Privacy policy

What we collect

• Account details: your name and email address. We sign you in with one-time email links and codes, so we don't store a password for most accounts.
• Sites you add: the domains you connect and the proof you add to verify them (a meta tag, DNS record or the Radar snippet).
• Billing records: your plan, payment status and invoices. Card and bank details are handled by our payment provider; we never see or store full card numbers.
• Messages you send us or send to a founder through a founder page, including your email address so the reply can reach you.
• Basic logs: IP address, browser and timestamps when you use the site, kept to keep the service secure and working.

Public website data

Our free checks and public score pages read only what a website publishes to everyone: its pages, robots.txt, sitemap, structured data and similar public files. For outreach we may note business contact details a site or a public directory publishes. We don't sell this data. A site owner can claim their page, make it private or ask us to take it down from the link on every score page.

Radar analytics on our customers' sites

When a customer installs Radar, we process page views on their site on their behalf. In cookieless mode a visitor is identified only by a daily, keyed hash of the site, IP address and browser, which changes every day and can't be turned back into an IP address. Otherwise Radar sets a first-party visitor cookie on the customer's domain. We don't store raw IP addresses in analytics, build profiles across sites, or sell analytics data. The customer is responsible for telling their visitors about Radar.

How we use it

• To run the service: sign-in, scans, reports, analytics, alerts and billing.
• To email you about your account, your sites and changes to the service. Marketing emails always include a way to stop them.
• To keep the service secure, prevent abuse and meet legal obligations.

Who processes data for us

We use a small set of providers to run the service, each only for its part: hosting and analytics infrastructure (our servers and Cloudflare), email delivery (Zoho ZeptoMail), payments (our payment provider, currently Dodo Payments), Telegram for alerts you turn on, and AI model providers (Anthropic, OpenAI and Google, through Cloudflare AI Gateway) that read a site's public content when you or we request an AI report. These providers may process data outside India under their own security commitments.

How long we keep it

Account and site data stays while your account is open. Ask us to close your account and we remove your personal data within 30 days, except billing records we must keep by law. Analytics data is kept for as long as the customer's plan allows.

Your choices and rights

You can see your details and sites in the dashboard. Write to us to get a copy of your data, correct it, close your account, or delete personal data we hold about you. We'll answer within 30 days.

Contact and grievances

Questions, requests and complaints about privacy go to our grievance officer, Lohitesh:

Changes

If we change this policy in a way that matters, we'll update the date above and tell account holders by email before it takes effect.