Privacy Policy

1. Scope

This policy explains how NOTABIS SEO Auditor handles information when you visit the service, create or use an account, run an audit, use the API, contact us or view a report. It applies to the SEO Auditor service and not automatically to every separate NOTABIS product.

2. Information we process

• Account and identity: central account subject and sign-in state, SEO usage quota records, and NT balance information needed to authorise service use.
• Audit inputs: submitted URL, origin, crawl settings and audit creation details.
• Audit results: fetched response metadata, technical measurements, links, findings, scores, progress records and report identifiers.
• Rendered evidence: rendered DOM measurements and, where enabled, desktop or mobile screenshots.
• API and security data: API-key metadata, request timestamps, IP address, user agent, rate-limit and operational error records. Secret key values are not intended to be stored in reports or logs.
• Communications: information you provide when contacting support or reporting abuse/security issues.

3. What the crawler receives

The crawler requests publicly reachable HTTP or HTTPS resources needed for an authorised audit. It reads robots.txt, remains subject to same-origin and destination-safety controls, and applies bounded page, depth, timeout, body-size, redirect, retry and request-rate limits. It does not bypass authentication, WAF challenges, CAPTCHAs or anti-bot controls.

Do not submit credentials, private URLs, personal data or confidential content unless you have the authority and a genuine need to do so.

4. Why we process information

• To run audits and generate reports requested by you.
• To authenticate users, enforce account ownership, product quotas, NT balance and page limits.
• To secure the service, prevent abuse, troubleshoot failures and maintain crawler reliability.
• To provide support and respond to vulnerability or crawler-blocking reports.
• To understand aggregate service usage and improve the product, where the relevant analytics configuration is enabled.
• To meet legal, accounting and payment obligations handled through the applicable NOTABIS account or payment platform.

5. Reports, sharing and visibility

Reports may use non-sequential public identifiers and can be accessible to anyone who has the report link. Authenticated history and account routes use account ownership checks. You control what target URL you submit; do not use public reports for confidential or sensitive material.

6. Service providers

We use providers for account identity, hosting, databases, queues, browser rendering, monitoring, analytics and payments as needed to operate the service. Payment-card data is handled by the payment provider rather than stored as full card data by the SEO Auditor. Providers process information only as needed for their contracted services and applicable safeguards.

7. Retention and deletion

We retain audit records, screenshots, account links and operational logs for as long as reasonably necessary to provide reports, enforce security, resolve disputes and meet legal obligations. Retention periods may differ by record type, backup and legal requirement.

To ask about access, correction or deletion, email [email protected] and include enough information to identify the request without sending secrets.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of information, or complain to a data-protection authority. We may need to verify identity and coordinate with the central account platform for account-related requests.

9. Security

We use measures such as HTTPS, protected sessions, CSRF protection, API authentication, ownership checks, rate limiting, signed internal crawler requests and secret-managed infrastructure. No internet service is risk-free. Report suspected security issues through the Security page.

10. Children and changes

The service is intended for business and general web-audit use, not for children. We may update this policy when the service, providers or legal requirements change. The date above identifies the latest published version.

11. Contact

Privacy questions and rights requests: [email protected]. We may coordinate account-related requests with the central NOTABIS account platform.