Privacy policy

• Your account. Email address, your name if you give one, and a scrambled version of your password that cannot be turned back into the original. If you sign in with Google we store the identifier they give us, not your Google password.
• The shops you audit. The addresses you submit, screenshots of their publicly reachable pages, the page structure we read, and the findings we produce.
• How you use the service. Which reports you open, share and export, when you view pricing, and which locked features you click. We use this to work out who is likely to want a paid plan, and to decide what to build next.
• Payments. We store which plan you are on and identifiers from our payment provider. We never see or store your card number.

Some of our 115 rules cannot be judged from page code alone, so screenshots of the shop being audited are sent to Anthropic to be looked at and judged. This is worth stating plainly because it is a genuine transfer of data outside our own servers.

Those screenshots are of pages any member of the public could visit. We do not sign in to the shops we audit, so a screenshot never contains a logged-in account, a real customer's order, or anyone else's personal details.

• Madfoat (powered by PayTabs). Card payments. The card is entered on our own checkout page and exchanged immediately for a single-use token, so we never see or store a card number. Madfoat processes the payment and is not the seller.
• Anthropic. Reads screenshots of the pages we audit, to judge the rules a machine cannot check from code alone. Screenshots are of publicly reachable pages of the store being audited.
• Contabo GmbH. Hosting. Runs the servers and the database where accounts, audits and reports are stored. Located in Germany.
• Decodo. Residential proxy network. Audits reach a store through their connections rather than directly from our server, because many shops block traffic coming from data centres. They carry the request to the shop; they do not receive your account details.
• toSend. Email delivery. Sends account email such as sign-in links, password resets and notifications, and therefore handles your email address and the contents of those messages.
• An expert reviewer, only if you buy an expert review. They see the shop being reviewed and its report, and nothing else about you. They are bound to confidentiality.

We do not sell your data, and we do not share it for anyone else's advertising.

• Reports: for as long as you have an account. A report you paid for should still be there when you come back to it.
• Raw screenshots: not indefinitely. The full-size captures behind a report are reduced and then cleared out on a schedule. The evidence images shown in your report are kept.
• Records we must keep: payment and commission records are retained as long as tax and accounting rules require, even after an account closes.

We send emails about audits you ran and your account. If you opt in to tips and offers we send those too, never more than one a week, and every one has a working unsubscribe link. You can also turn them off in account settings. Turning them off never stops emails about work you asked for.

You can see and change your details in account settings, and delete your account there, which removes your shops, audits and reports. You can also ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing [email protected]. We will respond within 30 days.

Depending on where you live you may also have the right to complain to a data protection regulator.

We use a cookie to keep you signed in, one to remember which referrer sent you so they can be credited, and one to remember the language you chose. The payment provider sets its own cookies during checkout. We do not use advertising cookies, and we do not sell or share what we collect.

We also use Google Analytics to see which pages help people and which do not. It sets its own cookies and records the pages visited and the actions taken, such as starting an audit or opening a report. It never receives your name, your email address or your card details.

Where the law asks us to get your permission first, we ask before those analytics cookies are set, and until you agree they are not set. Everywhere else they are on by default. Either way you can change your mind here at any time.

Change your cookie choice

Passwords are stored scrambled, traffic is encrypted, payment details never reach our servers, and administrative screens are restricted. No service can promise it will never be breached. If your data is ever affected by a breach, we will tell you rather than hope you do not notice.

Privacy questions and data requests: [email protected]. The data controller is UXFix LLC, Amman, Jordan.