Privacy notice

What we store. Your email address, a bcrypt hash of your password (never the password itself), the URLs you scan, the reports generated from them, your AI conversations, and your billing plan. Account data and saved conversations are stored online in Cloudflare D1.

Cookies. One strictly necessary cookie holds your session. It is HTTP-only, SameSite=Lax and, in production, Secure. A second cookie remembers your preferences, which may also be stored on your account. This version does not include optional analytics trackers.

Payments. Card data is handled entirely by Stripe. This application stores only a Stripe customer id and subscription status.

AI processing. When you ask the assistant a question or generate a briefing, your message, recent conversation context, and any selected audit findings are processed by Cloudflare Workers AI. Your account password and payment card details are not included. Conversations and generated answers are saved to your account so you can return to them. AI answers are automated suggestions that you should review before acting on them.

Deletion. Deleting your account removes your sessions, scans, reports, and saved AI conversations by cascade.

This template text is a starting point, not legal advice. Have counsel review it before you launch commercially.