Information you provide directly:

• Email address and password when you create an account.
• Website URLs you submit for processing.
• Payment information processed by Stripe (we do not store full card numbers).

Information collected automatically:

• IP address and browser/device information for security and abuse prevention.
• Usage data: pages visited, features used, job history, and credit consumption.
• Error and performance data collected via Sentry. Personally identifiable information (email address and IP) is stripped before transmission to Sentry.
• Analytics data collected via Google Tag Manager (if enabled), subject to Google's privacy policy.

• To provide, operate, and improve the Service.
• To process payments and manage your subscription.
• To send transactional emails (account confirmation, job completion, billing).
• To detect fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data. We do not use your submitted URLs or generated output files for advertising purposes.

Account data is retained for as long as your account is active. Generation job records (including scraped content and output files) are retained for 90 days and are automatically deleted by a scheduled cleanup process. You may delete individual jobs at any time from the jobs page.

We share data with the following processors to operate the Service:

• Supabase — database and authentication (EU and US data centers).
• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Firecrawl — web scraping. URLs you submit are sent to Firecrawl for processing.
• OpenAI — AI-generated titles, descriptions, and formatting. Scraped page content is sent to OpenAI when AI features are enabled.
• Upstash — job queue infrastructure.
• Vercel — hosting and serverless compute.
• Resend — transactional email delivery (account confirmations, job notifications, contact form routing).
• Sentry — error monitoring (PII-stripped).

We use cookies strictly necessary for authentication (Supabase auth session cookies). We do not use tracking cookies beyond what Google Tag Manager may set if analytics is enabled. You can disable cookies in your browser settings, but this will prevent you from logging in.

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your personal data.
• Data portability where technically feasible.

To exercise any of these rights, contact support. We will respond within 30 days.

We use industry-standard security measures including encrypted connections (HTTPS), database row-level security, and server-side credential storage. No transmission over the internet is 100% secure; we cannot guarantee absolute security of your data.

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy or our data practices? Contact support

For more information about how we use the Service, see our Terms of Service.