Privacy Policy
Last updated: 31 October 2026
In short: we only audit public information, we never ask for passwords, this site has no tracking or analytics, and we delete your order details 90 days after delivery.
What we collect
- Your order details, from the order form or an email: your tier, domain, competitor domains, a short description of your business and market, optional target searches, your delivery email and the payment method you choose. For a security audit, also your confirmation that you're authorized to have the site tested.
- Your IP address and country, read from the request when you submit the order form. The IP is used only to limit repeated submissions and is deleted automatically within 2 hours; the country is kept with the order.
- Payment information: your order number and the exact amount. For USDT, your transaction hash and the address you paid from. For PayPal, the details PayPal shows us about your payment, such as your name, PayPal email address, the amount, the date and your note. We use these to confirm payment and, if needed, refund you.
- Emails you send us and our replies.
We never ask for logins, passwords, or access to your analytics or Search Console.
What we look at
To produce your audit we only use publicly available information: your website and your competitors' websites, their sitemaps and robots.txt, public speed tests, public domain-ranking lists and public web pages in your niche.
How we use it
Only to produce and deliver your report, handle your revision or refund, and answer your questions. We don't sell, rent or share your information for marketing, and we don't add you to a mailing list.
How long we keep it
We delete your order details and the report file we keep 90 days after delivery. We may keep a minimal record of the payment (date, amount, transaction hash or PayPal transaction ID) for bookkeeping. A USDT transaction itself is permanently public on the Tron blockchain, and no one can delete it. PayPal keeps its own records of PayPal payments.
Free check tools
When you use the free SEO quick check or the free security headers check, our server loads the address you enter (one page, plus robots.txt and sitemap.xml for the SEO check, or public SPF and DMARC DNS records for the headers check). We keep the checked address and its results for 7 days so you can ask for them by email. To limit abuse we count checks per IP address; those counters contain your IP address and delete themselves within 2 hours. We get a short private Telegram notification with the checked domain, its score and your country (from Cloudflare), at most once an hour per domain.
If you ask us to email you the report, we store your email address, the checked address and its results for 90 days, only to send that report and answer your reply. We don't add you to a mailing list or share your email. We send the report by hand, usually within one business day.
This website
This site uses no cookies, analytics, trackers or third-party scripts. The order page and the free check store nothing in your browser; your order number is in the page link so you can come back to it. Our hosting provider (Cloudflare Pages) may keep standard server logs, such as IP addresses, for security and operations, under its own privacy policy.
Service providers
We use Cloudflare to host this site and store order records, an email provider to receive and send email, and Telegram to notify us privately when a new order comes in (the notification includes the order details above) or when someone uses a free check or asks for its report. They process data only to provide those services.
If you pay with PayPal, PayPal processes the payment and receives your payment details (such as your card or bank details and PayPal account information) directly; we never see your card or bank details. PayPal handles that information under its own privacy statement.
Your choices
You can ask us at any time to see or delete the information we hold about you, and we'll do so unless we must keep a payment record. Email holicaudit@mail.grokbot.com.