Privacy Policy

When you run a scan we store the website address you submit, the public content we read from it, the scores and findings we generate, and a timestamp. We also record a coarse record of the request (such as your IP address) to prevent abuse and rate-limit scans.

If you ask for implementation help we store the name, email address, website and description you provide in that form.

We record lightweight product events — for example that a report was viewed or a checkout was started — so we can understand how the tool is used.

We don't require an account, so we don't hold passwords. We don't read content behind a login, and we don't store card details — payments are processed by Stripe and card data never reaches our servers.

Each report is reachable through a long, unguessable link. Anyone with that link can view the report, so treat it as private and share it only with people you want to see it.

We use the data above to produce your report, to process payments, to reply to implementation requests, to prevent abuse, and to improve the product. We do not sell your data or use it for advertising.

We use a hosted database and application platform to run this service, Stripe for payment processing, and an AI provider that helps write the plain-language summary and recommendations in your report. These providers process data on our behalf.

Audits and findings are kept so your report link continues to work. Lead submissions are kept while we're in contact with you and for our own records afterwards. You can ask us to delete your audit or lead data at any time.

You can request a copy or deletion of the data associated with your report or enquiry by contacting us and including the report link or the email address you used.