Privacy Policy

Last updated: July 18, 2026

This Privacy Policy explains how SiteDocket LLC (“SiteDocket”, “we”, “us”) collects, uses, and shares information when you use the SiteDocket website-audit service, portal, and APIs (the “Service”). By using the Service, you agree to this Policy.

1. Who We Are

SiteDocket is operated by SiteDocket LLC. For privacy questions or to exercise your rights, contact privacy@sitedocket.com.

2. Information We Collect

• Account information. Your name, email address, password (stored hashed), plan, and account settings.
• Audit and crawl data. The website URLs you submit and the data our service retrieves from those sites during audits and crawls (page content, headers, metadata, performance and technical signals, and generated scores and reports).
• Connected accounts. If you connect Google Search Console, we access the search-performance data you authorize through Google’s OAuth consent, using read-only scopes. You can revoke this access at any time.
• Billing information. Subscriptions are processed by Stripe. We receive limited billing details (such as plan, status, and the last four digits and brand of your card) but we do not store your full card number; Stripe handles card data directly.
• Usage and log data. IP address, browser and device information, pages viewed, actions taken, and diagnostic logs, used to operate and secure the Service.
• Cookies. We use strictly necessary cookies for authentication and session management, and limited analytics/functional cookies. See “Cookies” below.

3. How We Use Information

• To provide, maintain, and improve the Service, including running audits, crawls, monitoring, and generating reports.
• To process subscriptions, payments, and free trials.
• To communicate with you about your account, security, updates, and support.
• To secure the Service, detect and prevent abuse or fraud, and enforce our terms.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your Customer Data to build unrelated products.

4. AI Processing

Some features send audit content and related data to third-party AI providers (including Anthropic) to generate summaries, recommendations, and fix suggestions. This processing is performed under those providers’ commercial terms, which prohibit using submitted data to train their general models. We send only the data needed to produce the requested output.

5. Service Providers (Subprocessors)

We share information with vendors who process data on our behalf, under contract and only as needed to provide the Service. These currently include:

• Stripe — payment processing.
• Anthropic — AI-assisted analysis and recommendations.
• Google — Search Console integration (only data you authorize).
• DigitalOcean — cloud hosting and infrastructure.
• Email delivery provider — transactional and notification emails.

This list may change as our service evolves; the current version will always be reflected here.

6. How We Share Information

We share information only: with the service providers above; if required by law or valid legal process; to protect the rights, safety, and security of SiteDocket, our users, or the public; and in connection with a merger, acquisition, or sale of assets (with notice). We do not sell or rent personal information.

7. Data Retention

We retain account and audit data for as long as your account is active and as needed to provide the Service. After account closure, we delete or anonymize personal data within a reasonable period, except where retention is required for legal, security, or accounting purposes. You may request deletion sooner (see “Your Rights”).

8. Security

We use technical and organizational measures to protect your data, including encryption in transit, access controls, hashed passwords, and rate limiting. No system is perfectly secure, but we work continuously to protect your information and to detect and respond to incidents.

9. Your Rights

Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing (including under the GDPR and CCPA/CPRA). To exercise these rights, contact privacy@sitedocket.com. We will not discriminate against you for exercising your rights. If you are in the EEA/UK, you also have the right to lodge a complaint with your supervisory authority.

10. International Transfers

We and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

11. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent you from signing in.

12. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email or in-app notice, and the “Last updated” date above will change.

14. Contact

Privacy questions or requests: privacy@sitedocket.com.