Privacy
Draft. Last updated October 2026.
What a scan stores
- What you type: the question and your website address.
- Your website: the text of up to 10 public pages, read to name your company and check which topics it covers.
- The AI answers: each question’s answers, the searches the assistant made and the sites it cited. Answers are shared by everyone scanning the same market (the same service in the same area).
- A fingerprint of your IP address: a salted one-way hash, used only to limit free scans to 1 a day. It is deleted after two days. We don’t keep the address itself.
Visits
When you open a page we note which page it was, the site that linked to it, your country, and your device type and browser. Not your IP address: a key that changes every day lets us count you once a day, and can’t be used to follow you from one day to the next.
We don’t use cookies or third-party trackers, and we don’t ask for your name or email.
Who processes it
- Cloudflare hosts the service and stores the scans (Workers, D1), and runs the bot check (Turnstile).
- Stripe takes payment for the full report and issues the receipt. Your card details go to Stripe only; we keep the payment’s reference, not your card.
- OpenAI answers the questions with web search (ChatGPT).
- Google answers the questions without search (Gemini), and reads the answers to find the companies named.
Only the questions, and the public text of your website, are sent to OpenAI and Google: never your IP address.
How long
Scans and visit records are deleted after 90 days; market answers no scan uses after 31. Anyone with a scan’s link can open it, so share the link only with people you want to see it. To have a scan deleted sooner, email us its link.
Our crawler
AskrayBot reads a site only when someone scans it: the home page and up to 10 pages from its sitemap and links. It follows robots.txt and identifies itself as AskrayBot.
Your rights
Under the GDPR you can ask what we hold about you, have it corrected or deleted, and complain to the data protection authority (in Finland, the Office of the Data Protection Ombudsman).