Privacy Policy

• Email and name if you create an account (manually or via Google OAuth).
• Audit submissions — the eCommerce URLs you ask us to audit and the resulting score data.
• Request metadata — IP address (for rate limiting), user-agent, and timing.

• Run audits and serve you the results.
• Enforce per-tier rate limits and audit caps.
• Maintain a history of your past audits (logged-in users only).
• Investigate abuse, debug errors, and improve the product.

We do not sell, rent, or share your personal data with third parties for advertising.

• Google — for OAuth sign-in (you choose to grant access; we receive email, name, and a stable Google user ID).
• Cloudflare — DDoS protection and CDN; sees request metadata in front of the origin.
• Hetzner — hosting provider for the origin server.

Audit results contain publicly-fetchable metadata from the URL you submit. We sample up to 30 product pages per audit and extract structured data, titles, images, and brand/SKU fields. We do notattempt to log in, bypass paywalls, or capture user-specific content from those sites.

• Your last 15 audits are kept and shown on your account page; older ones are evicted on the next audit.
• Anonymous audit results are kept for cache hits within a 24-hour window.
• Daily Postgres backups are retained for 14 days on the origin server.

You can delete your account and all associated audit history by emailing sales@bhoroli.com. We will action requests within 30 days.

Questions: sales@bhoroli.com.