Privacy Policy

What we collect

Depending on how you use the tool, we collect:

• The URL you audit and the audit results. Results are cached for 24 hours so repeat runs don't hammer your site, and stored afterwards so we can show your report and compute anonymous benchmark averages.
• Your name and email if you choose to unlock the full report, plus the optional role and company fields you fill in.
• An open-tracking pixel in the report email, so we know whether the report reached you.
• Basic interaction signals on the report page (such as time spent on the preview or clicking "I'd like to talk to someone"), which we use to prioritize follow-up — often called lead scoring.

Why we collect it

We use this data to deliver your audit report, cache results for 24 hours, follow up when you ask for help, improve the checks, and — only if you ticked the optional box — send you occasional AI-visibility tips. Unlocking the report never requires marketing consent.

Who processes it

We use a small set of processors to run the service. Each one only receives what it needs:

• Supabase — database and authentication (audit results, lead details)
• Resend — sends the report and notification emails
• Vercel — hosts the website and runs the audit engine
• Perplexity and OpenRouter — AI analysis; audited URLs and public page content may be sent to these APIs as part of full audits
• Google PageSpeed Insights — measures page performance for full audits

How long we keep it

Audit results are cached for 24 hours and then retained as report history. Lead details are kept while we have a reason to follow up. You can ask us to delete your data at any time and we will remove it without fuss.

Your rights

Under the GDPR and the Icelandic Data Protection Act no. 90/2018 you can ask for access to your data, have it corrected or deleted, restrict or object to processing, receive a copy in a portable format, and withdraw any consent at any time. If you believe we've handled your data badly, you can complain to Persónuvernd, the Icelandic Data Protection Authority (personuvernd.is).