Privacy policy

01Who is responsible for your data

The details of the company that runs the service and is responsible for your data (name, registration number and address) are not set yet. They will appear here before we start selling. Until then, send any privacy request through the "Leave your details" form, and we will get back to you within one business day.

02In short

• We do not sell data or share it for advertising.
• We do not store your IP address. We store only a hash of it, to limit abuse.
• Our access to your Search Console is view-only, and you can remove it at any time.
• Marketing email is sent only if you ticked a separate box. Every marketing email says how to unsubscribe, and you can simply reply "remove".

03What the free scan collects

When you scan a site, we keep:

• The site address you entered.
• What we read on that site's public pages: the home page, robots.txt and the sitemap.
• The scan results and the suggestions the engine wrote.
• A hash of your IP address (not the address itself), to prevent abuse of the scan.
• If you asked for the full report by email: your email address. If you ticked that you want updates: that consent too, with its time and an IP hash.

04What the "Book a call" form collects

The details are stored with us and emailed to the founder, only so we can get back to you.

• Your name, business name, website, email, phone if you left one, when suits you, the language of the call, the note you wrote, your browser's time zone, a hash of your IP address, and your choice about marketing email.

05Email: two separate lists

The report email is operational: it sends you what you asked for. Updates and offers are sent only if you ticked a separate box that is not pre-ticked. We record when and from where consent was given, as Israeli anti-spam law (Communications Law, section 30A) requires. Every marketing email says how to unsubscribe, and you can simply reply "remove".

06What we collect when you are a customer

• Search Console: we are added as a Restricted user. We read queries, impressions, clicks and average position per page. We cannot change anything in your property, and you can remove us from inside Search Console at any time.
• Your CMS, if you gave us access: it is used only to upload pages you approved.
• The interview: products, prices, customer questions, competitors you want tracked, and what you may not say.
• Approval decisions, and your reason for skipping if you wrote one. The engine uses them to write better next time.
• Billing and invoice details. Card details are held by the payment processor, not by us.

07The AI engines

To write and to measure, we send text to model providers through their official APIs: OpenAI, Google and Anthropic. If we add a provider, we will update this page first. What is sent: the questions, the facts about your business you gave us, and drafts. What is not sent: payment details and visitors' IP addresses. Each provider's API terms apply.

Ivy, the AI agent on the site, works the same way: what you write to her is sent to one of these providers to write the answer. We keep questions and answers for 30 days, to correct mistakes and improve, and then delete them. Email addresses and phone numbers are masked before saving, and no IP address is kept with them. If you are signed in, the question is saved with your account, and Ivy sees your business's plan and article details to answer in its context. We also keep a count of questions per hashed IP address, to limit abuse, and what the call cost.

08How long we keep it

• Free scan results: up to 12 months.
• An email left in a scan: until you ask us to remove it, or 24 months without contact.
• Call requests and internal alerts about inquiries: up to 12 months, unless you became a customer.
• Customer content and data: while the subscription is active. After cancelling, we delete it within 30 days of your request, and in any case after 24 months without activity.
• Invoices and billing records: as long as tax law requires.

09Who we share it with

Only with providers that help us run the service, and only as far as needed: website hosting, the database, email delivery, the model providers above and the payment processor. We do not sell data, rent it, or pass it to advertisers.

10Cookies and storage in your browser

The site uses only what it needs to work. There are no advertising, analytics or tracking cookies, and no scripts from other companies: fonts and images are served from our own site. Because everything below is strictly necessary, we do not show a cookie banner. If that ever changes, we will update this page first and ask for your consent before anything optional is set.

What the site keeps in your browser:

• og_session (on the live site: __Host-og_session), a cookie: keeps you signed in. Set only when you sign in, for up to 30 days or until you sign out. Readable by our server only (HttpOnly), sent only to our site, and on the live site only over an encrypted connection.
• og_google_flow, a cookie: only if you sign in with Google. It protects that sign-in against forgery for up to 10 minutes, and is deleted as soon as the sign-in completes.
• og_a11y, stored in your browser (local storage), not a cookie: your choices in the accessibility menu. It never leaves your device, and the reset button removes it.
• Forms are protected against cross-site forgery by checking where a request came from, without a cookie of their own.
• Links to other sites, and a payment processor's page when you pay, follow those companies' own policies.

11Security

Traffic is encrypted. Keys and passwords live in the server environment, never in code or in the database. Access to data is limited to the people who need it.

12Your rights

You can ask to see the data we hold about you, to correct it or to delete it, under the Israeli Protection of Privacy Law. Leave your details in the form and we will handle it.