Summary

We store your business identity and the AI scan data we generate for your audit. We don't store payment information (Stripe handles that). We use your email only for delivery and lifecycle communication. We don't sell, share, or rent your data to third parties. Compliant with GDPR (EU), KVKK (Türkiye), and aligned with major US privacy regulations.

Data we collect

  • Business identity — name, address, Google Place ID, category descriptor, and any audit configuration you provide (audience profiles, competitors).
  • Buyer email — collected at Stripe Checkout, used to deliver the report PDF and lifecycle communication. You can opt out of lifecycle emails at any time.
  • Audit scan data — every raw AI response generated during your audit, retained indefinitely on Cloudflare R2 (encrypted at rest). This is the audit trail.
  • Page analytics — privacy-respecting page-view counts via Vercel Web Analytics. No cookies, no individual tracking.

Data we do NOT collect

  • Payment card data (handled entirely by Stripe).
  • Browsing behavior outside this site.
  • Cross-site tracking cookies.
  • IP addresses for the buyer (Stripe sees these for fraud purposes; we do not).

How we use your data

The scan data is used to (1) generate your audit, (2) maintain an audit trail you can verify, (3) inform aggregated, anonymized methodology research published in our blog and methodology page, and (4) re-run capability if you order a follow-up audit at the same business.

Your email is used for (1) audit delivery, (2) refund/support communication, and (3) optional lifecycle emails (re-scan reminders after 30 days, blog updates). You can opt out of lifecycle emails via the unsubscribe link in any email or by emailing support@scoremybusiness.ai.

Sharing

We use the following processors:

  • Stripe — payment processing
  • Vercel — site hosting + serverless functions
  • Cloudflare R2 — encrypted scan-data storage
  • Resend — transactional email delivery
  • Loops.so — lifecycle email (only if you don't opt out)
  • OpenAI, Google AI, Anthropic, Perplexity — AI scan execution. We send your business name and search queries; we do not send your email or buyer details.
  • Plain.com — support inbox tooling

We do not sell, rent, or share your data with any party outside this list of processors. Each processor has its own privacy commitments.

Your rights

Under GDPR, KVKK, and equivalent US privacy regulations, you have the right to:

  • Request a copy of all data we hold about your audit
  • Request correction of any inaccurate data
  • Request deletion of your audit data (subject to a 7-day refund hold period)
  • Opt out of lifecycle communication at any time

Email support@scoremybusiness.ai with "Data request" in the subject. Response within 5 business days.

Retention

Audit scan data: indefinite retention by default (audit trail) — but deleteable on request. Email: retained until you opt out. Page analytics: aggregated only, no individual records.

Contact

Privacy questions, data requests, DPO matters: support@scoremybusiness.ai
Operating entity: Miyu Ventures LLC, WY, USA