documents support the customer's requested analysis. We will not use identifiable customer documents to train a shared machine-learning model without separate, explicit permission.
Sharing and service providers
We use service providers for payments, private file storage, hosting, analytics, communications and report production. Custom-report requests and document links may pass through our communications provider. Those providers may retain limited records under their own legal and operational requirements. We do not sell personal information. We may disclose information when required by law or necessary to protect our rights and users.
Retention and deletion
We normally retain completed transaction and project records for up to 24 months. Sample-report lead records are normally deleted within 90 days. Secure final-report download links expire after 14 days, and final-report files are normally deleted from delivery storage within 90 days after delivery. We normally delete supporting documents within 90 days after report delivery or, when no delivery date applies, within 90 days after submission. File names and limited transaction metadata may remain with the project record after the underlying document is deleted. We normally delete incomplete or unpaid order records after seven days and uploads that are not attached to a submitted request after three days. Automated deletion runs daily, so removal may occur within 24 hours after a retention period ends. We may retain limited information longer when required by tax, accounting, legal, fraud-prevention or dispute-resolution obligations.
Security
We restrict operational order records and uploaded documents to private storage and authenticated internal access. We use reasonable administrative and technical safeguards, but no online system can guarantee absolute security.
Your choices
You may unsubscribe from the sample-report follow-up through the link in that email. You may also request access, correction or deletion of personal information, subject to legal and operational retention requirements, by contacting support@sitethesis.com.
Changes
We may update this policy as the service changes. The effective date identifies the current version.