Privacy Policy

• Your email address — supplied at checkout, used for your receipt and to identify your order.
• The website or domain you submit — and the normalised form of it we use internally.
• Publicly available business information — details published on your own website and on public pages, directories, listings and social profiles that appear to relate to your business. This can include a business name, description, category, location, services, business phone number, business email address and business street address, as published publicly.
• Report observations and results — search results, AI test questions and answers, platform checks, findings, scores and the improvement actions we generate.
• Payment metadata from Stripe — Stripe checkout session and payment identifiers, amount, currency, any promotion code applied and payment status.
• Consent record — the time you agreed to our Terms and Privacy Policy at checkout, and which versions you agreed to.
• Previous-report relationships — where you ask us to compare a new report with an earlier one, we store the link between them.
• Report identifiers and report links — each report has an unguessable identifier used in its URL.
• Technical logs and errors — operational logs produced while running your report, including error messages from the services we use.
• AI prompts and responses — the test questions we send to AI providers and the answers they return, stored as evidence in your report.

We do not run advertising or analytics tracking on this site, and we do not ask you to create an account or set a password.

We do not receive or store your full card details. Payment is handled entirely by Stripe through its own hosted checkout. We only see the identifiers and payment metadata Stripe passes back to us, such as whether the payment succeeded and how much was collected.

• To take payment and provide you with the report you bought.
• To run the visibility checks that make up the report.
• To compare a repeat report with your earlier one, if you ask us to.
• To respond to you about your order and to diagnose problems.
• To keep a record of the terms you agreed to.

To produce a report we pass information to service providers who process it on our behalf. We only send what each provider needs.

• Hosting and database — runs the FoundSignal application and stores your order and report data.
• Stripe — payment processing and receipts.
• Firecrawl — retrieves and reads the public content of the website you submit.
• Serper — retrieves Google search results for our test searches.
• OpenAI and Google Gemini — answer the AI test questions we run, and assist with the language analysis used to build the report.

These providers have their own privacy terms. We do not sell your information, and we do not share it for advertising.

Some of these providers operate outside Australia, including in the United States and other countries. That means your information may be stored or processed overseas. Where that happens, we rely on the provider's own contractual and security commitments.

Your report is reached through a long, unguessable web link. There is no login. That keeps it simple, but it also means anyone who has the link can open the report. Please treat your report link as private and only share it with people you're happy to have see it. If you believe a link has been shared beyond where you want it, contact us through our contact form and we'll help.

Report pages are marked so search engines don't index them.

We currently keep order and report records for as long as we operate the service, so that your report link keeps working and so a future repeat report can be compared with it. We have not yet built automated deletion tooling, so we're not going to state a retention period we can't honour. If you want your report data or your order details deleted, use our contact form and we will action it manually. We may need to keep limited payment and tax records where the law requires it.

We take reasonable steps to protect information from misuse, loss and unauthorised access, including access controls on our database and encrypted connections. No online service can be completely secure.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. You can also make a privacy complaint. Contact us through our contact form and we'll respond as soon as we reasonably can. If you're not satisfied with how we handle your complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy as the service changes. The current version always appears on this page. Our Terms explain how the version you agreed to is recorded.