What we keep, and why.

What we keep

• Your account. The email and name you sign in with.
• The apps you ask us to check. Their addresses, what a check saw on their pages (screenshots, page text, errors), and the verdicts and findings it wrote. Test-account passwords you give us are stored encrypted and used only to sign in to your app during a check.
• Tools you connect. For Jira, Linear, GitHub or PostHog the access token is stored encrypted. From Jira we keep the site and project you chose and the keys of the issues we filed, and we read back only what became of those issues. We do not store Atlassian account ids, names or email addresses.
• Webhooks you add. The addresses you give us, a Slack webhook among them; the result of each recurring check is posted to them.
• Payments. A payment processor takes the payment; we never see or store card numbers.
• How the site is used. Product analytics and session replay, with form inputs masked.

Who processes it

Some of the work is done by services acting for us: hosting, the database and file storage, and the bot check on the check form; sign-in; payments; email delivery; product analytics; the AI models a check runs on, which receive the content of the pages being checked; a video site's public lookup, which tells us whether a video your pages link to exists; and a chat service that carries notices about checks. Nothing is sold, and nothing is shared beyond what these services need to do their part.

How long, and how to remove it

We keep your data while your account exists. You can revoke our access to a connected tool at any time from that tool's own settings — for Jira, under connected apps in your Atlassian account. Write to us and we delete your account and everything kept for it. You can also ask what we hold about you, or have it corrected.