Clear by design.

Who controls this data

Lensiq is operated as a beta product. [Legal entity name, registered address and jurisdiction to be added here once incorporated]. Until that information is added, treat hello@lensiq.site as the point of contact for all privacy questions and requests.

What an audit processes

When you create an account, we collect your email address, used for sign-in via our authentication provider, Supabase. When you submit a URL, Lensiq stores: the URL and the page goal you selected; publicly visible content from that page (text, headings, calls to action, link and form structure — not form values); the outcome of following each call-to-action link on the page (its destination, and whether that destination is on your own site); annotated desktop and mobile screenshots; technical measurements from Lighthouse covering performance, accessibility, SEO and best practices; and the report generated from this evidence by an AI provider (see below). If you pay for an audit, we also store payment metadata from Stripe — such as a checkout session identifier and payment status — never your full card number, which Stripe processes directly and Lensiq never receives. Do not submit private, authenticated, password-protected or confidential pages, and only submit URLs for websites you own or are otherwise authorized to have audited.

Why it is processed, and on what legal basis

We process this data to perform the audit you requested and show you its results — necessary to perform our contract with you, including creating and maintaining your account — to keep the service secure and reliable, for example blocking requests to private or internal network addresses and keeping technical logs for abuse prevention and debugging — our legitimate interest in running a secure service — and, for analytics cookies only, on the basis of your consent, which you can withdraw at any time. We do not sell this data.

Our hosting provider and our application automatically log standard technical information for every request — such as IP address, browser/user-agent, and timestamps — for security, abuse-prevention and debugging purposes.

Who else sees it (sub-processors)

The following third parties process data on our behalf to run the service:

• Supabase — database, file storage and authentication for your account and audit records, hosted in the EU (eu-west-1).
• Vercel — hosting for the web application.
• Stripe — payment processing for paid audits. Lensiq never receives or stores your full card details.
• An AI provider(OpenAI, Anthropic, or OpenRouter, depending on configuration) — receives the extracted page evidence and screenshots to generate specialist findings and the executive report. These providers are based outside the European Economic Area; submitting a page for audit means this evidence may be transferred there for processing. The specific legal basis and safeguards for each provider's international transfers will be verified and documented here before public launch.
• Google Analytics (GA4) — usage analytics for lensiq.site, only after you accept analytics cookies. See our Cookie Policy.

Retention and deletion

A specific retention period for audits, reports, screenshots, technical logs and payment metadata will be published here before public launch — this is a required step before Lensiq accepts payment from the public, not an indefinite default. Until then, request deletion of an audit at any time by emailing hello@lensiq.site with the report identifier or URL.

Your rights

Depending on where you are located, you may have the right to access, correct, delete, or receive a copy of data we hold about an audit you submitted, to object to further processing, to request that we restrict how we process it, and to receive it in a portable format. If we rely on your consent (for analytics cookies), you can withdraw that consent at any time without affecting the lawfulness of processing carried out before you withdrew it — see our Cookie Policy for how. You also have the right to lodge a complaint with your local data protection supervisory authority. Contact hello@lensiq.site to exercise any of these rights.

Children

Lensiq is not directed at, and is not knowingly used by, children under 16.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page.

Contact

Privacy questions: hello@lensiq.site.