Privacy Policy

Data controller

SiteVett is operated by Founder. For privacy inquiries, contact privacy@sitevett.com.

What we collect

When you create an account, we collect:

• The URL you scanned
• The QA report (issue, check results, screenshots of the scanned site)
• Scan metadata (date, page count, check count)

We also transparently process your IP address to implement caching and abuse prevention (records automatically deleted after 3 hours).

We don't retain sensitive data in plain text. When you create a login account, we collect your email address and hashed password only.

Data from scanned websites

When scanning a website, SiteVett crawls publicly accessible pages and collects:

• Page HTML content (sent to LanguageTool for grammar checking)
• Screenshots of each page (sent to Google PageSpeed Insights for performance audits)
• Page URLs (sent to Google PageSpeed Insights for performance audits)

SiteVett only scans publicly accessible pages and does not authenticate to target websites. Reports may contain content visible on the scanned website. Screenshots are treated as part of the user report (30 days) or stored on external servers for 7 days.

Lawful basis

We process your data on the lawful basis of providing the scanning service you signed up for and legitimate interest to prevent abuse and maintain service security.

How we use it

• To scan and generate reports
• To show your scan history and dashboard
• To analyze page flaws and process properties
• To send transactional emails (verification, password reset)

Third-party services

• Stripe — Payment processing and authentication
• Google Gemini API — Visual AI checks, screenshots sent to Google's API per their API terms
• Google PageSpeed Insights — Performance audits
• LanguageTool — Grammar and spelling checks
• Google Cloud Run — Computation hosting
• Cloudflare — DDoS protection and anonymous scans counting

See Cloudflare's privacy policy for details on their services.

International transfers

Your data may be processed in the United States by our service providers. These transfers are governed by standard contractual clauses.

Cookies

Essential cookies only (authentication, no tracking or advertising). See our cookies policy for full details.

Data retention

• Free tier — Scans expire after 7 days
• Paid plans — Scans retained for the duration of your subscription
• Single scans — Reports are permanent (link never expires)
• Account deletion — If you delete your account, all associated data is permanently deleted

Anonymous scans

When you perform a single scan without creating an account, we collect:

• Email address (from initial link check) — deleted after 72 hours
• Automatically cleared from our servers after 7 days

Report links remain accessible after deletion, but you lose access to your scan history if you don't have an account.

Your rights

Under applicable data protection law, you have the right to:

• Access your data on the dashboard
• Delete individual scans or your entire account (Account → Delete Account)
• Export reports as HTML or JSON
• Restrict processing of your data in certain circumstances
• Object to processing based on legitimate interest
• Lodge a complaint with a supervisory authority, in particular in the EU or UK member state of your habitual residence, place of work, or in the place of the alleged infringement

To exercise any of these rights, email privacy@sitevett.com.

Children

SiteVett is not intended for anyone under 16. We do not knowingly collect data from children. If you believe we have a privacy policy regarding children.

Security

HTTPS encryption. TLS/SSL protocols. Passwords hashed with bcrypt (API standard + salt).

Data breach notification

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours as required by GDPR.

Contact

Privacy questions or data requests: privacy@sitevett.com