Privacy Policy

The short version

We store the website address you scan and the results. If you ask for your report, we store your email too. To run the checks, the public text of your homepage is sent to Anthropic (the two AI readings) and your URL is sent to Google (the speed test). We never sell your data, and one email to us deletes all of it.

The longer version below exists because "we take your privacy seriously" tells you nothing. This tells you exactly which company sees what.

Who is responsible

Noiseless Capital LLC, trading as Kovel Studio, 30 N Gould St Ste R, Sheridan, WY 82801, USA, is the data controller. Contact: hello@kovelstudio.com.

What we collect

• The website address you scan, and the full results of that scan.
• Your email address, only if you ask us to send you the report or you buy the Fix.
• Technical data that arrives with any web request: your IP address and the country our host derives from it. We keep the IP to rate-limit abuse of the scanner.
• Where you came from: utm_ tags and, if you clicked a Facebook or Instagram ad, the fbclid value in the link. This tells us which ad worked.
• Order details, if you buy: your website, its platform, your delivery preference and anything you type into the notes box.
• How you use this site: which pages and buttons you use, how far you scroll and how long you stay, kept against a random id that lives only for your visit. Collected by us directly — no analytics company is involved — and used to find what is broken or confusing so we can fix it.

We do not ask for and do not want card numbers. Stripe handles payment; we never see them.

Where your data actually goes

Running the scan, sending your report and taking a payment all mean other companies process part of your data. Here is the complete list.

• Anthropic PBC (USA). The public text of your homepage is sent to Claude twice: once to read and describe your business, once to run the live recommendation test with web search. This is the "verbatim" section of your report.
• Google LLC (USA). Your URL is sent to the PageSpeed Insights API for the mobile speed measurement.
• Jina AI (Germany). Used only as a fallback. If your site's firewall blocks our reader, we retry the fetch through their rendering proxy, which means your URL passes through them. Most scans never touch this.
• Vercel Inc. (USA). Hosting. Request logs, which include IP addresses, are held here.
• Zoho Corporation. Email delivery, for your report and any follow-ups.
• Stripe, Inc. (USA). Payment processing, only if you buy.
• Google Sheets. A row per lead, if the sheet integration is switched on.
• Meta Platforms. Advertising measurement, in two separate ways. In your browser: the Meta pixel loads when you arrive. You can turn it off at any time using the link under Cookies below, and once you do it stops immediately and stays off. On our server, when you buy: we tell Meta that a purchase happened, and we send your email address as an irreversible SHA-256 hash, never the address itself, so we can see which ads produce customers rather than just clicks. That second one sets no cookie, sees none of your browsing, and happens on every purchase. It is described again under Cookies below.

These are processors acting on our instructions. We do not sell your data and we do not share it for any purpose other than running the service.

What we use it for

• Running your scan and building your report.
• Emailing you that report, plus a short series of follow-up emails about AI visibility.
• Delivering the Fix, if you buy it.
• Measuring which ads bring people who run a scan, and which of those become paying customers.
• Stopping abuse of the free scanner.

The follow-up emails carry a one-click unsubscribe in every message. Unsubscribing stops the marketing emails and never affects a scan or an order you have already paid for.

Cookies and advertising measurement

We use one advertising measurement cookie, from Meta, to see which ads bring people who run a scan. It loads when you arrive rather than waiting for you to agree, so there is no banner in your way.

You can switch it off whenever you like, and it takes effect straight away: open cookie preferences and choose Decline. Nothing further is sent to Meta from that moment, your choice is remembered in your browser's local storage, and the pixel is not loaded again on any later visit.

Declining stops the browser pixel. It does not stop the purchase confirmation described above, which our server sends when you buy. That one involves no cookie, no browsing data, and your email address only as a hash.

Separately, and with no cookie involved, your browser stores two things locally to make the site usable: your light/dark theme choice, and your most recent scan result, so returning to the page does not re-run it. Both live only on your device and never reach us. Clearing your browser data removes them.

How long we keep it

• Scan results and lead records: up to 24 months, then deleted.
• Server request logs, including IPs: retained by Vercel on a short rolling window, typically weeks.
• Order and payment records: 7 years, because accounting rules require it.
• Email address, if you unsubscribe: we keep the address alone on a suppression list, so that unsubscribing actually sticks.

Your rights

You can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it. One email to hello@kovelstudio.com is enough; you do not need to give a reason and there is no form. We answer within 30 days, usually much sooner.

If you are in the EU or the UK, the GDPR gives you those rights plus the right to object to processing, the right to portability, and the right to complain to your national data protection authority. Our legal bases are: performing the service you asked for, your consent for advertising cookies and marketing email, our legitimate interest in preventing abuse, and our legitimate interest in measuring which advertising produces customers.

If you are in Australia, the Privacy Act 1988 and the Australian Privacy Principles apply to how we handle your information, and you may complain to the Office of the Australian Information Commissioner. Note that the companies listed above are mostly outside Australia, so your data is processed overseas, principally in the United States.

Children

This service is sold to businesses. It is not aimed at children and we do not knowingly collect data from them.

Changes

If this policy changes materially, the date at the top of this page changes with it.