Information we collect

We collect information you provide directly, information collected automatically, and information from the service providers we use to operate.

• Account information: when you create an account, our authentication provider (Clerk) processes your name and email address.
• Contact information: when you use our contact form, we collect your name, email, chosen topic, and message.
• Audit inputs: when you run a scan, we collect the website URL or domain you submit and the results we generate.
• Payment information: payments are processed by Stripe. We do not see or store full card numbers. We receive limited billing details such as the last four digits, card brand, and transaction status.
• Usage data: we collect analytics about how the site is used through Google Analytics, plus a hashed form of your IP address and browser user agent used for rate limiting and abuse prevention.

How we use information

• Provide, operate, and maintain our products and services.
• Run the audits you request and deliver results.
• Process payments, subscriptions, and credits.
• Respond to your messages and support requests.
• Protect our services against fraud, abuse, and security threats.
• Improve our products and understand how they are used.
• Comply with legal obligations.

Cookies and analytics

We use cookies and similar technologies for authentication, security, and analytics. For details, see our Cookie Policy.

Service providers we share with

We share information only with the service providers needed to run our business. We do not sell your personal information.

• Clerk: authentication and account management.
• Stripe: payment and subscription processing.
• Supabase: database and storage.
• Vercel: application hosting.
• Cloudflare: bot protection and network security (including Turnstile).
• Google Analytics: usage analytics.

We may also disclose information when required by law or to protect our rights, users, or the public.

Data retention

We retain information for as long as needed to provide the services, comply with our legal obligations, resolve disputes, and enforce our agreements. We delete or anonymize information when it is no longer needed for these purposes.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, reach us through our contact form. We will respond within the timeframe required by applicable law.

Security

We use industry-standard safeguards, including encryption in transit, access controls, and reputable infrastructure providers, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Our services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate from the United States. If you access our services from outside the United States, you understand your information may be processed in the United States, where data protection laws may differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the site.