Privacy Policy

This Privacy Policy explains how AuditIndie (“we”, “us”) collects, uses, and shares personal data when you visit https://auditindie.com or use our services. We keep the data we collect to the minimum needed to run the product, and we don’t sell it.

Who we are

AuditIndie is an independent, solo-founder product: a catalog of annotated teardowns of successful indie websites, plus an optional done-for-you audit of your own site. For any privacy question, contact us at [email protected].

What we collect

• Account data. When you sign in, we receive your email address, and — if you use Google sign-in — your name and profile image from Google. We do not receive your Google password.
• Payment data. If you buy a Membership, Lifetime plan, or an audit, our payment processor (Stripe) collects and processes your card details. We never see or store your full card number — we only store a customer identifier and your subscription or purchase status.
• Content you submit. If you request an audit, we collect the website URL you submit and any notes you provide, along with screenshots captured of that site to produce the audit.
• Usage data. Basic, privacy-friendly analytics about which pages are viewed, to understand what’s useful. We also process standard server and security logs (such as IP address and browser type) to keep the service running and secure.

How we use it

• To create and secure your account and authenticate you.
• To process payments and give you access to the features you’ve paid for.
• To produce and deliver audits you request.
• To operate, maintain, debug, and improve the service.
• To send you essential service emails (sign-in links, receipts, and audit delivery notices).

Service providers we share data with

We rely on a small number of trusted processors. Each only receives the data needed for its function, and each has its own privacy policy:

• Authentication — we use Auth.js with Google OAuth (Google sign-in) and email magic links delivered by our transactional email provider (Resend). This handles your email address, and your Google profile basics if you choose Google sign-in.
• Payments — Stripe processes all payments and card data as an independent controller of that payment information.
• Screenshot & file storage — audit and teardown screenshots are stored on Cloudflare R2 object storage.
• Hosting & network — the app runs on our own server behind Cloudflare (CDN, DNS, and DDoS protection). Application data is stored in a PostgreSQL database on that server.
• Analytics — Vercel Web Analytics, which is cookieless and does not track you across other sites.

We do not sell your personal data, and we don’t share it with third parties for their own advertising.

Cookies

We use only the cookies needed to keep you signed in and to keep the service secure. Our analytics are cookieless. Because we don’t use advertising or cross-site tracking cookies, there’s no ad-tracking to opt out of.

Data retention

We keep account and purchase records for as long as your account is active, and as needed to meet legal, tax, and accounting obligations. If you delete your account, we remove or anonymize your personal data except where we’re required to retain it (for example, payment records for tax purposes). You can request deletion at any time at [email protected].

Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email [email protected] and we’ll respond within the timeframe required by applicable law.

International transfers

Some of our providers (such as Stripe, Cloudflare, and Google) may process data outside your country. Where that happens, they rely on recognized safeguards such as the EU Standard Contractual Clauses.

Children

AuditIndie is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we’ll update the “last updated” date above and, where appropriate, notify you by email.

Contact

Questions about your privacy or this policy? Email [email protected] or visit our contact page.