Privacy Policy

When you create an account we collect your email address. When you submit a site for auditing we store the domain or URL you provide. We also collect basic usage data: which pages you visit inside the product, audit jobs you trigger, and standard server logs (IP address, user agent, timestamp).

We do not collect payment card numbers directly. Payments are handled by a third-party processor and we receive only a transaction reference.

We use your email address to send you audit reports and product-related communications (account notices, security alerts). We use the domains you submit solely to run the audits you request.

We use aggregate, anonymised usage data to improve the product: understanding which audit checks are most useful and where the interface is confusing. This data is not linked back to individual accounts in any reports we produce internally.

We do not sell your data to third parties. We do not share your email address or domain list with advertisers. We do not use your data to train external machine learning models without explicit consent.

Audit results are retained for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, billing records). You can request deletion at any time by emailing us.

We use third-party infrastructure to host the product (servers, database, email delivery). These providers process data on our behalf under data processing agreements. We will update this section with a full sub-processor list before the full policy is published.

You have the right to access, correct, or delete the personal data we hold about you. To make a request, email us at the address below. We will respond within 30 days.