Privacy
Your account
An account stores an email address and a password hash. A sign-in is a session that expires. A code sent to confirm the email is stored as a hash until it expires.
Your sites
A site stores the pages you write, the draft you have not published, earlier versions, and the conversation with the assistant while you edit. An invite stores the email of the person you ask to join.
Who can see it
A site stays private until you publish it. Until then, only the people on the site can see it. A published site is public, including the contact details you put on the page.
What this is for
This information is used to run the account and the sites. It is not sold.