legal
Privacy Policy
The short version
We keep your email address, your plan, and the reports we prepare for you. You can download all of it, or delete the lot, from your account settings. We sell nothing to anyone and we run no advertising or tracking.
1. What we keep
Your email address and password, so you can sign in. The password is stored only as a cryptographic hash, which cannot be read back.
Anything you type into your profile, such as a display name and a company site.
Your plan and the products you bought, including any license key we issued you.
The reports and dashboards we prepare for your account.
Sign-in records: the times you signed in, the browser and device, and the IP address of each session. You can see this list in your account settings.
2. Why we are allowed to
To perform our contract with you: running your account, your plan and your reports.
Our legitimate interest in keeping the service available and preventing abuse.
Your consent, where you gave it, which you can withdraw at any time.
3. Where it is kept
Accounts and sign-ins are handled by Supabase. Reports and the files that make up this site are stored and served by Cloudflare. Both act as our processors under a data processing agreement, and data is kept in the European Union where that option exists.
Reports are stored encrypted in transit, are signed so they cannot be altered unnoticed, and are served only after your sign-in has been checked.
4. How long we keep it
Account data: until you delete the account.
Reports and dashboards: while your account exists, and they are removed when you delete it.
Sign-in records: as long as the session exists. Signing out everywhere ends them.
Server logs, which may contain an IP address: a short period for security and troubleshooting.
5. Who else sees it
Only the processors named above, and anyone we are legally obliged to tell. We do not sell data and we do not share it for advertising.
6. Cookies and local storage
This site sets no tracking cookies and includes no third-party analytics, which is why it has no cookie banner.
Your sign-in is kept in your browser's own storage. If you clear it, or you did not tick "Remember me", you are signed out. Reports you have opened are cached in the tab until you close it or sign out.
7. Your rights
Access, correction, deletion, portability, objection, and withdrawal of consent.
Two of those you can exercise yourself, at once: "Download my data" gives you everything we hold about you in one file, and "Delete my account" removes it. Both are in your account settings.
For anything else, write to us at https://sus.bot/contact/ and we answer within 30 days. You may also complain to the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD).
8. Changes and contact
New versions are posted here with an effective date; if a change matters to you, we say so in the product. Controller: Sitefig SARL-S, Luxembourg. Contact: https://sus.bot/contact/