Privacy Policy

We only collect the data necessary to deliver and protect the Service:

• Account data: email address, authentication metadata, and plan details when you sign up or log in.
• Billing data: payment status, customer IDs, and invoices handled by our payment provider (no raw card numbers touch our servers).
• Content data: domains, URLs, logos, and other inputs you submit so we can generate reports, monitoring insights, or featured placements.
• Usage & device data: event logs, pages viewed, approximate location (derived from IP), and technical information needed to maintain performance and security.
• Communications: support requests, feedback, and any information you send us by email or forms.

We process personal data on these legal grounds (Art. 6 GDPR):

• Contract (Art. 6(1)(b)): create accounts, deliver analyses, manage subscriptions, and provide support.
• Legal obligations (Art. 6(1)(c)): fulfill tax, accounting, and regulatory requirements.
• Legitimate interests (Art. 6(1)(f)): secure infrastructure, prevent fraud, measure product usage, and improve features. Where required, we balance these interests against your rights.
• Consent (Art. 6(1)(a)): send optional communication, place non-essential cookies, or showcase your project publicly. You can withdraw consent at any time via the channels listed below.

We rely on vetted service providers that act as processors under Art. 28 GDPR. They only access data necessary to perform their tasks and are bound by contracts.

• Hosting & infrastructure: Vercel, database and storage providers.
• Payments: Stripe for subscription billing and invoicing.
• Email delivery: Resend (transactional and notification emails).
• Analytics & monitoring: Datafast to understand how the product is used.
• Integrations used for reports, such as PageSpeed, Chrome UX, and WHOIS data sources, which may process the URLs you submit.

Some providers operate outside the EU/EEA. In those cases we rely on EU adequacy decisions or Standard Contractual Clauses. A current list of subprocessors or a Data Processing Agreement (DPA) is available on request.

We keep personal data only for as long as necessary:

• Account data: stored while your account is active.
• Billing data: retained up to 10 years to meet tax and accounting rules.
• Content and monitoring data: removed or anonymized when you delete a project or after it becomes inactive, unless legal obligations require longer retention.
• Support communications and logs: retained for a reasonable period to resolve issues and maintain security.

Backups are cycled automatically; data may persist in archives for a short time.

You can exercise the following rights at any time:

• Access, rectification, deletion, or restriction of your personal data.
• Data portability in a structured, commonly used format.
• Objection to processing based on legitimate interests.
• Withdrawal of consent without affecting prior processing.

Email [email protected] with enough detail to verify your identity. You also have the right to lodge a complaint with your local supervisory authority.