What we scan, what we don't, and what we keep

Publicly accessible pages on the website you provide -- the same pages any visitor to your site could see. We fetch one page (the URL you submit) at mobile screen size and read what's on it: whether a phone number is easy to find, whether a contact form exists and how long it is, whether the page loads reasonably fast on mobile, and similar publicly-visible facts.

Only the answers you choose to provide in the short questionnaire. Every question can be skipped -- "I don't know" is a valid, honest answer and is never scored as a negative finding.

• We do not log into any private system (CRM, email, admin panel).
• We do not access your CRM or customer data.
• We do not call your customers.
• We do not contact your business during the audit.
• We do not submit your contact form or pretend to be a homeowner.

Scans run on Render. The website address you submit, public scan evidence, answers you choose to provide, your completed report, and basic product-usage events are stored in Supabase so the report can survive a server restart. We do not store passwords, CRM data, or private customer data. Reports are kept at a private, unguessable link; we do not currently publish, index, or share individual reports.

During this pilot there is no automatic deletion schedule, so closing the tab does not delete a report. We are not currently using pilot audit data to build an anonymized aggregate benchmark. If retention or benchmark use changes, this page will say so before it happens -- we will not silently start doing it.

You are never required to give an email address to see your results. If you choose to have your report emailed to you, that consent is separate from and does not include being added to any marketing or outreach list -- one never implies the other.