This policy explains what personal information AuditCrawl collects, why, how we look after it and the choices you have. It covers our website at auditcrawl.co.uk and the AuditCrawl customer app at app.auditcrawl.co.uk (together, ‘AuditCrawl’).
Who we are
AuditCrawl is created and operated by LeadCrafters, a UK digital marketing business, working alongside Into The Wild Studios. LeadCrafters is the ‘data controller’ for the personal information described in this policy, which means we decide how and why it is used.
If you have any questions about this policy or your information, contact us by phone on 01782 526660 or through leadcrafters.co.uk.
The information we collect
Information you give us
- Account and order details — your name, email address and the website address you ask us to check, collected when you buy a plan or audit.
- Payment details — payments are taken by our payment provider, Stripe. We never see or store your full card number. We receive a record of what you bought, the amount and a Stripe customer reference.
- Information you enter in the app — for example extra websites, keywords you want to track and claims made by a marketing provider that you want to compare against your data.
- Messages — anything you send us when you get in touch.
Information from connected accounts
If you choose to connect an account, we access it with read-only permission and only for the features you use:
- Google Search Console — search performance data for the websites you own, such as clicks, impressions, average position and the search terms people used.
- Google Analytics — website traffic and conversion data, such as visits, traffic sources and recorded enquiries.
- Google Ads and Facebook / Instagram (Meta) ads — campaign settings and performance data, so we can check how your ads are set up.
We never post, change, pause or spend anything in your connected accounts. You can disconnect at any time from the app, or by removing AuditCrawl’s access in your Google or Meta account settings.
Information we collect automatically
- Website scan data — when we scan a website we collect publicly available information from its pages, such as page titles, headings, links, response times and technical settings. This is information about the website, not about its visitors.
- Login and security data — when you use the app we use cookies that are strictly necessary to keep you logged in and secure, and our hosting providers keep standard technical logs (such as IP address, browser type and time of access) to keep the service running and protect it from misuse.
- Competitor and search data — we use third-party search data providers to check search rankings and publicly visible adverts. This is information about businesses and public search results.
How we use your information, and why we’re allowed to
| What we use it for | Lawful basis (UK GDPR) |
|---|---|
| Creating your account, providing your plan or audit, running scans and producing your reports | Contract — we need it to provide the service you bought |
| Taking payment, sending receipts and invoices, managing subscriptions | Contract, and legal obligation (keeping financial records) |
| Showing data from accounts you connect (Google, Meta) | Contract, and your choice to connect the account |
| Sending service emails, such as login links, scan results and weekly reports | Contract |
| Keeping AuditCrawl secure, preventing misuse and fixing problems | Legitimate interests — running a safe and reliable service |
| Telling you about new AuditCrawl features or offers | Consent, or legitimate interests for existing customers — you can opt out at any time using the link in any email |
We do not sell your personal information, and we do not use it for third-party advertising.
How we use Google user data
When you connect Google Search Console, Google Analytics or Google Ads, AuditCrawl only requests read-only access, and only uses the data to show you your own website’s performance inside AuditCrawl — in your dashboard, the Marketing Transparency Checker and your reports.
AuditCrawl’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide and improve the user-facing features of AuditCrawl that you can see and use.
- We do not transfer Google user data to others, except where needed to provide those features, to comply with the law, or as part of a merger or sale of the business with your data protected in the same way.
- We do not use Google user data for advertising, including retargeting or interest-based advertising.
- We do not allow people to read Google user data unless you ask us to (for example for support), it’s needed for security or to comply with the law, or the data has been aggregated and anonymised for internal operations.
- We do not use Google user data to train general-purpose artificial intelligence or machine learning models.
- We do not sell Google user data.
Facebook and Instagram data received through Meta’s APIs is handled in the same way and in line with Meta’s Platform Terms.
AI-generated recommendations
Some AuditCrawl features use an AI service to turn your data into plain-English explanations and suggestions. Anything produced this way is clearly labelled as an AI interpretation. We send only the data needed to produce the explanation, and we use AI providers that do not use our customers’ data to train their models.
Who we share information with
We use trusted service providers to run AuditCrawl. They only process your information on our instructions and must keep it secure:
- Stripe — payments and billing
- Supabase — customer accounts, logins and database
- Vercel — hosting the AuditCrawl app
- Hostinger — hosting this website
- Our email provider — sending login links, reports and service emails
- Search data providers — checking search rankings and publicly visible adverts
- AI providers — producing labelled AI explanations, as described above
- Google and Meta — only when you connect your accounts, and under their own privacy policies
We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganisation of the business, where it would remain protected by this policy.
International transfers
Some of our providers store or process data outside the UK, for example in the European Economic Area or the United States. Where that happens we make sure it is protected by UK-approved safeguards, such as adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep information
- Account, website and scan data — for as long as you’re a customer, then deleted within 90 days of your account closing, unless you ask us to delete it sooner.
- Data from connected Google or Meta accounts — deleted within 30 days of you disconnecting the account or closing your AuditCrawl account.
- Payment and invoice records — six years, as required for UK tax and accounting.
- Technical and security logs — normally no longer than 90 days.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- object to, or ask us to limit, how we use it;
- ask for your information in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, contact us using the details at the top of this policy. We’ll respond within one month. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113, though we’d appreciate the chance to put things right first.
Cookies
This website and the AuditCrawl app only use cookies that are strictly necessary — for example to keep you logged in and to keep the service secure. These don’t need your consent. If we ever add analytics or marketing cookies, we will ask for your permission first and update this policy.
Keeping your information secure
We use encryption in transit (HTTPS), access controls so each customer can only ever see their own data, read-only permissions for connected accounts, and reputable providers with strong security. No system is completely secure, but we work hard to protect your information and will tell you and the ICO about any serious breach as the law requires.
Children
AuditCrawl is a business service and is not intended for anyone under 18.
Changes to this policy
We’ll update this policy if the way we handle information changes. The ‘last updated’ date at the top shows when it last changed, and we’ll let customers know by email about any significant changes.