auditkite

Privacy Policy

Last updated October 27, 2026

This policy explains what AuditKite collects, why, and for how long.

What we collect

  • Account data: email address, name, password hash, and sign-in sessions (device and IP address).
  • Agency brand: the logo, color, name and contact details you add for reports.
  • Audit data: the domains you audit, public pages we fetch from them, and answers from AI assistants.
  • Payments: processed by Whop. We store the payment ID, plan and amount — never card details.
  • Website analytics: pages visited, referrer, UTM tags, country and device type, counted by Umami that we host ourselves. It sets no cookies and stores nothing in your browser; visitors are counted by a salted hash of IP address and browser that changes every month. We do not count browsers that send Do Not Track, and we strip email addresses and one-time codes from page addresses before they are recorded.
  • Advertising measurement: we advertise on Google and use the Google tag to count how many visitors who clicked our ads go on to sign up or buy. Google receives the ad click identifier, the pages visited, and the fact and amount of a sign-up or purchase — not your email or account details. We do not use Google for remarketing or ad personalization. In the UK, the EEA and Switzerland, Google cookies are set only after you accept them in the cookie banner; you can change your choice at any time via “Cookie preferences” at the bottom of the site.

How we use it

To run audits, produce reports, send transactional emails (verification codes, password resets, audit and payment notifications), prevent abuse, and keep accounts secure. We do not sell personal data.

Processors

We rely on OpenAI, Perplexity and Google to generate AI answers (we send them buyer questions and public website content, not your account data), Whop for payments, Google for advertising measurement, Resend for email, Cloudflare for storage and delivery, and DigitalOcean for hosting.

Retention

  • Raw audit data (fetched pages, raw AI answers) is deleted after 90 days.
  • Reports are kept while your account exists.
  • Payment records are kept as required for accounting.

Your rights

You can access, correct or delete your data. Email [email protected] and we will respond within 30 days.