Privacy Policy

We’re finalizing this page for our launch. Questions? Email hello@perfectsites.ai.

Last updated: October 29, 2026

This Privacy Policy explains what personal information GoABC (“GoABC,” “we,” “us”) collects when you use perfectsites.ai and our services (the “Service”), how we use and share it, and the choices and rights you have.

The short version:

The free audit reads publicly available pages of the website you enter. We don’t need a login to your site to audit it.
You can see a website’s overall score and top 3 issues without an account. The full report and the free homepage preview need a free account: you sign in with a link we email you, so there’s no password. No credit card is needed for the audit or the free homepage preview.
We send marketing emails only if you opt in by ticking an unchecked box (see Section 4).
While your audit runs, we may generate a free AI homepage preview from the site’s public pages. If you don’t subscribe, it’s deleted after 30 days.
If you subscribe to Build, we collect what’s needed to bill you, rebuild your site, and host it.
We don’t sell your personal information, and we never use your data to train AI models.

1. Information we collect

a. Information you give us

Website URL you enter for an audit.
Email address to create your free account, which you need to see the full report and the free homepage preview. You can see an overall score and top 3 issues without giving us your email.
Account details if you create an account: your email address and sign-in records. We use passwordless sign-in links that we email you, so there’s no password to store. Sign-in is handled by our authentication provider.
Ownership verification details if you verify a site: the domain, the unique verification token we issue for your account and that domain, and the method you used (a DNS TXT record on the domain, or a goabc-site-verification meta tag on the home page).
Billing details only if you subscribe (we never ask for a card for the audit or the free preview): billing name, address, and payment card details. Card details are collected and stored by our secure payment processor; we receive only limited information such as card type, last four digits, and expiration date.
Build content: text, images, logos, business details (such as address, hours, services), and any access or credentials you choose to give us (for example, domain/DNS access) to rebuild and host your site.
Communications: messages you send us, support requests, and feedback.

b. Information from websites we audit

Anyone can run a free audit on any public website, including sites they don’t own. The audit fetches and analyzes only the website’s publicly available pages. It does not log in, submit forms, or get past access controls.

Safety check. We send the website address you submit to a third-party safe-browsing service to check it against lists of known unsafe sites. We send only the site’s public home-page URL and its domain, nothing else. Results are shown in your report together with the notice and attribution that service requires.

What we store for a public audit of a third-party URL (a site the requester hasn’t verified they own) :

the URL audited and the date and time of the audit;
who requested it: email address and account ID (if signed in), and IP address (including for audits run without an account, to enforce free-audit limits and prevent abuse);
the audit findings and scores;
raw scan files fetched to produce the report (such as screenshots, page HTML, response headers, and performance data);
the safety-check result.

Public pages can contain personal information about the site owner or others (for example, a business owner’s name, phone number, or staff bios). We use it only to produce the audit and, for verified Build customers, to rebuild the site.

Exposed-file and security checks only run after ownership is verified. Until someone verifies that they own a site, we do not run our exposed-file check on it at all: we send no probe requests and create or store no findings about it. After verification, the check runs on the next audit, and its results are visible only to the verified owner’s account. Retention periods are in Section 7.

If you own a site that someone else audited, you can contact us to ask what we hold about your site and to request deletion (see Section 9).

b2. Free homepage preview

When you run an audit while signed in, we may use the public pages already fetched for the audit (and the business details on them, such as name, address, phone and hours) to generate a free AI preview of a new homepage. The preview is stored with your account and is private to you: it is visible only inside your signed-in perfectsites.ai account through short-lived access links, search engines are told not to index it, and there is no shareable preview link. Your site becomes public once you verify that you own the website and publish it (which needs a subscription). It is deleted 30 days after it’s created if you don’t subscribe. To prevent abuse we record which account and which website each free preview was for.

c. Information collected automatically

Device and usage data: IP address, browser type, device type, pages viewed, referring page, and timestamps.
Cookies and similar technologies: see Section 8.

d. Visitors to Build sites we host

For sites we host for Build customers, our hosting provider may log basic technical data about visitors (such as IP address and request logs) for security and operation. Contact forms on Build sites: when a visitor submits a form on a Build site, we store the submission for the site owner, email it to them, and include it in the owner’s export. We store a daily-rotating one-way hash of the visitor’s IP address for spam rate-limiting, never the raw IP. Submissions are deleted with the site. For this data the Build customer is responsible for their own privacy notice to their visitors, and GoABC acts as their service provider/processor.

Free-audit requests from our website. When you ask for a free audit using the form on perfectsites.ai, we collect the website address, your name, your email address, your phone number if you choose to give it, the date and time, and a record that you agreed to be contacted about your audit. We store these requests in our website system and send them to our team by email so we can prepare your audit and reply. We use them only to deliver your audit and answer your request. We keep them for up to 24 months unless you ask us to delete them sooner.

2. How we use information

We use personal information to:

run audits and deliver your audit report;
create and manage your account;
provide the Build service: rebuild, host, maintain, and back up your site;
process payments, send receipts, and send required notices (such as renewal, price change, and cancellation confirmations);
respond to support requests;
keep the Service secure and prevent fraud and abuse;
understand how the Service is used and improve it;
send marketing emails, only as described in Section 4;
comply with legal obligations and enforce our Terms.

AI processing. Our AI analyzes websites, rewrites content and checks how AI search tools describe a business. To do this we send our AI provider only the public page content and audit context needed for the task, never account passwords or payment details. Our AI provider may not train its models on what we send, and we use a setting under which it does not keep stored copies of our requests and responses. Most AI processing happens in the United States; the check of how AI search describes a business may be processed outside the United States. We never use your data to train AI models, and we don’t allow our AI provider to use it for training.

3. Legal bases (for users in the EU, EEA, UK, and Switzerland)

If GDPR or UK GDPR applies, we rely on:

Contract: to provide the audit you request and the Build service you pay for.
Legitimate interests: to secure and improve the Service, prevent abuse, and analyze public websites submitted for audit, balanced against your rights.
Consent: for non-essential cookies and, where required, marketing emails. You can withdraw consent at any time.
Legal obligation: for tax, accounting, and other legal requirements.

4. Email communications

Transactional emails (your report, account, billing, renewal and cancellation notices) are part of the Service.
Marketing emails are opt-in only. We send product updates and tips only if you tick an unchecked box asking for them (for example, when you create your account). Every marketing email has an unsubscribe link, and you can opt out any time.
We send email through an email delivery provider, with open and click tracking turned off.

5. How we share information

We share personal information only:

With service providers (“subprocessors”) who help us run the Service under contracts that limit their use of the data:

Provider category	Purpose	Data involved	Location
Website hosting provider	Hosting perfectsites.ai and customer Build sites; security and delivery network	Request logs (IP address, browser), site content	United States; global delivery network
Database, sign-in and file storage provider	Accounts, passwordless sign-in, reports, previews, site files, form submissions	Email, account records, report data, Build content, form submissions	United States; some platform logs may be processed outside the US
Background job provider	Running audits and builds in the background	Audit and build job data	United States
AI provider	Content analysis, rewriting, checks of how AI search describes a business	Public page content and audit context; no account credentials	United States, except AI-search checks, which may be processed outside the US
Safe-browsing service	Screening submitted URLs for known unsafe sites	Home-page URL and domain only	United States
Payment processor	Subscription billing, refunds, fraud prevention	Name, email, billing address, payment details (held by the processor, not us), transaction history	United States; may be processed globally
Email delivery provider	Sending reports, sign-in links, receipts and notices	Email address, message content	United States
Marketing website platform	Running perfectsites.ai and storing free-audit requests from the website form	Website address, name, email, optional phone, consent record, submission time	United States

Our payment processor and email provider may also keep some records for their own purposes (for example, fraud prevention and tax), as described in their own privacy policies.

For legal reasons: if required by law, legal process, or to protect the rights, safety, or property of GoABC, our users, or others.
In a business transfer: if GoABC is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that deal, subject to this policy.
With your direction or consent.

6. We don’t sell or share your personal information

We don’t sell personal information, and we don’t “share” it for cross-context behavioral (targeted) advertising. We don’t use advertising cookies or ad pixels on perfectsites.ai, and we don’t show a cookie banner because we don’t use non-essential cookies.

7. How long we keep information

Data	How long we keep it
Audit reports and scores	While your account exists, then deleted within 30 days after your account is deleted
Raw scan files (screenshots, fetched HTML, response headers, performance data)	30 days
AI-visibility answer snapshots (the question asked, the AI engine, its answer, and whether it cited the site)	12 months, so we can show trends over time
Audit runs from unverified or abandoned signups	7 days
App logs	Up to 30 days
Build site content and form submissions after cancellation	30 days after the site goes offline (the export window), then deleted under the backup rule below
Free homepage previews (no subscription)	30 days after the preview is created
Export ZIP files	7 days after each export is created (you can request a new one during the export window)
Billing and tax records	7 years, as required for tax and accounting

Backups. When we delete data, it is removed from our live systems within the stated period and is purged from rolling backups within 7 days after that.

Records kept by our payment processor and email provider for their own purposes are governed by their privacy policies.

8. Cookies and similar technologies

Essential cookies needed to run the Service (for example, keeping you logged in and security).
Analytics: we use privacy-friendly analytics that do not use cookies. They count page views using an anonymized hash created from the incoming request, which is discarded after 24 hours, and records information such as the page, referrer, approximate location (country/region/city), operating system, browser, and device type. We remove query strings from page addresses before they’re sent, and we don’t send emails or user IDs to analytics.
Advertising cookies or pixels: none.

You can control cookies through your browser settings. Because we don’t sell or share personal information for targeted advertising, there is nothing for a Global Privacy Control (GPC) signal to opt you out of today; if that changes, we will honor GPC signals.

9. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you;
Correct inaccurate information;
Delete your information;
Get a copy in a portable format (Build customers who have verified ownership can also download their site as a ZIP export at any time while subscribed and for 30 days after it goes offline. If you only have a free homepage preview, it can’t be exported as a ZIP; email us at the privacy contact below or ask support, and we’ll send you a copy of your data, including the preview content, while we still hold it) ;
Opt out of marketing emails (any time, via the unsubscribe link);
Opt out of the “sale” or “sharing” of personal information or targeted advertising (where applicable);
Object to or restrict certain processing, and withdraw consent (EU/UK);
Appeal our decision if we deny your request (required in several US states);
Not be discriminated against for exercising your rights.

To make a request, email hello@perfectsites.ai. We’ll verify your identity before acting on a request and respond within the time the law requires (for example, 45 days under California law, or one month under GDPR). You may use an authorized agent where the law allows.

US state privacy laws (California, Utah, and others)

Several US states (including California’s CCPA/CPRA, the Utah Consumer Privacy Act, and laws in Colorado, Virginia, Connecticut, Texas, Oregon, and others) give residents privacy rights. Many of these laws only apply to businesses above certain size thresholds (for example, revenue or number of consumers).

California residents: In the past 12 months we have collected these categories of personal information: identifiers (name, email, IP address); commercial information (purchase history); internet activity (usage data); and customer records (billing info). We collect them for the purposes in Section 2 and disclose them to the service providers in Section 5. We do not sell personal information or use sensitive personal information for purposes that require an opt-out.

Canadian residents

If you live in Canada, you have rights under Canada’s privacy laws to access and correct your personal information and to withdraw consent, and you can complain to the Office of the Privacy Commissioner of Canada. We send commercial email only with your express opt-in consent.

EU/EEA/UK users

Anyone, anywhere, can request a free audit. Paid Build subscriptions are available only in the United States and Canada at launch. If you use it from the EU, EEA, UK, or Switzerland, GDPR or UK GDPR may apply: the legal bases in Section 3, your rights in Section 9, and the transfer safeguards in Section 11 apply to you, and you can also complain to your local data protection authority.

10. Security

We use reasonable technical and organizational measures to protect personal information, such as encryption in transit (HTTPS) and access controls . No system is 100% secure, and we can’t guarantee absolute security. If you give us credentials (such as domain access), please use a limited-access account where possible and change it after setup.

11. International transfers

GoABC is based in the United States. We primarily store and process data in the United States. Some of our providers may process limited data in other countries under appropriate safeguards (for example, platform logs, our payment processor and hosting provider’s global networks, and AI-search checks may be processed outside the US). If you use the Service from the EU, EEA, UK, or Switzerland, your information is transferred to the US. For each provider, the safeguard we rely on is the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss framework) where the provider is certified, and/or Standard Contractual Clauses in the provider’s data processing agreement.

12. Children

The Service isn’t directed at children under 13 , and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we’ll delete it.

13. Changes to this policy

We may update this policy. If we make material changes, we’ll notify you by email or on the Service before they take effect. The “Last updated” date shows when it last changed.

14. Contact us

GoABC
hello@perfectsites.ai
Privacy requests: hello@perfectsites.ai