Privacy Policy

GazeSite (“we”, “us”, “our”) operates gazesite.com. This policy describes how we collect, use, and protect your information when you use our service.

Information We Collect

When you run a free scan, we record:

• The website URL you entered – so we can see which kinds of sites people want reviewed and how often a scan fails
• The resulting grade and score, or the error if the site could not be reached
• A one-way hashed version of your IP address – we do not store the IP itself, and the hash cannot be reversed back to it
• An approximate location (country, region, and city) looked up from your IP address at the moment of the scan. The IP is used for this lookup and then discarded; only the location is kept
• Browser user agent and referring page

If you enter your email address to see your results, we also record:

• Your email address, stored together with the URL you scanned, so we know which site you were asking about
• Your phone number, only if you chose to give one. The field is optional, hidden behind a link you have to click, and leaving it blank changes nothing about the report you get. If you do give it, we keep it with the same record as your email

If you don’t give us an email or phone number, we may add one anyway: we look up who is behind the scanned website and attach a business contact to the record ourselves. See “Contacting You About a Scan” below for where that comes from.

When you place an order, we additionally collect:

• Email address – to deliver your audit report and order confirmation
• Phone number – if you gave one, so we can reach you about that order
• Website URL – the site you want audited
• Persona selection – which reviewer perspective you chose
• IP address and browser information – for fraud prevention and security

Contacting You About a Scan

Running a scan is a request for our opinion on a website, so we treat it as an invitation to reply.

If you gave us an email address, we may use it to send you your results and to follow up about the scan, about the paid review, and about the service generally.

If you gave us a phone number, we may call you about your scan or an order you placed – the things you would otherwise get an email about, when a conversation is quicker than a thread. We only call; we do not send marketing text messages, and we do not use automated diallers or pre-recorded calls – every call is placed by a person. We do not sell, rent, or share your number with anyone else. Tell us to stop and we will, on the first request.

If you did not give us an email or phone number, we look up the business behind the scanned domain and reach out to it the same way: by email, or by a person calling a number we found. To do that we use the contact details the site itself publishes, the domain’s public registration (WHOIS) records, and third-party business-data lookup services – whatever turns up a working email address or phone number for the business. We do this to identify the business associated with the domain, not a specific individual, and the same no-text, no-autodialler, no-pre-recorded-call rule above applies to any number we find this way too.

Every message we send says why you are hearing from us and carries a one-click unsubscribe. Unsubscribing is permanent: we stop, and a later scan of the same site does not start it again.

Payment Information

Payments are processed by Stripe. We never see or store your credit card number, expiration date, or CVC. Stripe handles all payment data under their own privacy policy and PCI-DSS compliance.

How We Use Your Information

• To process your order and deliver the audit report
• To send transactional emails (order confirmation, report delivery)
• To send you the results of a scan, and to follow up about that scan, the paid review, and our service – using either the contact details you gave us, or an email address or phone number we find ourselves for the business behind a scanned domain
• To prevent fraud and abuse
• To understand, in aggregate, which sites are scanned and how the scanner performs, so we can improve it
• To improve our service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Unsubscribing

Use the unsubscribe link in any message, or email [email protected] with the address or domain.

We keep a record of the unsubscribe itself – the address or domain, and the date – because that is the only way to be sure a later scan of the same site does not put you back on the list. Nothing else is kept for that purpose, and the record is not used for anything else.

Data Retention

Free scans are deleted automatically after 90 days. We keep them only long enough to understand which sites people ask us to review and where the scanner fails.

The city and region are deleted after 30 days – sooner than the rest of the record. After that point only the country remains, which is what we use for long-term reporting. This is automatic; you do not have to ask.

An email address or phone number attached to a scan is kept until you unsubscribe or ask us to delete it – whether you gave it to us or we found it ourselves. It is not covered by the 90-day scan deletion above, because its purpose is to let us reply to you rather than to measure the scanner. A phone number is deleted on request on its own – you can ask us to drop the number and keep the email, and we will.

We retain order records for accounting and support purposes. You can request deletion of your data by emailing us at the address below.

Cookies

Our website uses minimal cookies for basic functionality. Stripe may set cookies during the checkout process under their own policy.

Third-Party Services

• Stripe – payment processing
• AI analysis providers – to generate your audit report (only your submitted URL is shared, not your email or payment info)
• Domain registration (WHOIS) records and business-data lookup services – to find an email address or phone number for the business behind a scanned domain, when you did not give us one yourself

IP-to-location lookups happen on our own servers against a database we ship with the application. Your IP address is not sent to any third-party geolocation service.

Location data is provided by DB-IP under the Creative Commons Attribution 4.0 International License.

Security

We use HTTPS encryption, parameterized database queries, and webhook signature verification to protect your data. However, no method of transmission over the internet is 100% secure.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions about this policy? Email us at [email protected].