Privacy Policy

What we collect

When you create an account, we collect your name, email address, and a hashed password (or, if you sign in with Google, your Google account's email and name — we never see or store your Google password).

When you add a site to scan, we store the domain you entered and the results of each scan: page-level metadata (titles, headings, word counts, response codes), which checks passed or failed and why, and aggregate scores. We do not store a copy of your site's pages or full HTML — only the specific metadata needed to show you a report.

What we don't do

• We don't sell your data to third parties.
• We don't use your scan data to train any model or share it with anyone besides you.
• We don't run your data through any real-time AI citation check — the GEO score is computed entirely from deterministic checks against your own site, not from querying third-party AI systems about you.

Cookies and sessions

We use a single, essential, httpOnly session cookie to keep you signed in. It isn't used for tracking or advertising, and it never leaves our own servers in a form your browser's JavaScript can read.

Third parties

If you sign in with Google, Google processes your OAuth sign-in per its own privacy policy. Our infrastructure (hosting, database) is operated by standard cloud providers who process data only on our behalf, under contract, to run the service — they don't use it for their own purposes.

Deleting your data

You can delete any tracked site (and all its scans) at any time from your dashboard. You can delete your entire account from Settings — this immediately and permanently removes your account, every tracked site, and every scan and report associated with it. There's no recovery period; we mean permanently.

Contact

Questions about this policy or your data: [email protected].