Legal
Privacy Policy
What SiteScout stores, why, and what you can do about it.
1. Who we are
SiteScout is operated by Agent Creative, a web design and development studio in Connecticut, United States (“we”, “us”). This policy explains what the SiteScout website and tool store, why, and what you can do about it. For any request about your data, use the Contact page.
2. The short version
- You can try the tool without an account. We ask for an email address and a password only when you save something.
- We store what you save: your agency details, your reports and your prospects. We do not sell it or share it for advertising.
- SiteScout sets no advertising or tracking cookies. The only cookie is the one that keeps you signed in.
- Card payments are handled by Stripe. We never see your card number.
- You can delete your reports and prospects yourself, and ask us to delete your account.
3. Your account
When you create an account we store your email address, the name you give, and a hashed password (we cannot read it). We also keep your plan, and a monthly count of the searches, audits and reports you have used so the plan limits can work. If you were given credits or a plan by hand, that is recorded on your account too.
4. What you save in the tool
- My agency: your agency name, your name, phone, email, website, a one-line pitch, a logo and a color. These are printed on your reports and so are visible to anyone you give a report link to.
- Reports: the business the report is about (name, address, website), the audit result, the wording you edited, the outreach email you drafted, a private share link, how many times the link was opened, and any replies left on the report page.
- Prospects: the businesses you saved, their public listing details, the status you set and your notes.
Before you sign in, your current search, audit results and agency details are kept in your own browser’s storage so that a reload does not lose your work. They move to your account when you sign in.
6. Information about businesses
Business listings (name, address, phone, website, location) come from OpenStreetMap, a public, openly licensed map. When a user audits a website, our server requests that site’s public homepage once, identifying itself as SiteScoutBot, and keeps a copy for a day so the same page is not fetched twice. After that the copy is deleted. Audit results are visible only to the user who ran them and to people that user shares a report with. We do not publish scores or verdicts about real businesses.
If you own a business and want us to stop fetching your site, tell us through the Contact page.
7. Messages you send us
The contact form stores your name, email address and message and emails them to us so that we can answer. We keep the conversation for as long as it is useful for supporting you.
9. Payments
Paid plans are bought through Stripe Checkout. Your card details go straight to Stripe and never reach our server. Stripe tells us that a payment succeeded, which plan it was for, and a customer reference that lets us match renewals and cancellations to your account. Stripe’s own privacy policy covers how it handles your payment information.
10. Email
We send email only for things you would expect: a notice when a business replies to one of your reports, messages about your account or plan, and answers to questions you sent us. SiteScout does not send outreach email on your behalf; the outreach message it drafts is sent by you, from your own email program.
11. Other services the tool talks to
To do its job, SiteScout exchanges a small amount of information with these services:
- Photon (photon.komoot.io): as you type a town name, your browser sends that text to Photon to look up matching places.
- Overpass servers for OpenStreetMap data: a search sends the location, radius and business type to a public Overpass server (by default overpass-api.de in Germany, then overpass.private.coffee if the first does not answer; the site operator can change this list). It does not include who you are.
- Map tiles: the map loads its images from OpenStreetMap’s tile servers (or from CARTO, if the site operator has set that up). Like any image request, this shows your IP address to the tile provider.
- The websites you audit: our server requests their homepage. Your identity is not passed along.
- Google PageSpeed Insights: on the Agency plan, when PageSpeed scores are switched on, the address of the site being audited is sent to Google.
- AI writing: if the site operator has connected an AI writing service (OpenRouter), choosing “Write with AI” sends the business name and the audit findings for that report to it. Without that connection, all wording is produced by SiteScout itself and nothing is sent.
- Stripe: as described under Payments.
12. Keeping the service fair
To enforce the limits for visitors without an account, to slow down sign-up abuse and to limit how often a report’s reply form can be used, we briefly use your IP address. Our web server also keeps ordinary access logs for security and troubleshooting.
13. The preview build
A preview version of SiteScout may be published as a static demonstration. In the preview there is no server-side account: anything you “save” is kept only in your own browser and never reaches us, and the contact form is not connected.
14. How long we keep things, and your choices
- You can delete any report or prospect yourself in the tool. Deleting a report switches its link off.
- Your account and what is saved in it stay until you ask us to delete them. Ask through the Contact page from the email address on the account and we will remove the account, its reports, prospects and agency details.
- You can also ask for a copy of what we hold about you, or for a correction.
- Fetched homepage copies are removed after a day. Contact messages are kept while they are useful for support.
If you live somewhere that gives you specific privacy rights, such as the European Economic Area, the United Kingdom or California, we will honor a request made under those rights.
15. Children
SiteScout is a business tool and is not meant for anyone under 16. We do not knowingly collect information from children.
16. Changes to this policy
If we change what we collect or how we use it, we will update this page and the date at the top. For a significant change we will also tell account holders by email.
17. Governing law and contact
This policy is governed by the laws of the State of Connecticut, United States. Questions and requests go through the Contact page.