AuditOpti Privacy Policy

This Privacy Policy applies to personal information we process when you visit auditopti.com, run a free audit, create or use an AuditOpti account, subscribe to a paid plan, receive emails from AuditOpti, or contact us.

For account, billing, security and service-improvement purposes, we act as the controller of your personal information. Where an AuditOpti customer, such as an agency, uses the Service to process personal information about its own clients or other individuals, for example client contact email addresses, that customer decides how the information is used, and we process it on the customer's behalf under our Data Processing Addendum. If your information was added to AuditOpti by one of our customers, please contact that customer about how they handle it.

We collect only the information that is relevant to providing and protecting AuditOpti.

We use information to:

• provide, operate and maintain AuditOpti;
• authenticate users and keep accounts secure;
• process subscriptions, payments and invoices;
• perform the website audits and keyword research you request;
• generate reports, summaries and recommendations, and deliver them by email where configured;
• provide customer support and respond to enquiries;
• maintain the security and integrity of the Service;
• detect, prevent and respond to abuse, fraud and misuse, including enforcing usage limits;
• troubleshoot problems and fix errors;
• understand how the Service is used and improve it;
• send important service information, such as scan notifications, billing notices and changes to our terms; and
• comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use personal information for third-party advertising.

When a user submits a website for auditing, AuditOpti may process publicly accessible website content and technical information necessary to perform the requested audit. This can include page text, headings, metadata, links, images, response codes and performance measurements. Our crawler does not sign in to websites or access password-protected areas.

Submitting a URL does not give AuditOpti ownership of that website or its content. Users are responsible for having the authority to request an audit of each website they submit, as described in our Terms of Service.

Technical SEO audits do not require personal information. If a crawled website publicly displays personal information, such information may be incidentally included in crawl results; we process it only as part of the requested audit and do not use it to build profiles of individuals.

Where the EU or UK General Data Protection Regulation (“GDPR”) or a similar law applies to our processing, we rely on the following legal bases, depending on the activity:

• Performance of a contract — to create and manage your account, provide audits and reports, and process your subscription.
• Legitimate interests — to secure the Service, prevent abuse, apply usage limits, improve AuditOpti, and communicate with prospective and existing customers, where these interests are not overridden by your rights.
• Consent — where we ask for it, such as when you request that free audit results be emailed to you. You can withdraw consent at any time.
• Legal obligations — to keep financial records, respond to lawful requests, and meet other legal requirements.

These legal bases apply only where those laws apply to you and to our processing.

AuditOpti uses cookies that are necessary for the Service to work and, only if you allow them, analytics cookies. Our sign-in provider sets cookies that keep you signed in and protect your session. Checkout and billing pages are hosted by our payment provider, Stripe, which uses its own cookies on those pages.

We also store a small number of preferences in your browser's local storage so the interface remembers your choices on that device, such as your light or dark theme, whether the dashboard sidebar is collapsed, which navigation groups are open, onboarding progress, recent command-menu items, and whether you dismissed an announcement. These preferences stay in your browser and are not used to track you.

With your permission, we use analytics cookies from Google Analytics (Google LLC) to understand how visitors use the website and application. They are not set until you choose "Allow analytics" in the cookie banner, and you can change your choice at any time using "Cookie settings" in the website footer. We do not use advertising cookies.

You can clear cookies and local storage through your browser settings. Blocking necessary cookies will prevent you from signing in.

We use the following analytics services:

• Google Analytics (Google LLC) — measures how visitors use the website and application, such as pages viewed and how they arrived; analytics cookies are set only after you allow them (privacy information)

We share personal information with service providers that help us operate AuditOpti. They process information on our instructions and only as needed to provide their services to us. The providers currently used in the production AuditOpti service are:

We may also disclose information:

• to your clients or other recipients, when you share a report link or configure report emails, which is your choice as a customer;
• where required by law, regulation, legal process or an enforceable governmental request;
• to protect the rights, safety and security of AuditOpti, our customers or others; and
• in connection with a merger, acquisition, financing or sale of all or part of our business, subject to appropriate confidentiality protections.

OptiRank Studio FZ-LLC is based in the United Arab Emirates, and our service providers process information in other countries, including the United States and Malaysia, as shown in the table above. This means your information may be processed in countries other than the one in which you live, which may have different data-protection laws. Where applicable law requires it, we use appropriate safeguards for these transfers.

We keep personal information only for as long as reasonably necessary for:

• providing the Service to you;
• meeting our contractual obligations;
• complying with legal, tax and accounting requirements;
• resolving disputes and enforcing our agreements;
• maintaining security and preventing abuse; and
• other legitimate business purposes described in this Privacy Policy.

Account, website, audit and report information is kept while your account is active. Keyword data returned for a search is kept in a shared cache for up to 30 days so that repeat searches can be answered quickly; this cached data describes keywords, not individuals. Billing records may be kept for longer where the law requires us to retain them.

You can request deletion of your AuditOpti account by emailing hello@auditopti.com from the email address associated with your account. We may ask you to confirm your request or verify your identity before we act on it.

When we delete an account, we delete the account record together with its websites, audits, issues and reports, and remove generated report files from storage. If you have an active paid subscription, please cancel it first so that you are not charged again. We may keep certain records where we are legally required or permitted to do so, such as invoices and payment records, information needed to resolve disputes or prevent fraud, and backup copies until they are overwritten in the normal course.

We use reasonable technical and organizational safeguards designed to protect personal information. These include encrypted connections (HTTPS) between your browser and AuditOpti, sign-in handled by a dedicated authentication provider, access to account data restricted to the account it belongs to, private storage for generated reports, secrets kept out of application code, bot protection and usage limits on public features, and verification of incoming payment and account events.

More detail is set out in Annex 2 of our Data Processing Addendum. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please keep your sign-in credentials secure and tell us promptly if you believe your account has been compromised.

Depending on the laws that apply to you, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion of your information;
• restrict how we process your information;
• object to certain processing, including processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a data-protection supervisory authority.

To exercise these rights, contact us at hello@auditopti.com. We may need to verify your identity before responding, and we will respond within the time required by applicable law. Some rights have limits and exceptions, and whether they apply depends on the law that governs your information.

OptiRank Studio FZ-LLC is established in the United Arab Emirates. Where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) or other UAE data-protection legislation applies to our processing, we process personal information in accordance with those requirements.

This includes processing personal information lawfully, fairly and transparently; collecting it for specified purposes; limiting it to what is necessary; keeping it accurate; retaining it only for as long as needed; protecting it with appropriate security measures; and applying the conditions for cross-border transfers where they apply. Where the PDPL applies, you may exercise the rights it provides, including rights to information, access, correction, erasure, restriction and objection, by contacting us at hello@auditopti.com.

If you are located in the European Economic Area, the United Kingdom or another jurisdiction where the GDPR or a similar law applies to our processing of your personal information, you may have the rights described in Section 13, and our processing relies on the legal bases described in Section 5.

Whether the GDPR applies depends on the circumstances of the processing; it does not apply to every user of AuditOpti. Where it does apply, you also have the right to lodge a complaint with the supervisory authority in the country where you live or work, or where you believe an infringement occurred.

AuditOpti is a business service and is not intended for children or for anyone under 18. We do not knowingly collect personal information from children contrary to applicable law. If you believe a child has provided us with personal information, please contact us at hello@auditopti.com and we will take appropriate steps to delete it.

AuditOpti may contain links to websites and services operated by others, including the websites you audit and the privacy policies of our service providers. Those websites and services have their own privacy policies, and we are not responsible for their practices. We encourage you to read their privacy policies.

We may update this Privacy Policy from time to time, for example when we add features or change service providers. The “Last Updated” date at the top of this page shows when it was last revised. If we make material changes, we will notify you by email, through the Service or by another appropriate method before the changes take effect, where reasonably practicable.

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us: