Privacy policy
SiteScore is operated by Rama Chandra Technologies ("we"). This notice explains what personal data we process when you use SiteScore, in line with India's Digital Personal Data Protection Act, 2023.
What we collect and why
| Data | Why | How long we keep it |
|---|---|---|
| Account: email address, password (stored only as a salted PBKDF2 hash), sign-in sessions | To provide your account and keep it secure | Until you delete your account. Sessions expire after 14 days. |
| Scans you run: website addresses, industry, region and keywords you enter, and the reports we generate | To run the scan, show your history and score trends, and send alerts you set up | Until you delete them by deleting your account |
| Free scans without an account: the website address and a one-way, keyed hash of your IP address | To run the scan and enforce the limit of 5 free scans a day; to count usage | Deleted after 30 days unless you save the scan to an account |
| Email address you enter to unlock a free report | To unlock the report and, at most, follow up about it | Until you ask us to delete it |
| Email for product updates | To send occasional product news | Until you unsubscribe or ask us to delete it |
| Contact form: your name, email address, an optional website, and the message | To reply to you | Until you ask us to delete it |
| Report feedback ("was this helpful?") | To improve the reports | Until you delete your account |
| Usage events (for example, a page view or a scan started), stored with the IP hash above, never the IP address itself | To measure and improve the product | Kept in this pseudonymised form; detached from your account if you delete it |
We do not sell personal data, show ads, or use analytics or advertising cookies.
Cookies
We set one cookie, a session cookie, only when you sign in. It keeps you signed in and is not readable by scripts. Pages load fonts from Google Fonts, which receives your IP address as part of the request.
Services that receive data
- Google PageSpeed Insights receives the address of the page being scanned, to measure performance.
- Serper (Google search results) and, as a fallback, DuckDuckGo receive search phrases built from the industry, region and keywords you enter, to find competitors and rankings.
- Our hosting provider stores the database and processes requests.
- If email notifications are enabled, our email provider delivers alerts and lead notifications.
The websites you scan receive ordinary requests from our crawler, identified by its user agent.
Lead widget visitors
If you submit a form embedded on another business's website, that business decides how your details are used, and we process them on its behalf: we pass your name, email, phone number and scan result to that business. Contact that business about its use of your data.
Your rights
You can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. You can delete your account and all your scans yourself from the Account page. For anything else, or a grievance, contact us or write to info@ramachandratechnologies.in. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Security and changes
Passwords and session tokens are stored only as hashes, provider API keys are encrypted, and the site is served over HTTPS. If we change this policy we will update the date above, and for significant changes we will notify account holders.