Data We Collect

AI Search Audit only stores scan results. We do not store full page HTML in production. When you submit a URL for scanning, our engine fetches the page to analyze its technical readiness and retains the resulting report for your history.

Account Information

When you create an account, we collect your name and email address to manage your projects, plans, and billing. Authentication is handled by our authentication provider and credentials are never stored in plain text.

How We Use Data

To perform and store your website audits.
To manage your subscription and billing.
To improve the accuracy of our validation rules.
To respond to support requests.

Analytics & Cookies

We use PostHog to understand how the product is used. It records the pages you visit and a small, fixed set of product actions — starting and finishing a scan, opening a report, pressing an upgrade or checkout button, signing up, and signing in.

For a scanned site we send only the hostname, never the full URL, so the specific pages you audit are not shared. If you are signed in, events are linked to your account using an internal account identifier; we do not send your name or email address to PostHog. Sensitive values that can appear in a link — most importantly password-reset tokens — are stripped before anything is sent.

We do not use session recording, and we do not record your keystrokes, form input, or page contents. PostHog stores a cookie and a small amount of browser storage so repeat visits are recognised as the same person rather than counted as new ones. You can block this with any standard tracker-blocking extension or browser setting; the product works exactly the same either way.

We do not sell your personal data. We share data only with service providers that help operate the product — hosting, billing, transactional email, and the analytics described above — under strict confidentiality obligations.

Data Retention

Scan reports belonging to an account are retained while that account is active, and are deleted along with everything else the moment you delete the account.

Scans run without an account are not attached to anyone. They are reachable only by the exact report link produced at the time, and we delete them automatically 90 days after the scan. Sign in before scanning if you want a report kept.

We also prune operational records on a schedule: rate-limit counters after two days, payment-provider event records after 30 days, and abandoned checkouts after one day.

Security

All data is encrypted in transit with TLS. Our database is hosted on managed infrastructure with encryption at rest enabled by the provider. Access to production infrastructure is limited and audited. See our Security page for details.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can do the last two yourself, immediately, from Settings: Download my data exports everything the account holds as a single JSON file, and Delete my account permanently removes your account, projects, scans, reports, schedules and purchase records — cancelling any active subscription first. For anything else, contact support@aisearchaudit.pro.

Contact

Questions about this policy? Reach us at support@aisearchaudit.pro.