Privacy Policy

1. Information we collect

We collect only what we need to run the service:

• URLs you submit. The website address you enter so we can fetch and analyze it.
• IP address. Logged automatically to enforce rate limits and prevent abuse. Not linked to your identity.
• Payment and contact information. For paid reports, your email address and payment details are collected by Stripe, our payment processor. We receive your email address from Stripe after a successful payment so we can associate the report with your purchase.
• Account information. If you create an account, we store your email address and the authentication details managed by Clerk, our auth provider.
• Audit results. The findings generated for paid reports are stored in our database so you can access your report after purchase.
• Usage and log data. Basic logs such as audit type, score, load time, and number of findings — used to monitor service health, detect abuse, and improve the product. These logs do not include the full HTML of websites we fetch.

2. Website content we fetch

To perform an audit, we fetch the publicly accessible HTML of the URL you submit — the same content any browser or search engine crawler would see. We do not store the raw HTML of websites we analyze after the audit is complete. We only submit URLs to our AI analysis provider (Anthropic) for the purpose of generating your report, and that content is not used to train AI models.

3. How we use information

We use the information above to:

• Fetch and analyze the website you submit and generate your audit report.
• Enforce rate limits and prevent abuse of the free audit tool.
• Process payments and deliver paid reports.
• Store paid reports so you can access them after purchase.
• Monitor service performance, troubleshoot problems, and improve reliability.
• Communicate with you about your report or account if you contact us.

4. Sharing

We do not sell your personal information. We share information only in these limited situations:

• Service providers. We use trusted third-party processors under contract. They may only use your information to provide services to us.
• Legal and safety. We may disclose information if reasonably necessary to comply with law, protect our rights or those of others, or respond to a valid legal process.
• Business changes. If GradeMySite is involved in a merger, acquisition, or similar event, your information may be transferred as part of that transaction under similar protections.

5. Service providers we use

Depending on your use of the service, data may be processed by:

• Vercel — web hosting and serverless functions.
• Neon — database storage for audit logs and paid report results.
• Anthropic — AI analysis of website content to generate plain-English findings.
• Stripe — payment processing for paid reports.
• Clerk — account authentication and session management (for signed-in users).

Provider usage may evolve; we update this policy when there are meaningful changes.

6. Data retention

• Free audit results. Not stored. The mini-audit result is returned to your browser session only and is not saved to our database.
• Paid report results. Stored in our database so you can access your report via its unique URL. We retain paid reports indefinitely unless you request deletion.
• Audit logs. Aggregate usage logs (type, score, timing) are retained for service monitoring purposes.
• IP-based rate limit records. Retained for up to 2 hours and then automatically deleted.
• Account data. If you close your account or request deletion, we will remove or de-identify personal data we no longer need.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and rate limiting to prevent abuse. No online service can guarantee perfect security, but we work to reduce risk and respond quickly to issues.

8. Your choices

• Access and deletion. Contact us at support@grademysite.co to request access to or deletion of your data.
• Account deletion. Signed-in users can contact us to close their account and remove associated data.

9. Children

GradeMySite is designed for adults managing or evaluating business websites. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will address it promptly.

10. International users

GradeMySite is operated from the United States. If you use the service from outside the U.S., your information may be processed in the U.S. or other locations where our service providers operate.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of the page. Significant changes will be communicated via the site or by email where appropriate.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at: support@grademysite.co

For the terms that govern your use of GradeMySite, please see our Terms of Service.