What we collect, and what we do not

The short version

We hold your account details, the domains you ask us to scan, and the answers the assistants gave when we asked them about you. We do not sell any of it, we do not build advertising profiles, and we do not use your private data to train models.

What we collect

Because you gave it to us

• Your email address and name, when you create an account or ask for a demo.
• Your email address, and your name and company website if you give them, when you join the waitlist — along with which page and button you joined from, the site that sent you to us, your browser’s time zone and language, and your device type, operating system and browser. We look up your approximate location (city, region and country) from your IP address. Your IP address is shown to our team in the sign-up notification; we store only the approximate location and a one-way hash of the address, used to limit repeated sign-ups.
• The domains, competitors and topics you enter — what tells us what to measure.
• Billing details, handled by Stripe. Card numbers go to Stripe directly and never touch our servers; we store only the subscription state and the last four digits Stripe returns.
• Anything you write to us: support messages, demo requests, feedback.

Because you connected it

If you link Google Search Console or Bing Webmaster Tools, we read the performance data for the properties you select. That connection is optional, read-only, and revocable at your provider at any time without losing the rest of the product.

Because the product produced it

When we run a scan we record the prompts we sent, the verbatim answers that came back, and whether your brand appeared in them. When we run an audit we record what we fetched from the public pages of the site and what the rules concluded. Keeping the raw response is deliberate: a claim you cannot check is a claim you should not trust.

Because a browser sent it

Standard server logs — IP address, user agent, the page requested and when. We use these to keep the service running and to investigate abuse, not to profile you.

Cookies

We set the cookies needed to keep you signed in and to remember your workspace. We also use Google Analytics on this marketing site, which sets its own cookies to count visits and tell a returning visitor from a new one. We do not set advertising cookies and we do not share identifiers with ad networks.

What we crawl

When you audit a site we fetch its public pages, identifying ourselves as BetterfindAuditBot, and we respect robots.txt as specified in RFC 9309. We do not attempt to reach anything behind a login.

Who processes data for us

• Supabase — account records, authentication and the application database.
• Stripe — subscription billing.
• OpenAI — running the prompts we sample against answer engines, and drafting the wording of a fix.
• Firecrawl — fetching and rendering the pages of a site being scanned or audited.
• Google — sign-in, PageSpeed Insights and Chrome field data, Search Console when you connect it, and Google Analytics for traffic to this website.
• Microsoft Bing — Bing Webmaster Tools data, when you connect it.
• Resend — transactional email: sign-in codes, receipts and scan notifications.
• Slack — our internal chat, where the team is told about new accounts and waitlist sign-ups.
• IPinfo — turning a waitlist sign-up’s IP address into an approximate location.
• DataForSEO — backlink, keyword and search-result data used by the audit engine.

Some operate outside your country. Where data moves across a border it is covered by the transfer terms in each provider’s data processing agreement.

How long we keep it

• Account records: while the account exists, then deleted within 90 days of closure.
• Scan and audit history: retained while the account is active, because the value of a measurement is the comparison to the last one.
• Billing records: as long as tax and accounting law requires, which may be longer than the account lives.
• Server logs: rotated within 30 days.

What you can ask us to do

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop processing it. Depending on where you live these may be legal rights; we will honour them either way, and we will not make the product worse for you because you exercised one. Until a dedicated address is published, reach us through the contact page.

Security

Data is encrypted in transit. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure, and we would rather say that than imply otherwise; if we discover a breach affecting your data we will tell you.

Children

This is a business product and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we change this policy in a way that affects you we will say so, rather than quietly re-dating the page. The date at the top is the last change that mattered.

Who we are

Registered office: 30 N Gould St #34523, Sheridan, WY 82801, United States. The work happens in Lahore, Pakistan. Reach us at info@betterfind.ai, or read what we measure and what we will not claim.