Privacy

We collect as little as we can. Here is everything we store and why.

Free scans

We store the address you scanned and the results, so the report link works and we can improve the service. Report links are random and not listed anywhere, but anyone you share a link with can open it. Google PageSpeed Insights receives the address you scan to measure its speed.

Orders

When you order a plan, we store your name, email address, website address, the plan and your notes, to handle the order, contact you and deliver your report.

Content plans and articles

To write your content plan and articles, the text of your site's public pages (the ones the audit crawled) is sent to the AI model that writes them: Anthropic's Claude or OpenAI's Codex, or a model running on our own computer as a backup. We remove email addresses and anything that looks like a key or password first, and we never send your order details or CMS credentials to a model. Articles and plans are kept so you can download them again and so topics don't repeat.

CMS connections

If you connect your CMS, we store the app password, API key or token you give us encrypted (AES-256-GCM), use it only to create posts for your site, and never show it again (only its last 4 characters). Disconnect deletes it at once; you can also revoke it in your CMS. We log each post we create (time, site, post ID or link, status), never the credential.

Payments

Payments are handled by Stripe. You enter your card or bank details on Stripe's own checkout page, not on our site, so we never see or store them. Stripe tells us whether the payment worked and gives us reference numbers (customer, payment and subscription IDs), which we keep with your order. Stripe processes your payment data under its own privacy policy.

IP addresses and country

We use your IP address only to limit how many scans and orders can be made per hour. It is kept in memory for up to an hour and never written to disk. Cloudflare tells us which country a visit comes from; we use that to show prices in your currency and in our anonymous visit totals (see below), never linked to you. If you open a currency preview link (one ending in ?cc=), we set a one-day cookie that only remembers that preview country.

Help chat

If you use the help chat's "talk to a human" form, we store the email address and question you enter so we can reply to you. We also store the text of questions the chat couldn't answer, so we can improve its answers. The help chat is processed on our own server, and we don't share these messages with anyone.

Visit counts

We count visits, scans and orders per day by where they came from (the referring website or a campaign tag in the link). A small script of our own also tells our server which page is open while the tab is visible, so we can see how many people are on the site right now: the page, the referring website's domain, browser, device type, operating system, screen size and language, plus the country from Cloudflare. It uses a random ID kept in the tab's session storage, which is gone when you close the tab. To count unique visitors per day, your IP address is turned into a one-way code with a key that changes every day; the IP address itself is never stored. We keep only daily totals. If your browser sends Do Not Track or Global Privacy Control, we only count the page view, with no details. No cookies, no profiles, no third-party analytics.

Who else sees data

Cloudflare carries our traffic and may log requests under its own policy. Google receives scanned addresses for PageSpeed tests, and short topic phrases (never personal data) for Autocomplete suggestions. Anthropic or OpenAI process your public page text to write your content. Stripe processes payments. We don't sell or share your data with anyone else.

Your choices

You can ask us to show or delete anything we hold about you by emailing hello@lordevo.com. We may need to keep payment records for as long as the law requires.

Contact

Questions about privacy: hello@lordevo.com.