Privacy Policy
Effective date: October 13, 2026
1. Introduction
Suprasites (“Suprasites,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose and otherwise process information when you visit our website, use our online presence assessment, or ask us for help.
This policy applies to information collected through this website and its related services. By using the website, you acknowledge that you have had an opportunity to review this policy. Where applicable law requires consent for particular processing, we will obtain it separately.
2. Information we collect
Information you provide. Depending on what you use, you may give us:
- The website address you submit for assessment.
- Optional business details: business name, town or service area, type of business, main goal, what you offer, who your customers are, and competitor websites you choose to list.
- If you request help: your name, email address, and optionally your phone number, business name, a message, the type of help you want, and which findings you selected.
Please do not submit passwords, payment card details, confidential customer records, sensitive personal information, or anything not needed for a website assessment.
Information collected automatically. Like most websites, our hosting and infrastructure providers process technical information needed to deliver pages and keep the service secure, such as IP address, browser and device type, pages requested, and the date and time of requests. If a page fails to load correctly, technical error details (for example the error message and the page address) may be recorded so we can fix the problem.
Information obtained through assessments. When you submit a website, Suprasites visits that website's publicly accessible pages — the homepage and up to four other pages on the same site — and looks up its public domain records. This may include page content, titles, descriptions, links, metadata, business information published on the site, and security and technical configuration. We do not log in to the website or access anything that is not publicly available.
The scope of an assessment depends on the checks available at the time. We currently do not check third-party review platforms, search engine rankings, business listings, AI answers or competitor performance. Anything we could not check is shown as not assessed and is never presented as verified.
3. How we use information
- To generate and display the assessment you requested.
- To identify and explain potential improvements to your online presence.
- To respond to help requests you send us.
- To avoid repeating identical assessments of the same website within a short period, and to limit duplicate or abusive submissions.
- To maintain, troubleshoot, secure and improve the website and its services.
- To comply with legal obligations and enforce our rights.
We will not use information for purposes materially incompatible with those described here without additional notice, or consent where required by law.
4. Automated processing
Assessments are produced automatically by rule-based checks run on the website you submit. Suprasites does not currently send assessment data to artificial intelligence providers. If that changes, we will update this policy before doing so.
Automated findings may be incomplete or inaccurate. Recommendations should be reviewed in context and are not guarantees of search rankings, traffic, inquiries, revenue or any other business outcome.
5. Reports and how they are accessed
Each completed assessment is saved as a report reachable through a long, randomly generated link. Anyone who has that link can view the report, so share it only with people you trust. Reports are not listed publicly or linked from other pages on our website.
6. How we share information
We do not sell personal information.
Service providers. We use Lovable to host the website and to provide the database where assessments and help requests are stored. Its infrastructure partners, such as Cloudflare for content delivery and domain lookups, process information on our behalf to run the service. When you submit a website, we look up its public domain records through Cloudflare's public DNS service.
The website you submit. To assess a website, our systems request its public pages, as any visitor's browser would. The operator of that website may see these requests in its own logs.
Legal obligations and protection. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect the rights or safety of people, investigate fraud or abuse, or protect our services.
Business transfers. Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar transaction, subject to applicable law.
With your direction. We may disclose information for another purpose when you ask or authorize us to, where permitted by law.
7. Cookies and similar technologies
Suprasites does not use advertising cookies, advertising pixels, session-recording tools or third-party analytics on this website, and you do not need an account to use it. Our hosting provider may use strictly necessary technologies to deliver and secure the site. Our pages load fonts from Google Fonts, which means your browser requests font files from Google, and Google receives your IP address as part of that request.
You can control cookies through your browser settings. If we add analytics or other non-essential technologies in future, we will update this section and obtain consent where required.
8. Data retention
Assessment reports, the details you submit with them, and help requests are kept in our database until they are deleted. We do not currently delete them automatically after a set period. We keep information as long as reasonably necessary for the purposes in this policy, including providing reports you may revisit, responding to requests, resolving disputes and meeting legal obligations.
You can ask us to delete a report or help request (see “Your privacy rights”). After deletion, information may remain in backups or provider logs for a limited period.
9. Data security
We use reasonable technical and organizational measures designed to protect information. Information is transmitted over encrypted connections, stored data can be accessed only by our own server-side systems rather than directly from visitors' browsers, and reports are reachable only through hard-to-guess links. Our assessment tool also refuses to visit private or internal network addresses.
No internet transmission or storage system can be guaranteed completely secure.
10. Your privacy rights
Depending on where you live and the laws that apply, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate personal information.
- Request deletion of personal information.
- Request a copy of certain information in a portable format.
- Object to or request restriction of certain processing.
- Withdraw consent where processing relies on consent.
- Appeal certain privacy decisions where required by law.
These rights are subject to legal conditions and exceptions. To make a request, use the contact method in “Contact us” below. We may need to verify your identity, and we will not unlawfully discriminate against you for exercising your rights.
California residents. If the California Consumer Privacy Act (as amended by the California Privacy Rights Act) applies to our processing, you may have additional rights to know what personal information is collected, used and disclosed; to request deletion or correction; and to obtain certain information in a portable format. We do not sell personal information or share it for cross-context behavioral advertising.
Other U.S. states. Residents of other states may have additional rights under their state laws. We will honor applicable rights.
11. Third-party websites
Our website and reports may link to third-party websites, including the website you assessed. Those sites operate under their own privacy policies, and we are not responsible for their practices.
12. Children's privacy
Suprasites is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us so we can review and take appropriate action.
13. International data processing
Our service providers may process or store information in countries other than where you live. Where applicable law requires safeguards for international transfers, we will rely on appropriate safeguards.
14. Changes to this policy
We may update this policy to reflect changes to our services, technologies, data practices or legal obligations. When we do, we will update the effective date and publish the revised policy on this page, and provide additional notice where required by law.
15. Contact us
For questions about this policy or to make a privacy request, open your report and use the “Get Help Improving My Online Presence” form, mention that your message is a privacy request, and include the website or report it relates to. We will reply to the email address you provide.