Your data, in plain words.

What we collect

• Your account: email address, and your name if you sign in with Google or add it.
• The addresses you scan, and what our scan reads from those public pages: text, titles, links, page speed and screenshots.
• For Pro: your site, the keywords, questions and competitors you confirm, and the reports, rankings and page drafts we make each week.
• Billing: Stripe handles your card. We store your Stripe customer id, plan and billing status, never your card number.
• API keys for the MCP server: we store a one-way hash of each key, its name and when it was last used.
• Usage and security data: your IP address (stored only as a hash, to apply the daily free-scan limit), and how you use the site through Google Analytics.

How we use it

• To run scans, show your results and write the fixes.
• For Pro, to scan your site every week, track rankings and AI answers, draft pages and send your weekly email.
• To bill you, prevent abuse (daily limits and bot checks) and keep the service working.
• To understand which parts of the site help people, so we can improve it.

We don't sell your data, and we don't use it for advertising.

Who can see your scans

Anyone with the link to a scan can open it, so you can share it. A scan only shows public information from the page that was scanned. Scanning the same address within 24 hours shows the saved result, including to someone else who scans it. Your Pro site, reports and drafts are only visible to you.

Services we use

These companies process data for us, only to provide the parts of the service listed:

• Google Firebase and Google Cloud: hosting, sign-in, database and servers.
• Stripe: payments and subscriptions.
• Firecrawl: loading pages and taking screenshots for scans.
• Google PageSpeed Insights: measuring page speed.
• Anthropic (Claude): reviewing message and design, suggesting your Pro setup and writing page drafts. It receives text from the pages you scan, not your account details.
• DataForSEO: keyword data, Google rankings and AI-assistant answers for Pro.
• Resend: sending the weekly Pro email.
• Google reCAPTCHA, through Firebase App Check: checking that requests come from our site and not from bots.
• Google Analytics: how the site is used. It sets cookies, so it only runs if you accept them in the cookie notice; you can change your choice any time under Cookie settings at the bottom of the page.

How long we keep it

We keep your account and Pro data while you have an account. Scan results are kept so their links keep working. If you cancel Pro, your site and reports stay in your account until you delete them or ask us to. Ask us any time to delete your account, your scans or your Pro data, and we will.

Your choices and rights

• Turn off the weekly email on your account page.
• Ask for a copy of your data, or for it to be corrected or deleted.
• Revoke MCP keys on the Connect your agent page.

Email hello@optimizebear.com for any of these. If you're in the EU or UK, you also have the right to object to how we use your data and to complain to your data protection authority.

Security

Data is sent over HTTPS and stored with Google Cloud. Access to your account data is limited to you and to our servers. API keys and IP addresses are stored as one-way hashes.

Changes

If we change this policy in a way that matters, we'll update the date above and tell Pro customers by email.

Contact

Questions about privacy: hello@optimizebear.com