Updated October 21, 2026
Privacy policy
This policy explains what personal data Ship My Website collects, why, how long it is kept and how to exercise your rights, in accordance with the GDPR (Regulation (EU) 2016/679) and the French Data Protection Act.
Data controller
The data controller is Skallup, a French SAS registered with the Lille Métropole Trade and Companies Register under number 952 771 509, Bureau 3, 34 place du Général de Gaulle, 59800 Lille, France. For any question about your data: contact@shipmywebsite.com.
Data we collect
Account: name, email address, organization name, login credentials.
Billing: billing address, VAT number, payment history. Card details are processed directly by Stripe: we never have access to them.
Your websites: the text, images and files that you or your AI add to them.
Usage: technical connection data (IP address, browser, activity logs) and the actions your AI performs on your websites.
Correspondence: your messages to our support team.
If you connect your AI through MCP, we do not see your conversations with it: we only receive the changes it makes to your website. If you use an API key in our editor, your requests go through our platform to be sent to the AI provider you chose.
Purposes and legal bases
Providing the service (building, hosting and publishing your websites, support): performance of the contract.
Billing and accounting: legal obligation.
Securing the platform and preventing abuse: legitimate interest.
Improving the service based on usage statistics: legitimate interest.
Telling you about new features: legitimate interest, with an unsubscribe link in every email.
Your data is never sold or rented.
Recipients and processors
Your data is only accessible to the Skallup staff who need it, and to our providers for their part of the service: OVH SAS (hosting of the platform and websites, France), Stripe (payments, Ireland) and, if you use one through an API key in our editor, the AI provider of your choice (Anthropic, OpenAI, Google…). These providers are contractually bound to protect your data. It may also be disclosed to the authorities where required by law.
Transfers outside the European Union
Your data is hosted in the European Union. Some providers (Stripe, AI providers) may process it in the United States: these transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
Retention periods
Account and websites: as long as your account is active. After your subscription ends, your websites can be downloaded for 30 days and are then deleted; your account data is deleted no later than 90 days after the account is closed.
Invoices: 10 years, as required by the French Commercial Code.
Technical logs: 12 months at most.
People who contacted us without becoming customers: 3 years after the last exchange.
Security
We protect your data with appropriate measures: encrypted connections (HTTPS), access restricted to the people who need it, backups and access monitoring. In the event of a data breach that puts you at risk, we will notify you and the CNIL as provided by the GDPR.
Cookies
This website uses no advertising cookies or third-party trackers. On the platform, only technical cookies needed to sign in to your account are used: they do not require your consent. If we ever add analytics or advertising cookies, we will ask for your consent first.
Data about your websites’ visitors
For the personal data of your websites’ visitors, you are the data controller; Skallup only acts as a processor to host your website (see our terms and conditions). Remember to publish your own legal notice and privacy policy.
Your rights
At any time, you can access, correct or delete your data, request its portability, restrict or object to its processing, and give instructions on what happens to it after your death. Email us at contact@shipmywebsite.com or write to our registered office; we reply within one month at most. If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Changes
We may update this policy. The date of the latest update is shown at the top of the page; for any significant change, we will notify you by email.