Privacy policy
Draft, not yet in force.
In short
- We keep your email, a hash of your password, your wallet records and what your crawls record.
- Card details go to Stripe and never reach our servers.
- We use your data to run and bill your crawls and to support you. We don't sell it.
- Other services get data only when you switch on a crawl option that uses them, and only what the option needs.
A summary for convenience; the sections below are what counts.
1.What we collect
- Account details: your email address and a salted hash of your password.
- Billing records: top-ups, charges and holds in your wallet ledger. Card details are handled by Stripe and never reach our servers.
- Crawl data: the settings you choose and the pages, links and issues each crawl records.
- A session cookie that keeps you logged in, and two short-lived cookies (ten minutes) that secure connecting your Google account.
2.How we use it
To run your crawls, bill for them, keep your account secure and answer support requests. We do not sell your data.
3.Processors
Stripe processes payments.
Not written yet. The hosting provider, email provider and where they process data.
4.Integrations you switch on
The services below receive data only when you switch on a crawl option that uses them. Most need you to connect your own account or key in Settings first, under that service's own terms and privacy policy; PageSpeed Insights also works without a key, using Google's shared quota. We send each one only what the option needs.
- OpenAI
- The prompt you write plus the page text, HTML or title and description you choose, for AI prompts that use an OpenAI model.
- For Google Analytics, Search Console and Sheets: requests for your own property data and the crawl results you export to Sheets. For Gemini AI prompts: the prompt and page content you choose. For PageSpeed Insights: the URLs tested.
- Anthropic
- The prompt you write plus the page content you choose, for AI prompts that use a Claude model.
- Ahrefs
- The crawled URLs looked up for link metrics.
- Majestic
- The crawled URLs looked up for link metrics.
API keys, saved passwords and Google tokens are stored encrypted (AES-256-GCM) and used only for the crawls and exports you set up. Deleting them in Settings, or disconnecting Google, removes them straight away.
5.Retention and deletion
- Crawls, schedules and saved keys are kept until you delete them. Deleting a crawl removes its results straight away.
- You can delete your whole account in Settings, under Account. That removes your crawls, schedules, saved keys and logins, wallet and its history at once.
Not written yet. Retention of backups and of billing records we must keep by law.
6.Your rights
- See and correct your name and email in Settings, under Account.
- Download what we hold about your account as a JSON file there too; crawl results download as CSV from each crawl.
- Delete your account there at any time.
Not written yet. The legal basis for processing, and rights specific to the jurisdictions we serve.
Questions about this page: [email protected]
Also: Terms of service