Privacy Policy & Data Ethics

1. Data We Collect

When you interact with the SuperAudit platform, we collect two main categories of information:

• Public Website Telemetry: Public HTML DOM structure, client-side scripts, CSS stylesheets, images, meta tags, and Web Vitals metrics retrieved from the URL you provide.
• Account & Lead Information: Your full name, work email address, telephone/WhatsApp number, company name, and traffic tier provided during report generation, VIP login, or support tickets.
• Payment & Billing Data: Transaction records processed via PCI-DSS compliant third-party payment gateways (e.g. Stripe). SuperAudit never stores raw credit card numbers on its servers.

2. 38 AI Agent Processing & Privacy

SuperAudit uses a swarm architecture of 38 specialized neural agents to evaluate conversion rate optimization (CRO), UX friction, WCAG accessibility, and SEO technical compliance.

All evaluations are performed purely on publicly accessible web documents as rendered in standard headless browser environments. SuperAudit does not bypass password-protected paywalls, intranets, or private databases without explicit customer authentication tokens.

3. Zero Model Training Guarantee

4. How We Use Collected Data

We process telemetry and account information solely for the following business purposes:

• To execute instant 38-agent website audits and compute revenue impact projections.
• To generate downloadable white-label PDF reports and interactive dashboard links.
• To dispatch security alerts, billing invoices, and priority support responses.
• To monitor platform uptime, server performance, and defend against malicious DDoS or scraping abuse.

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. We share minimal data exclusively with trusted enterprise infrastructure vendors under strict confidentiality agreements:

• Cloud & Compute Infrastructure: AWS / Google Cloud Platform for encrypted report generation and secure database storage.
• Payment Gateways: Stripe for PCI-DSS compliant billing tokenization.
• Transactional Email: Postmark / SendGrid for delivering audit report links and account verifications.

6. Data Retention & Deletion

Audit reports generated through public demo forms are retained for thirty (30) days to allow report download before automated garbage collection. Registered VIP Member reports are retained indefinitely during active subscription status. You may request permanent deletion of your audit history at any time by emailing [email protected].

7. GDPR & CCPA Privacy Rights

Depending on your geographical location (including the European Economic Area, UK, and California), you possess statutory rights regarding your personal data:

• Right to Access & Portability: Request an export of all personal data held about you.
• Right to Rectification: Request correction of inaccurate profile data.
• Right to Erasure ("To Be Forgotten"): Request immediate, permanent deletion of your account and audit history.
• Right to Object: Opt-out of non-essential communications at any time.

8. Cookies & Tracking Telemetry

We use strictly necessary cookies to maintain session states and security tokens. We also utilize privacy-friendly, anonymized analytics to measure website engagement without tracking individual identities across third-party websites.