Legal
Privacy policy
Last updated 1 November 2026. This template must be reviewed by your legal adviser before launch.
What we collect
Free audit details you enter (business name, link, location, services), your account email and name, payment records from Razorpay (we never see or store card details), support messages, and a hashed version of your IP address used only for abuse prevention.
Public business data
To audit a business we read public listing data through the Google Places API. We store the results with your audit.
How we use it
To run audits, deliver reports, provide the optimisation service you buy, process payments, prevent abuse and answer support requests. Audit facts are sent to Google Gemini to write explanations; Gemini is used server-side under Google's API terms.
Sharing
We share data only with the processors needed to run the service: Supabase (database and sign-in), Vercel (hosting), Razorpay (payments), Google (Places API, Gemini, sign-in). We don't sell personal data.
Your rights
You can ask us to access, correct or delete your data through the contact page. Removing our Manager access from your Business Profile ends our access to it immediately.
Retention
Audit and account data are kept while your account is active and as required for tax and accounting records.