CrowdAudit

Privacy Policy

Last updated September 26, 2026

What we collect

  • Your account: name, email, optional company name, and your password as a one-way hash (we can’t read it).
  • Payments: what you paid and your credit history. Card details go straight to Stripe; we never see or store them.
  • Your audits: the URLs you submit, screenshots and text captured from those pages, measurements, and the reports we produce.
  • IP addresses, only to rate-limit sign-ups and free previews. We discard them after about a day.

Who processes your data

To run an audit we use these services. They process data on our behalf and only for this purpose:

  • Cloudflare: hosting, the database, file storage for screenshots and reports, the browser that captures pages, and grouping similar findings.
  • OrcaRouter, which passes requests to OpenAI (persona reviews) and Anthropic (the written summary). These AI providers receive the screenshots and text of the pages you audit, plus descriptions of the personas. They do not receive your name, email or payment details.
  • Resend: sends emails such as “your report is ready” and password resets.
  • Stripe: card payments.

How long we keep it

  • Your account, audits, screenshots and reports: until you delete them by deleting your account.
  • Audits you started but never paid for: deleted after 24 hours.
  • Sign-in sessions: 30 days, or until you log out.

Cookies

We use one cookie to keep you signed in, and a short-lived one during Google sign-in. No advertising or tracking cookies.

Your choices

Deleting your account in Settings permanently removes your account, your audits, and their screenshots and reports. You can also turn off any share link at any time. For a copy of your data or anything else, email hello@crowdaudit.online.

Sites we audit

When you audit a site, we visit only the pages you choose, as CrowdAuditBot, and respect robots.txt. If you run a site and don’t want it audited, see our crawler page.