Privacy Policy

This policy explains what data Spamlyze (https://spamlyze.com), operated by Eva Gandoin, collects, why, and what control you have over it. Questions: hello@spamlyze.com.

Data we collect

• Waitlist: your email address and, if you give it, your website's domain.
• Account: when you sign in with Google, your name, email address and profile picture.
• Sites you analyze: the URL you submit and the public pages we crawl from it.
• Google Search Console data (only if you connect it): the list of properties you can access and, for the property you choose, search performance data (clicks, impressions, CTR, position by page, query and date) and URL indexing status.
• Payments: handled by Stripe. We never see or store your card details.
• Technical data: server logs (IP address, browser type, pages requested) kept for security and debugging.

How we use Google user data

Spamlyze requests read-only access to Google Search Console (https://www.googleapis.com/auth/webmasters.readonly). We use this data only to produce the spam risk analysis and reports you request: we compare your search performance with the dates of known algorithm updates and flag the pages and queries affected.

Spamlyze's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only use Google user data to provide and improve the features you use.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to train generalized AI or machine learning models.
• No human reads your Google user data, except with your explicit consent (for example when you ask for support), for security purposes, or when required by law.

AI processing

To write your report, we send excerpts of your crawled pages and aggregated Search Console figures to Anthropic's Claude API. Under Anthropic's commercial terms, this data is not used to train their models. We do not send your name, email address or OAuth tokens.

Service providers

• Google Cloud and Firebase (hosting, database, authentication, storage)
• Anthropic (AI analysis of page content)
• Stripe (payments)
• Our email provider (waitlist and account emails)

We share data with these providers only as needed to run Spamlyze.

Storage and retention

Data is stored on Google Cloud. OAuth tokens are encrypted. We keep reports while your account exists. Raw Search Console data is deleted 30 days after the report it was used for; only the aggregated figures shown in your report are kept. Waitlist emails are deleted on request or 12 months after launch if you never create an account.

Your rights

You can ask us to access, correct, export or delete your data at any time by emailing hello@spamlyze.com. You can revoke Spamlyze's access to your Google account at any time from your Google Account permissions; we then delete the stored tokens. If you are in the EU or UK, you may also complain to your data protection authority.

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising cookies.

Changes

If we change this policy in a meaningful way, we will update the date above and notify account holders by email.