Privacy Notice

SiteGrade (trading as SiteGrade) decides how and why your personal data is processed when you use this service, which makes us the data controller. Privacy questions and rights requests go to support@site-grade.com.

• Account data — name, email address and authentication details (including your Google account identifier if you sign in with Google). Used to create and secure your account. Legal basis: performance of a contract.
• Scan data — the URLs you submit, screenshots of those pages, scores, AI critiques and generated reports, linked to your account. Used to deliver the service and let you revisit past reports. Legal basis: performance of a contract.
• Rebuild intake submissions — business details, goals, design preferences, budget and timing, and any brand assets you upload. Used to prepare a quote and respond to your enquiry. Legal basis: steps taken at your request prior to a contract.
• Purchase records — the fact of a purchase, transaction references and the access it granted. Payment card details are collected and processed by Paddle, not by us. Legal basis: contract and legal obligation.
• Technical and usage data — IP address, device and browser information, log and error data. Used for security, fraud prevention, abuse and rate-limit enforcement, and improving reliability. Legal basis: legitimate interests.
• Support messages — the content of emails you send us. Used to answer you. Legal basis: legitimate interests.

• Hosting, database, authentication and storage providers that run the service infrastructure on our behalf.
• Paddle, our Merchant of Record, for the sale of in-depth reports, payments, invoicing and tax compliance.
• Third-party analysis providers used to generate reports: Google PageSpeed Insights (receives the URL you submit), a screenshot service, and AI model providers that receive the screenshot and technical findings.
• Professional advisers such as legal and accounting, where necessary.
• Authorities or regulators where we are required by law to disclose information.

We do not sell your personal data.

Some of our providers process data outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

Account, scan and purchase data is kept while your account is active. If you delete your account, we delete or anonymise your account data, scans and intake submissions, except records we must retain for legal, tax or accounting purposes (typically up to six years for transaction records). Logs and technical data are kept for a short period for security and troubleshooting.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where processing is based on consent. You can also complain to your data protection authority — in the UK, the Information Commissioner's Office.

Contact support@site-grade.com to exercise any of these rights; we aim to respond within one month. You can also update your details or delete your account directly from your account page.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and row-level database permissions that restrict your scans and submissions to your own account. No system is completely secure, but we work to reduce risk and respond quickly to issues. Report a suspected vulnerability to support@site-grade.com.

We use essential cookies and browser storage to keep you signed in and to keep the service secure — these are required for the app to work. Our checkout provider, Paddle, may set cookies necessary to process payments and prevent fraud. We do not use advertising cookies. You can clear or block cookies in your browser, but signing in will not work without the essential ones.

We will update this page when our practices change and revise the "last updated" date above.