Privacy Policy

Effective [EFFECTIVE DATE]

This policy says what [LEGAL NAME] ("we") collects when you use Auditely, why, who else sees it, and the choices you have. It's written for people in the United States, California included.

What we collect

Your account and profile: your email address, how you sign in (an emailed link, Google, or a password you set, which Supabase keeps only as a one-way hash), and what you add in Settings, such as your name, company, website, logo, contact details and booking link.
Searches and leads: the niches and places you search, the businesses found, the contact emails found for them, and your notes and outreach.
Audits: the websites you audit, their scores and findings, and the summaries and draft emails written for them.
Your mailbox and HubSpot: if you connect them, the details needed to use them, stored encrypted.
Billing: your plan and whether it's paid. Stripe handles the payment itself: we never see your card number.
Free-audit visitors: the website you audit and its results; a salted hash of your network address, never the address itself, so each network gets one free audit; a cookie that brings your audit back; and Vercel's bot check, which reads signals from your browser to tell people from bots.
Visits: which pages are opened, the site that sent you there, and your browser, type of device and country, counted by Vercel Web Analytics. Report links aren't counted, and other private addresses are counted without the part that identifies them.

Like most websites, our hosting keeps short-lived request logs, network addresses included, to run and protect the service.

How we use it

To run Auditely: sign you in, run your searches and audits, write summaries and drafts, send the emails you choose to send, and keep track of your plan and allowances.
To keep it safe: stop abuse, bots and fraud, and fix what breaks.
To make it better: see which pages people visit and where they come from.
To tell you about your account: sign-in links, receipts, and changes that matter.

Who we share it with

Service providers that run parts of Auditely for us, each only for its own job:

Supabase: our database and sign-in.
Vercel: hosting, visit counts, and the bot check on the free audit.
Stripe: payments and sales tax.
Google: Places for business details, PageSpeed for audits, and Google sign-in if you use it.
Groq: writing the summaries and draft emails.
Hunter, Tomba, Snov, Apollo and Verifalia: finding and checking business email addresses.
Resend: delivering email.
HubSpot, when you connect it: the leads you send there.

We don't sell your personal information or share it for advertising. We may also share it when the law requires it, to protect people or Auditely, or with a buyer if the business is sold, who must keep to this policy.

How long we keep it

Business details from Google Maps: 30 days.
Free-audit records: up to 90 days, unless you keep your audit by signing up.
Your account's data: until you delete it, or we close the account.

Stripe keeps billing records as the law requires. Backups and logs are kept for a short time, then removed.

Your rights

You can ask to know what we hold about you, to get a copy, to correct it or to delete it. Email [CONTACT EMAIL]; we'll check it's you and answer within 45 days.

If you live in California, the CCPA gives you these rights: to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We don't sell or share it, but you can still ask. Someone you authorize can ask for you. We won't treat you differently for using any of these rights.

Cookies

Auditely uses only what it needs to work: sign-in cookies that keep you signed in, your light or dark theme saved in your browser, and the free audit's cookie, which brings back the audit you ran. Vercel's bot check may set its own. Vercel Web Analytics counts visits without cookies. There are no advertising cookies, and nothing follows you to other sites.

Security

Everything travels over HTTPS. Mailbox and HubSpot details are stored encrypted, and each account can reach only its own data. No system is perfectly secure: if a breach affects your information, we'll tell you as the law requires.

Children

Auditely is for businesses. It isn't for children under 13, and we don't knowingly collect their information. If you think a child has given us some, email us and we'll delete it.

Changes

We'll update this policy as Auditely changes, and the date at the top says when it last did. If a change matters, we'll email you or show a notice in the app first. Our Terms explain how you may use Auditely.

Contact

Questions about your privacy: email [CONTACT EMAIL], or write to [LEGAL NAME], [MAILING ADDRESS].

What we collect

Your account and profile: your email address, how you sign in (an emailed link, Google, or a password you set, which Supabase keeps only as a one-way hash), and what you add in Settings, such as your name, company, website, logo, contact details and booking link.

Searches and leads: the niches and places you search, the businesses found, the contact emails found for them, and your notes and outreach.

Audits: the websites you audit, their scores and findings, and the summaries and draft emails written for them.

Your mailbox and HubSpot: if you connect them, the details needed to use them, stored encrypted.

Billing: your plan and whether it's paid. Stripe handles the payment itself: we never see your card number.

Free-audit visitors: the website you audit and its results; a salted hash of your network address, never the address itself, so each network gets one free audit; a cookie that brings your audit back; and Vercel's bot check, which reads signals from your browser to tell people from bots.

Visits: which pages are opened, the site that sent you there, and your browser, type of device and country, counted by Vercel Web Analytics. Report links aren't counted, and other private addresses are counted without the part that identifies them.

Like most websites, our hosting keeps short-lived request logs, network addresses included, to run and protect the service.

How we use it

To run Auditely: sign you in, run your searches and audits, write summaries and drafts, send the emails you choose to send, and keep track of your plan and allowances.

To keep it safe: stop abuse, bots and fraud, and fix what breaks.

To make it better: see which pages people visit and where they come from.

To tell you about your account: sign-in links, receipts, and changes that matter.

Who we share it with

Service providers that run parts of Auditely for us, each only for its own job:

Supabase: our database and sign-in.

Vercel: hosting, visit counts, and the bot check on the free audit.

Stripe: payments and sales tax.

Google: Places for business details, PageSpeed for audits, and Google sign-in if you use it.

Groq: writing the summaries and draft emails.

Hunter, Tomba, Snov, Apollo and Verifalia: finding and checking business email addresses.

Resend: delivering email.

HubSpot, when you connect it: the leads you send there.

Your rights

You can ask to know what we hold about you, to get a copy, to correct it or to delete it. Email [CONTACT EMAIL]; we'll check it's you and answer within 45 days.