Privacy policy

What we collect

When you run a check without an account, we store the domain and market you entered, the questions we generated or you wrote, the engine answers we received, and an anonymous session token held in your browser so you can come back to your result. We also record the time of the check to enforce free-tier limits.

If you create an account, we store your email address and link your previous anonymous checks to it. If you sign in with Google, we receive your email address and basic profile from Google, not your password. We never see or store your password.

We also keep an activity record of significant actions on your account (checks run, audits started, credits spent, plan changes, exports). Each record holds the action, the result, the time, a one-way hashed version of your IP address and your browser's user agent string. We keep the hash rather than the address itself so we can spot abuse without holding a record of where you were.

If you buy credits or a plan, our payment provider handles your card details. We never receive or store your card number. We keep the amount, the plan, the date and the provider's reference so we can support and account for the purchase.

What we fetch from the web

We fetch publicly available pages from the domain you enter and from domains cited in AI answers. We identify ourselves in the user agent, obey normal HTTP responses, and do not attempt to access pages behind a login. We store the text and markup of those public pages so we can show you what an AI engine would read.

Who processes your data

• Our hosting and database provider: runs the site, your account, and the storage of your saved checks and audits.
• OpenRouter and the AI engine providers it routes to (currently Perplexity Sonar and OpenAI GPT-4o with web search): receive the buyer questions, the domain being tested, and public page text we ask them to consider. They do not receive your email address.
• Stripe: processes payments and holds your card details under its own privacy terms.
• Cloudflare Turnstile: runs the human check on sign-in and on free checks, to keep bots out.
• Our transactional email provider: delivers account and alert emails.

Some of these providers process data outside Australia, including in the United States. We do not sell your data and we do not share it for advertising.

Cookies and local storage

We use browser local storage for your anonymous session token and your login session, and Cloudflare Turnstile sets what it needs to run its human check. We do not run third-party advertising or cross-site tracking cookies.

How long we keep things

• Checks, audits and reports: kept while your account is open, so you can compare visibility over time.
• Anonymous checks with no account attached: kept for up to 12 months, then removed.
• Account activity records: kept for 24 months so we can investigate disputes and support issues.
• Payment records: kept for as long as tax and record-keeping law requires, currently seven years.

Deleting your data

You can delete any brand or site from your dashboard at any time, which removes its checks and audits. To close your account entirely, email whenbuyersask@gmail.com from the address on your account and we will delete your account and everything attached to it within 30 days, except records we are required by law to keep.

Security

Data is held in an access-controlled database, transmitted over encrypted connections, and readable only by your own account. No system is perfectly secure, but if a breach ever affects your personal information we will tell you and the regulator as the law requires.

Children

This is a business tool. It is not intended for anyone under 16, and we do not knowingly collect their personal information.

Your rights and complaints

You can ask us to access, correct, export or delete the personal information we hold about you. Contact us at whenbuyersask@gmail.com and we will respond within 30 days. If you are not satisfied with how we handle a privacy issue, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we change how we handle your data we will update this page and the date at the top. Material changes will be notified by email to account holders.