Privacy Policy

Information we collect

We collect information you provide and information generated when you use the Service.

• Account details: name, email, phone, date of birth, address, city, postal code, country, and a hashed password.
• Google sign-in: if you choose Google, we receive your Google account identifier, email, and name from Google. We do not receive your Google password.
• Billing data: plan, quota usage, and Razorpay customer, order, payment, and subscription identifiers. Card numbers are handled by Razorpay, not stored by us.
• Audit data: URLs you submit, crawl results, SEO / performance / security / UX findings, extracted public contact details from those sites, and AI-generated emails or proposals.
• Usage and session data: login activity and a presence cookie used to keep you signed in on this browser.
• Visitor analytics: page path, approximate location (country, region, city derived from IP), IP address, browser user agent, and referring URL. This is used to understand where visitors come from and is visible only to SuperAdmin operators.

How we use information

We use this information to:

• Create and secure your account, including email activation and password reset.
• Run audits, generate reports, extract publicly available lead information, and draft outreach content you request.
• Process subscriptions, top-ups, and payment confirmations through Razorpay.
• Enforce plan limits, prevent abuse, and keep the Service reliable.
• Understand which countries and pages people visit, visible only to SuperAdmin operators.
• Send transactional email such as activation, password reset, and billing notices.

Website audits and third-party sites

When you submit a URL, we crawl and analyze that site. We may collect publicly visible pages, metadata, performance metrics, security headers, and contact details published on the site.

You are responsible for only auditing sites you are allowed to analyze. We block certain internal and private network targets, but that does not replace your obligation to use the Service lawfully.

Cookies and session

We set a session presence cookie (sitegaps_session) so the app can tell whether you are signed in. Your access token is stored in the browser. We do not use advertising cookies or third-party marketing pixels.

Third-party services

We share data with providers only as needed to operate the Service:

• Google — sign-in when you choose Google authentication.
• Razorpay — payments and subscriptions.
• AI model providers (via OpenRouter) — analysis and generated outreach text.
• Google PageSpeed Insights — Core Web Vitals and performance scores.
• Email delivery (SMTP) — transactional messages.

Retention and security

We keep account, audit, lead, and billing records for as long as your account is active and as needed for legal, tax, or dispute purposes. You can update profile details from your account page.

We use industry-standard safeguards such as hashed passwords, encrypted transport, and access controls. No method of storage or transmission is completely secure.

Your choices

You may access or update account information from Account, delete your account from Account → Delete account, or email a privacy request from the address on your account.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. We will respond to valid requests as required by applicable law.

Children

The Service is intended for business users and is not directed at children under 16. We do not knowingly collect personal information from children.

Operator

SiteGaps is operated from India.

For privacy requests or questions about this policy, use the Contact page or email rakesh@kaklotar.com.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the Service after an update means you accept the revised policy.