Privacy policy

1. Who we are

DIGIT ME, LLC, a Delaware limited liability company, 2810 N Church St STE 90854, Wilmington, DE 19802, United States, operates digit-me.com and the DIGIT-ME Services and is the controller of the personal information described here. Contact for any privacy request: contact@digit-me.com.

This policy covers our website, our app and our emails. When we process personal data on behalf of a business customer, our Data Processing Agreement applies instead.

2. Information we collect

Information you provide: your email address; the websites you submit and the business information you confirm (competitors, markets, buyer questions); report recipients you add; white-label details (agency name, logo, color, website); messages to the report assistant and to our support.

Payment information: Stripe collects your payment details, name, billing address, country and tax number when you provide one. We receive the payment status, billing country and the last digits and brand of your card, never your full card number.

Information collected automatically: a one-way hash of your IP address (used for rate limiting and abuse prevention; we do not store your raw IP address in our database), strictly necessary cookies, product events (for example “scan started” or “report ready”) and technical logs kept by our hosting provider.

Information from other sources: aggregated metrics from Google Search Console and Google Analytics if you connect them, and public information about the websites and businesses you ask us to analyze.

3. How we use information

To provide the Services (scans, reports, alerts, report assistant); to create your account and send login links; to process payments, taxes and refunds and prevent fraud; to send transactional emails; to send marketing emails to people who consented when running a free scan (you can unsubscribe at any time); to secure, maintain and improve the Services; and to comply with the law.

4. AI processing

To produce reports, we send website content, business information and generated buyer questions to AI providers (Anthropic, OpenAI, Google, Perplexity) and to SerpApi. Buyer questions sent to the measured AI engines are written from public business information and do not contain your personal information. These providers process the data as our service providers, under their API terms. We do not sell your information and we do not use it to train AI models.

5. Google user data

If you connect Google Search Console or Google Analytics, DIGIT-ME accesses, with read-only permissions: the email address of the Google account you use, the list of Search Console and Google Analytics properties you can access, and aggregated performance data for the website you audit (search queries, clicks, impressions, positions, sessions and conversions).

We use this data only to show it to you in your reports and to produce the recommendations of those reports. The aggregated figures may be processed by our AI provider (Anthropic) solely to write your report; they are not used to train AI models. We do not use Google user data for advertising, we do not sell it, and no one at DIGIT-ME reads it except with your consent, for security purposes or to comply with the law.

We store an encrypted refresh token and the aggregated figures included in your reports. You can revoke our access at any time from your Google account permissions (myaccount.google.com/permissions); deleting your DIGIT-ME account also revokes it and deletes this data.

DIGIT-ME's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. How we share information

With our service providers, only as needed to run the Services:

Supabase (USA) — database and authentication; our database is hosted in Ireland (EU).

Netlify (USA) — website hosting and serverless functions.

Stripe (USA / Ireland) — payments, invoicing and tax calculation.

Resend (USA) — transactional email, processed in the EU.

Anthropic (USA) — AI analysis, report writing, the report assistant, and measurement of Claude answers.

OpenAI (USA), Google (USA), Perplexity (USA) and SerpApi (USA) — measurement of ChatGPT, Gemini, Perplexity and Google AI Overviews answers to buyer questions (no personal data), and Google PageSpeed Insights for performance tests; Google Search Console and Analytics APIs only if you connect them.

With the people you choose: report recipients you add, anyone who has a share link you enabled, and your clients if you use the Agency plan.

When required by law or to protect our rights and users, and in connection with a merger, acquisition or sale of assets (with notice to you).

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use targeted advertising.

7. International transfers

We are a U.S. company. Our database and our email processing are hosted in the European Union (Ireland); our other providers process data in the United States and in other countries. Transfers of personal data from the European Economic Area, the United Kingdom and Switzerland rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments) or on another valid transfer mechanism.

8. How long we keep information

Account, websites and reports: until you delete your account. Accounts with no login and no active subscription for 24 months are deleted automatically, after an email notice 30 days in advance. Accounts that were never used (no login, no purchase) are deleted after 30 days.

Free scan leads: the email address and IP hash attached to a free scan are erased 24 months after the scan; the anonymous scores may remain on public score pages unless the website owner hides them.

Raw analysis data: 45 days after a report is completed. Email logs and product events: 24 months. Billing records: 7 years, as required by tax and accounting law. Deleted data may persist in encrypted backups for up to 30 days.

9. Security

Encryption in transit, encryption at rest of connected-account tokens, row-level security in our database, least-privilege access, and hashed IP addresses.

10. Your choices

Delete your account yourself at any time from your dashboard (Account › Delete my account); unsubscribe from marketing emails with the link in each email; hide the public score page of a website you own; disconnect Google integrations; manage cookies in your browser.

11. Rights of residents of the EEA, the UK and Switzerland

Legal bases: performance of our contract with you (Services, account, billing); legitimate interests (security, abuse prevention, product analytics without advertising trackers, and emails about our Services to existing customers); consent (marketing emails to free-scan users, which you can withdraw at any time); legal obligations (tax, accounting).

You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent. You can also lodge a complaint with your local data protection authority.

12. Notice to U.S. residents

Categories of personal information we collected in the last 12 months: identifiers (email address, hashed IP address), commercial information (purchases and subscriptions), internet or other electronic network activity (product events), and professional information (the businesses and websites you work on). We collect them from you, automatically and from the services you connect, for the purposes described in section 3, and disclose them only to the service providers listed in section 6. We do not sell or share personal information, we do not process sensitive personal information, and we do not profile you in ways that produce legal or similarly significant effects.

Depending on your state of residence (including California, Colorado, Connecticut, Oregon, Texas, Utah and Virginia), you may have the right to know and access, correct, delete and obtain a portable copy of your personal information, and to opt out of sale, sharing, targeted advertising and profiling. You can exercise these rights by deleting your account or by emailing contact@digit-me.com; we verify requests by email and answer within 45 days. An authorized agent may act for you with your signed permission. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our answer; if the appeal is denied, you may contact your state attorney general. We honor Global Privacy Control signals, although we do not sell or share personal information.

13. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information.

14. Changes and contact

We will post updates on this page and notify customers of material changes by email. Questions and requests: contact@digit-me.com, DIGIT ME, LLC, 2810 N Church St STE 90854, Wilmington, DE 19802, United States.