Privacy notice

Data controller: [placeholder: legal entity name and registered address].

What we collect

• Your account: name, email address, password (stored as a one-way hash) and, if you turn it on, a two-factor secret (encrypted).
• The websites you add and the public pages our crawler fetches from them, as described on data retention.
• Connected apps you approve, with the access you granted.
• Security records: sign-ins of connected apps and administrator actions, with IP addresses kept only as a keyed hash.

What we do not do

• We do not send your audit data to an AI model. Analysis in ChatGPT happens only when you connect it, in your own ChatGPT account.
• We do not sell personal data or use it for advertising.
• We do not log in to, change or access private areas of any website.

Your rights

[placeholder: lawful bases, rights of access, correction, deletion and objection, the supervisory authority, and international transfers, to be completed after legal review.] Requests go to support.