Privacy Policy

1. Information we collect

When you submit one of our forms, we collect:

• Your full name, email address, phone number and country (required).
• Your company name, company website, the service you are interested in and any message you write (optional).
• A record of your consent, including the time you gave it and the version of this policy you agreed to.
• The page or form you used (for example, the assessment form or the contact page) and the language you used it in.

We do not store your IP address. To prevent spam and abuse, we derive a one-way, salted hash from your IP address and email address that cannot be reversed, and we delete these records automatically within a few days. We do not use advertising or tracking cookies.

2. How we use your information

• To prepare and deliver your website assessment and report.
• To respond to your enquiry and contact you about the services you asked about.
• To manage our relationship with you as a prospective customer.
• To protect our website and services against spam, fraud and abuse.

We process this information on the basis of your consent, which you can withdraw at any time, and our legitimate interest in responding to enquiries and keeping our services secure. We never sell your personal information.

3. How the website assessment works

When you provide a company website, we analyze publicly available information about that website. We request performance data from the Google PageSpeed Insights API and fetch your site's public pages and files (such as robots.txt and sitemap.xml). The resulting technical findings, together with your company name and the service you selected, are sent to Anthropic's Claude API to generate written recommendations. Your name, email address and phone number are not sent to the AI provider.

Your report is available through a private link that expires after 30 days. Anyone with the link can view the report, so please share it carefully.

4. Service providers

We use trusted providers to run our services. They process data on our behalf and only as needed:

• Supabase — secure database hosting and staff authentication.
• Google (PageSpeed Insights API) — website performance measurements.
• Anthropic (Claude API) — generating assessment recommendations from technical findings.
• Resend — sending transactional emails such as your report link (if enabled).
• Cloudflare Turnstile — spam and bot protection on our forms (if enabled).
• Our website hosting provider — serving this website.

Some of these providers may process data outside your country, under appropriate safeguards.

5. How long we keep your information

We keep enquiry and lead information for as long as needed to respond to you and manage our relationship, and for no longer than 24 months after our last contact with you, unless the law requires us to keep it longer. Abuse prevention records are deleted within a few days. You can ask us to delete your information at any time.

6. Security

Data is encrypted in transit. Access to stored information is restricted to authorized TARGET staff using authenticated accounts and database-level access controls (row-level security). Visitors can never read other customers' information.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing and to withdraw your consent. To exercise these rights, contact us at our contact page. You may also have the right to complain to your local data protection authority.

8. Children

Our services are intended for businesses and are not directed at children. We do not knowingly collect information from children.

9. Changes to this policy

We may update this policy from time to time. The version and date at the top of this page show when it last changed. Each consent record stores the version you agreed to.

10. Contact

If you have any questions about this policy or how we handle your information, contact us at our contact page.