Privacy Policy

We collect as little as possible and we are upfront about it. There is no mandatory email wall to run a scan, we do not sell your personal data to anyone, and we do not run advertising trackers on you. This page explains what we handle and the rights you have over it.

HowFindable is a United States based business and is responsible for the personal data processed through the Service. If you are in the EU or UK, we act as the data controller for your personal data under the GDPR. You can reach us at hello@howfindable.com.

Your scan

The URL you submit and the public content we fetch from it. A website's public content is generally not personal data, but if it happens to contain personal data (for example a name or email shown on the page), that is processed as part of the scan.

Technical data

Basic technical information such as your IP address, browser type and request logs. We use this to run the Service, prevent abuse and apply rate limits.

Payment data

If and when you buy a paid feature, our payment provider (Stripe) processes your payment. We receive confirmation of the transaction but never your full card number.

What you choose to give us

If you contact us, opt in to a success story, or submit a quote, we process the information you send, such as your name, role, email and message.

Analytics

We use Vercel Analytics to see how many people visit and which pages are popular. It is privacy-friendly: no cookies, no cross-site tracking and no profile of you. The numbers are aggregated and are not used to identify you.

Cookies

We do not set any cookies ourselves, and we do not use advertising or cross-site tracking cookies. If a future feature needs one (for example checkout), we will keep it to the minimum required to make it work.

To score your site we use Anthropic's Claude models through Anthropic's API. Here is exactly how that works:

• We send the URL you entered and the public content we fetched from it (HTML, robots.txt, sitemap.xml, llms.txt).
• We send it server-side over an encrypted connection, using our own API key, which is never exposed to your browser.
• We send it only to generate your scores, your report and, if you pay, your fixes.
• Under Anthropic's API terms, the content is not used to train Anthropic's models.

We do not send your payment details or contact information to the AI provider. We only send what is needed to analyse the site.

We only use your data for the purposes below. The note after each one is the legal basis we rely on, which also satisfies the GDPR for EU and UK visitors:

• To provide the Service (run the scan, show your report, deliver paid fixes): performance of a contract, or steps taken at your request.
• To keep the Service secure and working (logs, rate limiting, abuse prevention): our legitimate interest in protecting the Service.
• To handle payments: performance of a contract and compliance with legal obligations such as tax and accounting.
• To publish a success story or use your quote: your consent, which you can withdraw at any time.
• To answer you when you get in touch: our legitimate interest in responding to you.

We rely on a small number of trusted providers to run the Service. They process data on our behalf, under their own terms and security commitments:

• AnthropicAI analysis of the submitted site content.
• VercelHosting, serving the website, and cookieless visit analytics.
• SupabaseStoring scan reports and related data.
• StripeProcessing payments when you buy.

We do not sell your personal data, and we do not share it with anyone for their own marketing.

HowFindable and these providers are based in, or process data in, the United States, so your data is processed there. If you are in the EU or UK, your data is transferred to the United States with appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.

We keep scan data and reports for as long as needed to provide the Service and, where you have placed an order, to meet our legal and accounting obligations. Logs are kept for a limited period for security. You can ask us to delete data we hold about you, subject to those obligations.

Depending on where you live, you have rights over your personal data.

If you are in California or a similar US state

• Know what personal information we collect and why.
• Request deletion of your personal information.
• Request correction of inaccurate information.
• Opt out of the sale or sharing of personal information. We do not sell or share it.
• Not be discriminated against for exercising these rights.

If you are in the EU, UK or a similar regime

• Access the personal data we hold about you.
• Have it corrected or completed.
• Have it deleted.
• Restrict or object to how we use it.
• Receive it in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Lodge a complaint with your local data protection authority.

To exercise any right, email us at hello@howfindable.com. We will respond within the time the law allows.

We take reasonable technical and organisational measures to protect your data, including encrypted connections, data encrypted at rest by our infrastructure providers, and keeping secret keys server-side. No method of transmission or storage is ever completely secure, so we cannot guarantee absolute security.

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this Privacy Policy. The "Last updated" date at the top shows the current version. Material changes will be highlighted where reasonable.

Questions about this policy, about your data, or to exercise any of your rights, email us at hello@howfindable.com.