What we collect, and what we do not

Last updated 2 September 2026

The short version

We hold your account details, the domains you ask us to scan, and the answers the assistants gave when we asked them about you. We do not sell any of it, we do not build advertising profiles, and we do not use your private data to train models.

What we collect

Because you gave it to us

• Your email address and name, when you create an account or ask for a demo.
• The domains, competitors and topics you enter, which is what tells us what to measure.
• Billing details, handled by Stripe. Card numbers go to Stripe directly and never touch our servers — we store only the subscription state and the last four digits Stripe returns.
• Anything you write to us: support messages, demo requests, feedback.

Because you connected it

If you link Google Search Console or Bing Webmaster Tools, we read the performance data for the properties you select. That connection is optional, it is read-only, and you can revoke it from your provider at any time without losing the rest of the product.

Because the product produced it

When we run a scan, we record the prompts we sent, the verbatim answers that came back, and whether your brand appeared in them. When we run an audit, we record what we fetched from the public pages of the site being audited and what the rules concluded. Keeping the raw response is deliberate: a claim you cannot check is a claim you should not trust, and we would rather show you the answer than ask you to take the number on faith.

Because a browser sent it

Standard server logs — IP address, user agent, the page requested and when. We use these to keep the service running and to investigate abuse, not to profile you.

Cookies

We set the cookies needed to keep you signed in and to remember your workspace. We do not set advertising cookies and we do not share identifiers with ad networks.

What we crawl

When you audit a site we fetch its public pages, identifying ourselves as BetterfindAuditBot, and we respect robots.txt. We do not attempt to reach anything behind a login, and we do not audit a site to a depth its own robots rules disallow.

Who processes data for us

These are the third parties that handle customer data on our behalf. Each is bound to use it only to provide their service to us.

• Supabase — Account records, authentication, and the application database.
• Stripe — Subscription billing. Card details go to Stripe directly and never reach our servers.
• OpenAI — Running the prompts we sample against answer engines, and drafting the wording of a fix.
• Firecrawl — Fetching and rendering the pages of a site being scanned or audited.
• Google — Sign-in with Google, PageSpeed Insights and Chrome field data, and Search Console when you connect it.
• Microsoft Bing — Bing Webmaster Tools data, when you connect it.
• Resend — Transactional email — sign-in codes, receipts, and scan notifications.
• DataForSEO — Backlink, keyword and search-result data used by the audit engine.

Some of these operate outside your country. Where data moves across a border it is covered by the transfer terms in each provider's data processing agreement.

How long we keep it

• Account records: for as long as the account exists, then deleted within 90 days of closure.
• Scan and audit history: retained while the account is active, because the value of a measurement is the comparison to the last one.
• Billing records: kept for as long as tax and accounting law requires, which is longer than the account may live.
• Server logs: rotated within 30 days.

What you can ask us to do

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop processing it. Depending on where you live these may be legal rights; we will honour them either way. We will not make the product worse for you because you exercised one.

The address for these requests is not published yet — reach us through the contact page in the meantime.

Security

Data is encrypted in transit. Access to production data is limited to the people who need it to operate the service. No system is perfectly secure, and we would rather say that than imply otherwise; if we discover a breach affecting your data we will tell you.

Children

This is a business product and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we change this policy in a way that affects you, we will say so rather than quietly re-dating the page. The date at the top is the last change that mattered.

Who we are

Betterfind. More about what we do and what we will not claim is on the about page.