Privacy Policy

Site-OS ("Site-OS", "we", "us") provides a website audit and reporting tool. This policy explains what data we collect, why we collect it, and how it is used when you create an account, run an audit, or connect a third-party account such as Google.

1. Information we collect

• Account information: email address (we sign you in with a one-time code sent to it, or with your Google account identifier if you sign in with Google), managed via Supabase Auth.
• Website data: the URL(s) you submit for auditing, and content collected by crawling those pages (HTML, metadata, on-page text) to generate findings.
• Connected Google data: if you connect Google Search Console, Google Analytics (GA4), or Google Ads, we access performance data (e.g. clicks, impressions, sessions, conversions, campaign metrics) scoped to the properties you explicitly select, using read-only OAuth scopes.
• Usage data: basic product analytics (pages viewed, features used) to improve Site-OS.

2. How we use your information

• To generate your website audit, findings, and reports.
• To authenticate you and maintain your account and project data.
• To operate, maintain, and improve Site-OS.
• To communicate with you about your account or audits (e.g. transactional email).

We do not sell your data or Google account data to third parties, and we do not use Google user data for advertising purposes.

3. Google user data & Limited Use

Site-OS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account data (Search Console, GA4, Google Ads) is used solely to generate the audit and reporting features you request inside Site-OS, is scoped per project/account, and is never used for advertising or sold to third parties.

You can revoke Site-OS's access to your Google account at any time from your Google Account permissions page, or by disconnecting the account inside Site-OS.

4. Data storage & security

Data is stored with Supabase (PostgreSQL) with access controls restricting each account to its own projects and connections. OAuth tokens are stored server-side and are never exposed to the browser. We use industry-standard measures to protect your data, but no method of transmission or storage is 100% secure.

5. Data retention & deletion

We retain account and audit data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us (see below); we will delete or anonymize your data within a reasonable period, except where retention is required by law.

6. Third-party services

We use third-party providers to operate Site-OS, including Supabase (authentication and database), Google APIs (Search Console, GA4, Ads, sign-in), and Google Gemini (report generation). These providers process data on our behalf under their own privacy and data-processing terms.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us using the details below to exercise these rights.

8. Children

Site-OS is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy or your data? Contact us at rajamohanty12345@gmail.com.