Privacy Policy

RunAudit ("we", "us", "our") operates the website analysis service at runaudit.app. This policy describes how we collect, use, and protect your information.

• URLs you submit — to perform the audit you requested.
• Email address — provided at checkout via Stripe, used for receipts and audit delivery.
• Payment information — processed entirely by Stripe. We never see or store card numbers.
• IP address — used for rate-limiting free audits. Automatically deleted after 24 hours.
• Usage data — anonymous analytics (page views, feature usage) via Vercel Analytics.

• To perform the website audit you requested.
• To deliver audit results and receipts to your email.
• To process payments through Stripe.
• To prevent abuse (rate-limiting, fraud detection).
• To improve the service (aggregated, anonymized analytics).

We do not sell your data. We share information only with:

• Stripe — payment processing.
• Supabase — database hosting (EU/US data centers).
• Google — AI analysis via Gemini API (audit data is sent for processing, not stored by Google for training).
• Vercel — application hosting.
• Resend — transactional email delivery.

Audit results are retained for 12 months from creation. Free audit IP logs are deleted after 24 hours. You can request deletion of your data by emailing privacy@runaudit.app.

You have the right to access, correct, or delete your personal data. For EU residents, you have additional rights under GDPR including data portability and the right to restrict processing. Contact privacy@runaudit.app for any requests.

We use only essential cookies required for the service to function (session management, payment flow). No advertising or tracking cookies are used.

All data is transmitted over TLS. Payment processing is handled by Stripe (PCI DSS Level 1 compliant). Database access is restricted by row-level security policies.

We may update this policy. Material changes will be posted here with an updated date.

For privacy-related questions: privacy@runaudit.app