Privacy Policy

• Account details. Your email address. If you sign in with Google, also the name and profile picture Google shares with us.
• Audits. The URLs you submit, the results we produce and a screenshot of each audited page, which we capture the way a visitor’s browser would and save with the audit. If you audit the same page again within 24 hours, we show you your saved result instead of running it again; saved audits are only ever shown back to whoever ran them. Audits run without an account are saved the same way, with no link to who ran them.
• Billing. Your plan and a customer reference from Stripe. Stripe collects your payment details directly; we never receive your full card number.
• Search Console, if you connect it. An access token from Google, the properties you choose, and their daily clicks and impressions.
• Technical data. If you audit without an account, your IP address, to enforce the daily free limit. Our hosting provider also keeps standard server logs, such as IP address, browser type and pages requested, for security and troubleshooting. We also record usage figures for AI requests, such as token counts and cost, without the page content.

• To run audits, show your results and keep your history: needed to provide the service you asked for.
• To manage your account, subscription and payments: needed to provide the service, and to meet tax and accounting duties.
• To show your search traffic next to your audits, only if you connect Search Console: based on your consent, which you can withdraw.
• To enforce limits, prevent abuse, keep SiteIQ secure and fix problems: our legitimate interest in running a reliable service.
• To email you about your account, billing or important changes to SiteIQ. We do not send marketing email.

We do not sell your personal data, share it for advertising, or use it to build advertising profiles.

To produce a report, we send the audited page’s content and screenshot to Anthropic, whose AI models generate the analysis. Anthropic processes this under its commercial terms, which do not allow it to train its models on this data. The pages you audit are usually public, but they may contain personal data if the page itself does.

We share data only with providers that help us run SiteIQ, each limited to what it needs:

• Vercel: hosting, page loading and server logs.
• Supabase: sign-in and our database.
• Anthropic: AI analysis of audited pages.
• Stripe: payments and billing.
• Google: sign-in with Google and Search Console, when you choose to use them.

We may also disclose data when the law requires it, to protect our rights or users’ safety, or to a buyer if Prizma or SiteIQ is ever sold, in which case this policy continues to apply to your data.

SiteIQ uses read-only access to Google Search Console solely to show your own search performance inside SiteIQ. We do not use this data for advertising, do not sell it, do not transfer it to others except as needed to run that feature, and do not use it to train AI models. SiteIQ’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account permissions.

• Account data and audit history, including audit screenshots: while your account exists. Your plan controls how much history you can see.
• Audits run without an account: kept without any link to you, because we cannot tell who ran them. If you want one removed, send us its URL.
• When you ask us to delete your account, we delete its data, including any Search Console connection, within 30 days.
• Free-limit records tied to an IP address: deleted after the daily limit resets.
• Billing records: as long as tax and accounting law requires, usually several years, held mainly by Stripe.
• Backups and server logs expire on our providers’ standard schedules.

SiteIQ uses only cookies needed to keep you signed in, plus temporary browser storage so a refreshed results page does not run the audit again. We do not use analytics, advertising or tracking cookies, so there is nothing to opt out of. If that changes, we will update this policy and ask for consent where the law requires it.

You can ask us to give you a copy of your data, correct it, delete it, or export it in a portable format. You can also object to or ask us to restrict some uses, and withdraw consent you have given, such as disconnecting Search Console. Email hello@prizmatech.co from your account email and we will reply within 30 days. We will not treat you differently for exercising these rights.

If you are in the UK or EU, you can also complain to your data protection authority; in the UK that is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve it with you first.

Prizma and most of our providers are based in the United States, so your data is processed there. Where UK or EU law applies, we rely on our providers’ standard data protection terms, such as Standard Contractual Clauses and the UK addendum, to protect it.

Data is encrypted in transit, access to our database is restricted, and payment details stay with Stripe. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authorities as the law requires.

SiteIQ is not meant for anyone under 16, and we do not knowingly collect their data. If you think we have, contact us and we will delete it.

If we change this policy in a material way, we will tell account holders by email or in the product before the change takes effect. The date at the top shows when it last changed.

Prizma LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Email hello@prizmatech.co.