Privacy Policy
Last updated: March 20, 2026
What We Collect
When you use GradeMyBiz, we collect the following information:
- Website URL you submit for analysis
- Scraped website content from publicly accessible pages of the URL you submit
- Email address, collected by Stripe at checkout if you purchase a full report (not collected by us directly)
- Cloudflare Turnstile verification token to confirm you are a real user
- IP address, used only for rate limiting to prevent abuse
How We Use Your Information
- Generate your website grade and detailed report
- Process payment via Stripe when you purchase a report
- Prevent abuse through rate limiting and bot detection
What We Don't Do
- We do not sell your data to third parties
- We do not send marketing emails
- We do not track you across other websites
- We do not use first-party tracking cookies
Data Retention
Audit records and reports are stored indefinitely so you can access your reports at any time. Scraped website content is stored as files in our database and retained for potential re-analysis. IP addresses are not stored beyond the rate limit window.
Third-Party Services
We use the following third-party services to operate GradeMyBiz:
- Stripe— payment processing
- Anthropic (Claude)— AI analysis (your website's scraped content is sent for grading)
- Firecrawl— web scraping
- Cloudflare— DNS and bot protection via Turnstile
- Vercel— hosting
- Supabase— database and file storage
- Upstash— rate limiting
Cookies
GradeMyBiz does not use tracking cookies. If you purchase a detailed report, we set a functional cookie to authorize report retry requests. This cookie contains a random token (not personal information), is HttpOnly (not accessible to JavaScript), is only sent to our retry API endpoint, and expires after 30 days.
Cloudflare Turnstile may also set cookies as part of its bot verification process.
Contact
If you have questions about this privacy policy, contact us at support@grademybiz.app.