Effective date: March 1, 2026| Last updated: March 1, 2026
Tethyx Media, LLC doing business as NinjaSite ("NinjaSite," "we," "us," or "our"), operates NinjaSite.biz and NinjaSite.ai and the related account, website creation, hosting, business outreach, affiliate, referral, and support services that link to this Privacy Policy. Contact us about privacy at privacy@ninjasite.ai
This policy explains how we collect, use, disclose, retain, and protect personal information and how individuals can exercise applicable privacy rights. It covers visitors, prospective and existing customers, members, affiliates, business contacts, and other individuals whose information we process in operating these services. Personal information means information that identifies, relates to, or can reasonably be linked with an individual, as defined by applicable law.
This policy is a description of our practices. It is not a substitute for consent where consent is required, and visiting a website or accepting our Terms and Conditions does not by itself provide consent to advertising texts, calls, optional tracking, or every use described here. Nothing in this policy waives a right that applicable law does not permit you to waive.
We determine the purposes and means of processing information used to administer NinjaSite accounts, bill customers, operate our affiliate program, manage our own marketing, prevent abuse, and respond to privacy requests. For these activities, we generally act as a business or controller under applicable privacy laws.
When we host or manage a website for a business customer and process its visitor inquiries or other customer information solely on that business's documented instructions, we generally act as its service provider or processor. The business is responsible for its own privacy notice, lawful instructions, and customer relationship. Contact that business first about information you submitted to its website. We will assist it with applicable requests and legal obligations. If we independently use information for our own purposes, this policy applies to that separate use.
Payment providers, financing providers, social platforms, and independent affiliates may act as separate businesses or controllers for their own activities. Their policies apply to those activities. Calling a recipient a service provider in this policy does not replace the contracts or restrictions required for that legal status.
Account and contact information. We collect information you provide when registering, purchasing, contacting us, or participating in our programs, such as your name, email address, telephone number, mailing address, business name, account identifier, login information, communication preferences, and information about your authority to act for a business.
Orders and transactions. We process purchased products, membership status, order identifiers, billing contact details, transaction amounts, payment status, refunds, disputes, and payment-provider references. Whop and other payment providers used at checkout may collect payment credentials and process transactions under their own policies.
Affiliate and compensation records. We process referral identifiers, attributed visits and purchases, business assignments, outreach activity, commission calculations and adjustments, payout status, fraud-review records, and information needed for tax reporting or verification. Sensitive tax or payout information is collected only where needed and through the designated process.
Business and website content. We process business descriptions, services, business addresses and telephone numbers, photographs, reviews, ratings, public profiles, website content, domain information, and material provided by users or obtained from business data sources. A business record may contain personal information, particularly where it relates to a sole proprietor, an employee, or a reviewer. Public availability does not automatically eliminate all privacy obligations or grant copyright permission.
Outreach and response information. We process the businesses selected for outreach, delivery addresses, permitted email or telephone contact details, campaign and Business Outreach Package records, delivery or failure status, link and QR-code interactions, website visits, opt-outs, suppression records, and resulting purchases or commissions. Attribution can connect an outreach response to a business, campaign, or referring account.
Support and communications. We process messages, attachments, account issues, privacy requests, guarantee claims, complaints, and other communications you send. If we record a call or meeting, we provide notice and obtain consent when required. Do not submit another person's private information unless you are authorized to do so.
Device and usage information. Depending on the features you use and your settings, our systems and permitted providers collect IP addresses, browser and device characteristics, operating system, referring pages, timestamps, pages viewed, interactions, approximate location inferred from an IP address, diagnostic information, and security logs. Precise device location is not the same as approximate IP-based location and requires separate assessment and any necessary permission.
Cookie and advertising data. Cookies, local storage, pixels, link parameters, and comparable technologies can maintain sessions, protect accounts, remember preferences, measure usage, attribute referrals, and support advertising where enabled. Section 7 identifies the tracking and advertising details that apply to our services.
We obtain information directly from you; through your use of our services; from an authorized business representative; from affiliates and referral sources; from payment, verification, fraud-prevention, hosting, and communications providers; and from business directories, public business profiles, social pages, reviews, and business-data vendors used for our services.
We may combine records from these sources when appropriate for the purposes disclosed here. We do not treat a public telephone number, an affiliate referral, or a purchased business record as automatic permission to send marketing through every channel. We assess the requirements that apply to the particular use.
We use personal information to create and secure accounts; provide website research, design, generation, hosting, and editing; administer business outreach; process transactions; provide support; maintain referral attribution; calculate and pay commissions; administer promotions and guarantee claims; and communicate about the service you requested.
We also use information to troubleshoot and improve services, analyze performance, detect impersonation or unauthorized activity, prevent fraud, enforce agreements, protect rights and safety, maintain business records, comply with legal obligations, respond to lawful requests, and establish or defend legal claims. Marketing and optional analytics or advertising uses remain subject to applicable notices, consent requirements, and opt-out rights.
We do not use a privacy request as a reason to retaliate against an individual. Information gathered to verify or resolve a privacy request is used for that purpose, recordkeeping, and security, rather than unrelated marketing.
Service providers and contractors. We disclose relevant information to providers that perform hosting, storage, website generation, artificial intelligence processing, analytics, customer support, security, billing, tax administration, printing, mailing, and permitted communications functions. Access should be limited to what each provider needs for its role, under the contractual protections required by applicable law.
Payment and financing providers. Checkout or payout providers receive the information needed to process a transaction or payout. If you choose a buy now, pay later product, the financing provider determines eligibility and applies its separate terms and privacy notice. NinjaSite does not obtain your consent to financing merely through this policy.
Affiliates and business assignments. Affiliates may receive information needed to understand their referrals, assigned businesses, outreach status, and compensation. This may include a business identifier, business contact details where authorized, purchase status, transaction amount, and commission information. Access to account credentials, complete payment credentials, or unrelated private communications is not authorized by an affiliate relationship.
Business customers. Where you submit an inquiry to a business website we host, we transmit or make the inquiry available to that business to respond. Information that you or an authorized business representative chooses to publish on a website can be viewed, indexed, copied, or cached by others.
Advertising and measurement partners. Where enabled, we disclose the identifiers and interaction information described in Section 7 to the providers identified there, subject to applicable choices. A transfer can legally constitute a sale or sharing even if no money changes hands.
Legal and protective disclosures. We may disclose information when reasonably necessary to comply with law or valid legal process, respond to a government request, protect against fraud or security threats, protect rights or safety, or establish or defend legal claims. We assess the request and applicable law rather than promising to comply with every demand.
Business transactions. Information may be disclosed in a merger, acquisition, financing, restructuring, or transfer of business assets, subject to appropriate confidentiality protections and applicable notice, choice, and purpose restrictions. A business transfer does not eliminate existing legal obligations.
At your direction. We may disclose information when you authorize an integration, request a transfer, publish content, or otherwise direct us to do so. Where consent is required, we obtain it through the relevant process.
Necessary technologies support login, account security, checkout, and essential functionality. Preference, analytics, affiliate-attribution, advertising, and embedded-media technologies have separate purposes and may be subject to consent or opt-out requirements. Blocking some technologies can affect features, and a browser cookie setting does not necessarily communicate every statutory privacy choice.
Where an applicable law gives you the right to opt out of sale, sharing, or targeted advertising, by contacting privacy@ninjasite.ai. We honor recognized opt-out preference signals, including Global Privacy Control, where required by applicable law. Such signals can be browser-specific; where required and technically supported, we also apply the choice to an identified account. A traditional Do Not Track setting is distinct from a legally recognized opt-out preference signal.
Where prior consent is required for optional technologies, they will not be activated until that consent is obtained. You can change or withdraw consent by submitting a request to privacy@ninjasite.ai. We do not require an account to exercise a sale or sharing opt-out. We request only information reasonably needed to apply the choice and do not impose an identity-verification process where the law prohibits it.
We use contact information for appropriate service notices, security alerts, billing communications, support, and marketing permitted by law. Marketing email includes an unsubscribe method. You may also contact support@ninjasite.ai to request that marketing stop. Opting out of marketing does not necessarily stop essential nonmarketing notices about an active account or transaction.
Where we send subscription text messages, the enrollment disclosure states the program, applicable consent terms, message frequency or that frequency varies, potential message and data rates, and assistance and opt-out methods. Reply STOP to unsubscribe or HELP for assistance where the program supports replies. We also honor other reasonable revocation methods required by law. Marketing consent is not a condition of purchasing a product or service.
We do not share mobile opt-in consent or the telephone information associated with that consent with third parties or affiliates for their independent marketing. We may provide it to service providers that help operate the authorized messaging program, subject to appropriate restrictions. A separate disclosure or consent is required for a materially different authorized use.
We retain limited suppression information as needed to respect opt-outs and prevent a later data import from restarting unwanted messages. An opt-out does not require us to erase the record needed to honor it.
Our services may send business information, authorized content, and relevant instructions to artificial intelligence providers to research, draft, design, classify, or generate website and outreach material. Automated processes also support matching, referral attribution, security screening, and service operation. AI output can be inaccurate and should not be treated as verified simply because it was generated automatically.
Do not submit highly sensitive personal information to a generation field unless the feature expressly requests and supports it. Where applicable law provides rights relating to profiling or automated decisions with significant effects, we provide the notices, assessments, choices, and review mechanisms that law requires. This policy does not represent that every automated process is such a decision.
We retain information for the period reasonably necessary to provide the requested service, maintain required business and tax records, verify commissions and guarantees, resolve disputes, prevent fraud, honor opt-outs, and satisfy legal obligations. The relevant period depends on the information category, purpose, account status, legal requirements, potential claims, security needs, and whether deletion or deidentification is reasonably available.
Deletion from active systems may occur separately from deletion from protected backups. Backup data retained for disaster recovery is restricted and removed according to the applicable retention cycle. Legal holds and records needed to honor suppression requests may require limited retention. Account closure does not automatically erase every record, but it also does not authorize indefinite retention without a valid purpose.
We use administrative, technical, and organizational measures appropriate to the information and risks involved. These measures are intended to limit unauthorized access, loss, alteration, or disclosure. No internet transmission or storage method can be guaranteed completely secure. We maintain the security and incident-response obligations required by applicable law; this statement does not excuse a failure to meet them.
Protect your credentials, use available account-security features, and report suspected unauthorized access to support@ninjasite.ai . Do not send payment credentials, government identification, or passwords through ordinary support messages unless a specifically authorized secure process requires them.
Depending on your location and whether the relevant law applies, you may have rights to confirm processing; access personal information; obtain a portable copy; correct inaccuracies; request deletion; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; withdraw consent; and appeal a denied request. These rights are subject to legal conditions and exceptions.
Submit a request to support@ninjasite.ai. Identify the right you wish to exercise and enough information for us to locate the relevant records. For access, correction, or deletion, we may verify identity and authority using proportionate information. We will not require more information than reasonably necessary.
An authorized agent may submit a request where permitted by law. We may require proof of authority and, where allowed, confirmation from the individual. We will explain a denial or limitation and any available appeal process. We respond within the applicable legal deadline, including any permitted extension for which notice is required.
To appeal a privacy decision, contact support@ninjasite.ai with the subject "Privacy Appeal" and identify the original request. We will review it and provide the response and further complaint information required by applicable law. You may also contact your state's attorney general or the relevant supervisory authority.
We do not unlawfully discriminate or retaliate against you for exercising privacy rights. Some requests may affect a feature that necessarily relies on the information, and we will explain that consequence where relevant. We do not condition a statutory right on releasing a legal claim, accepting mediation, or paying a fee prohibited by law.
Texas. Where the Texas Data Privacy and Security Act applies, eligible Texas residents may exercise the rights described in Section 12, including applicable opt-outs and an appeal. The Act contains scope limits and exemptions, including rules relating to commercial or employment contexts. We do not rely on a broad statement that all business-contact data is exempt under every privacy law. Complaints may be directed to the Texas Attorney General through https://www.texasattorneygeneral.gov/consumer-protection.
California. Where the California Consumer Privacy Act applies, the categories, sources, purposes, recipients, and retention disclosures in Sections 3 through 10 provide the corresponding information. Eligible residents may exercise access, deletion, correction, sale or sharing opt-out, and applicable sensitive-information rights without unlawful discrimination. A completed historical disclosure of collection, business-purpose disclosure, and sale or sharing during the preceding 12 months must accompany the verified details in Section 7.
Other United States jurisdictions. Where another state privacy law applies, we provide the rights and processes required by that law even if a particular right is not named here. We do not use the Terms and Conditions to reduce nonwaivable privacy rights.
Outside the United States. Information may be processed in the United States and other countries where our providers operate. Different laws may apply there. Where the law governing a transfer requires safeguards, we use the appropriate safeguards rather than treating website use as blanket consent.
NinjaSite accounts and affiliate participation are intended for adults at least 18 years old and otherwise able to enter a binding agreement. Our services are not directed to children under 13, and we do not knowingly collect their personal information through our own account services. If you believe a child submitted information, contact support@ninjasite.ai so we can investigate and take appropriate action.
Business customers must not use our services to collect children's information or regulated sensitive information without an expressly supported service, appropriate agreement, and all required notices and permissions. An age restriction alone does not eliminate obligations if we become aware that we hold children's information.
We may update this policy to reflect changes in our practices or legal requirements. We will change the last-updated date and provide additional notice or obtain new consent when required. Changes do not authorize a materially different use of previously collected information without the notice, choice, or consent required by law.
Privacy contact: Tethyx Media, LLC doing business as NinjaSite Email: Privacy@ninjasite.ai