Privacy policy

Refreshly (“we”) builds websites and runs automated website audits. This policy describes what we collect, why we collect it, who we share it with, and how to have it removed. It covers refreshly.tech and the audit product.

What we collect

When you create an account: your email address, your name if you give one, and either a hashed password or, if you sign in with Google, the account identifier, email, name, and profile image Google returns. We never receive your Google password.

When you request an audit: the website address you ask us to check, and a business name if you provide one.

When you pay: Stripe collects and processes your card details. We never see or store card numbers. We keep the Stripe customer and subscription identifiers, and what you bought.

When you contact us: whatever you put in the demo or contact form, which is your name, email, and message.

Automatically: standard server logs, plus analytics described below.

What the audit collects about your website

An audit fetches pages from the website address you give us, the same way a search engine would, and records what it finds: page content, response headers, image sizes, links, and public DNS and certificate records for the domain. Pro audits additionally load pages in a real browser to check accessibility and see which third-party scripts run.

We audit only the address you submit, and we obey robots.txt. Pro audits additionally use the site: opening menus, following buttons, and typing clearly-marked test text into forms to check they work. Nothing is ever submitted, purchased, or changed, and we never attempt to log in.

Why we collect it

To run the audits you ask for and deliver the reports; to take payment; to email you when a report is ready or when there is a problem with your account; and to keep the service working and secure. We do not sell your personal information, and we do not use your audit results to train anything.

Who we share it with

We use these providers, and only for the purposes listed:

• Amazon Web Services: hosting, databases, and file storage (United States).
• MongoDB Atlas: account and audit records.
• Stripe: payment processing.
• Resend: sending report and account emails.
• Google: sign-in if you use it, plus the public PageSpeed Insights and Chrome UX Report APIs, which receive the website address being audited.
• OpenAI: for Pro audits only, page text and page screenshots are sent to generate the written walkthrough and copy suggestions. This is your public website content, not your account details.
• Airtable: demo and contact enquiries.

Analytics and cookies

A strictly necessary cookie keeps you signed in. We also load Google Analytics and the Meta pixel on the marketing pages, which set their own cookies and tell Google and Meta that a browser visited this site. You can block these with any content blocker or your browser’s privacy settings, and the site will work normally.

How long we keep it

Account and audit records are kept while your account is open. Report links in emails expire after seven days, though the report stays in your dashboard. If you close your account we delete your personal data within 30 days, except records we must keep for tax and accounting.

Your choices

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing brian@refreshly.tech. Depending on where you live you may have additional rights under the GDPR, the UK GDPR, or US state privacy laws, including the right to complain to your data protection regulator. We will not charge you or degrade your service for exercising any of them.

Children

Refreshly is a business service and is not directed to anyone under 16.

Changes

If we change this policy we will update the date at the top, and for material changes we will email account holders.

Contact

Refreshly: brian@refreshly.tech. We answer privacy requests within 30 days.