Privacy

How VectoraPoint handles data when you use this site.

What we collect

• Audit targets. Domain names you submit are fetched over the public internet (homepage HTML, robots.txt, sitemap, DNS records) to produce scores. We store audit results in our database so you can reopen or share a report.
• Accounts. If you sign up, we store your name, email, and a password hash. We send a one-time confirmation email so we know the address is yours before you can log in.
• Waitlist emails. If you join a pricing waitlist, we store the email, plan interest, and optional domain you provide.
• Newsletter emails. If you subscribe on the newsletter page, we store your email (and a signup source). Each address is stored once.
• Contact messages. If you use the contact form, we store your name, email, topic, and message (plus a coarse IP for abuse control).
• Visit stats (optional). If you choose Accept on the cookie banner, we record first-party pageviews for product analytics: page path, external referrer host, optional UTM campaign tags, coarse device/browser/OS class, your IP address, full browser User-Agent, and — when you are logged in — your account email. We also derive a daily rotating visitor hash from IP and User-Agent for unique counts. Essential-only visitors are not measured. Data is visible only to site administrators, kept for 90 days, and is not shared with advertising or third-party analytics. Geographic enrichment from IP is not applied today.
• Account sessions. If you log in, we set an HttpOnly session cookie so we know who you are.
• Theme preference. Light/dark mode is stored in your browser (localStorage), not on our servers.

AI chat

When you use Ask the AI experts, audit context and your messages are sent to our model provider (OpenRouter) to generate replies. Do not paste secrets or personal data you would not share with a third-party AI service.

Cookies & storage

Details of cookies and browser storage are in our Cookies notice. In short: we use a session cookie when you log in, preference storage for theme and consent, and (when you Accept) a cookieless first-party analytics beacon — no advertising trackers.

Retention

Stored audits, waitlist leads, newsletter subscribers, and contact messages remain until an administrator deletes them or the database is cleared. Consent-gated pageviews (including IP, User-Agent, and account id when logged in) are kept for 90 days. Session cookies expire according to the server configuration (default seven days of inactivity / age).

Contact

Questions about privacy: use our contact form and choose topic Privacy.