What we keep, and why.

We store the domain, the report we generate, and when it ran. Reports are about a website's public pages, not about you. To stop abuse, we check each scan with Cloudflare Turnstile and count scans per IP address for rate limits.

To write the report, we send the text of the public pages we read to a language model through OpenRouter. We don't send anything you type except the domain.

We store your email address, the role you picked, the domain you scanned and where you came from (such as the campaign link you clicked). We use them to email you the report link and a few follow-ups about it. Emails are sent through PostShiba. Every email has an unsubscribe link, and unsubscribing stops them.

We keep this in our own database. We don't sell it or hand it to other marketing lists. If you start a RightMessage trial from a report, the report goes with you so your project starts with it.

We use PostHog to count things like scans started, reports viewed and buttons clicked, so we can tell whether the tool is useful.

A report is visible to anyone with its link and hidden from search engines by default. The site owner can opt in to indexing. Anyone can ask us to remove a report.

Reply to any email we've sent you and ask, and we'll delete your email address and anything linked to it.