Data Handling

What we store

• The URL you submit for a saved audit, along with its score, detected issues, and raw signal data (H1 text, schema presence, link counts, etc.)
• Your account email and Supabase-hashed password
• Your Stripe customer and subscription IDs, and subscription status
• Timestamps for account creation and audit runs

What we don't store

• The full HTML or content of pages you audit — only the specific signals described above
• Payment card numbers or bank details, which are handled entirely by Stripe
• Passwords in plain text — these are hashed by Supabase Auth and never visible to us

Where data lives

Account and audit records are stored in a Supabase-hosted Postgres database with row-level security policies, so each account can only read its own rows. Access to raw data is restricted to service-role keys held server-side and never exposed to the browser.

Subprocessors

Retention & deletion

Data is retained while your account is active. Deleting your account removes your profile and audit history from our primary database; billing records are retained as required by Stripe and applicable tax law.