Privacy

We read one public web page, record what we found, and keep it. We do not run accounts, we do not set tracking cookies, we do not use analytics, and we do not sell anything about you. If you buy something, we hold the email address you used and a record of the purchase. Some people are separately given private access to documents on a client portal, by invitation only; that sets one strictly necessary cookie and nothing else.

• The website address you enter. This is the only thing we ask for before a scan.
• The public content of that page. We store the visible text and the technical signals we scored, as the evidence behind your result.
• Your email address, if you buy. Stripe collects it at checkout and passes it to us so we can send your report or acknowledge your order.
• A record of the measurement. What we found on the page and — for purchases — what was bought and when.

Customer-provided context is stored separately from independently measured evidence and is not treated as a measured finding. What you tell us about your business and what four AI systems say about it are different kinds of information, and we keep them apart on purpose.

We do not publish information you volunteer, except where it is necessary to provide your own measurement or where you have authorized its use.

• No accounts and no passwords — there is nothing to sign up for.
• No card details. Payment happens on Stripe's own checkout; we never see or hold a card number.
• No tracking cookies, no advertising cookies, no analytics, and no cross-site tracking. The public site sets no cookies at all; the only cookie we ever set is the strictly necessary one described under The client portal below, and it is set only after you follow a private access link.
• No purchased or scraped contact lists, and no personal data about your customers.

The scanner requests the page the same way a browser would, over the public internet, and identifies itself honestly as Vizcaya-Intelligence-Scanner/1.0. It reads only what is publicly served, follows a bounded number of redirects, refuses non-public and internal addresses, and does not attempt to log in, submit forms, or reach anything behind authentication.

We keep this list short deliberately, and it is the actual list — not a generic one.

• Stripe — payments and checkout. Stripe collects your payment details directly and provides us with the email address and the fact of payment.
• Resend — sending transactional email, such as your report link or an order acknowledgement.
• Google — Places and Geocoding, used only when you ask us to check whether we can produce a Website Report for you. We send the business category and the city and state you confirm. We do not send your name, your contact details or your results.
• Railway — hosting for the application and its database.

Each processes information on our behalf under its own terms. We do not sell, rent or trade personal information, and we share it otherwise only where the law requires.

The AI Recommendation Assessment works by putting a standardized set of questions to independent AI systems — currently ChatGPT, Claude, Gemini and Perplexity — and recording what they answer.

• Those questions concern publicly available information about businesses and their markets. We do not submit your personal contact information to them as part of a measurement.
• Anything you send those providers yourself, or that they already hold, is governed by their privacy policies rather than ours.
• We use AI-assisted tools internally to help organize evidence and prepare documents. A person reviews every deliverable before it is issued.

• Raw page text: kept. The captured text of a scanned website is retained while we operate this service. Ask us and we will delete yours.
• Results and reports: kept. Your measurement is what a future comparison is made against, and a purchased report must keep working. Reports are built from the recorded results, never from the raw page text — so deleting the text above leaves your report and its link intact.
• Business information you volunteer: kept for as long as we hold the record for your business, because what you told us is what a later measurement is compared against. It is removed when you ask us to delete your business record, subject to anything we are legally required to keep.
• Purchase records: kept for as long as legal, tax and accounting obligations require.

A purchased report is reached through a signed link that is specific to your assessment and cannot be guessed by altering it. It does not expire — the copy in your inbox will keep working. Because anyone holding the link can open the report, treat it as private rather than posting it publicly.

Some people are given private access to documents through a client portal. Access is created by us for a named person and reached through a personal link we send them. There is no way to register for it, there is no password, and there is nothing to sign up for.

• We hold the name we were given, and an email address if we have one so we can send the link. We may keep a short private note about why access was granted.
• We set one cookie when you follow your link. It is strictly necessary — it is what keeps the portal open as you move between pages — and it carries the signed invitation and nothing else. It is scoped to the portal, so it is never sent with any other request on this site, and it is not used for analytics, advertising or tracking of any kind.
• We record when access was created, when you first opened the portal and when you were last there, how many separate visits that adds up to, when you first opened each document, when you first downloaded each document as a file, and when you followed the link to try our website check — the first time, the most recent time, and how many times in total.
• If you use Sara, our assistant, we record that you did: when you first opened her, the most recent time, and how many times in total. We do not record the questions themselves — not what you typed, not which suggested question you chose, and not the answers you were given.
• We do not record how you read anything: no scrolling, no cursor movement, no time-on-page, no page-by-page tracking, and no third-party analytics of any kind.
• Documents you download are stamped with your name, your email address if we have one, and the date, so that a copy can be traced back to the person it was issued to.
• If you follow the link to try our website check, we record that you followed it and nothing more. What you do once you arrive is not recorded against your access, not linked to it, and not inferred — the public site sets no cookies and your portal cookie is not sent to it.
• Your link stays valid so you can return to it whenever you like. You can ask us to switch your access off at any time and it takes effect immediately, without affecting anyone else.

Write to reports@vizcayaintelligence.com and you can ask what we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live you may have further rights under local privacy law; tell us and we will honour them.

If you own a website we have scanned and you want its stored evidence removed, write to the same address and we will remove it.

How we protect what we hold is set out on the Security page.

Our services are intended for businesses. We do not knowingly collect information from children.

If this policy changes, the revised version is posted here with a new date at the top.

reports@vizcayaintelligence.com