Privacy Policy
Effective July 28, 2026
This policy explains what Carefulship (“we”, “us”) collects, why, and who we share it with. Carefulship crawls websites you choose to track and produces findings and reports. It does not deploy or modify your code.
Information we collect
- Account data. Your email address and authentication identifiers, handled by our authentication provider (Supabase). If you sign in with Google, we receive your email and basic profile per your consent.
- Sites and audit data. The URLs and projects you add, and the crawl results, page snapshots, site signals, and findings we generate for them.
- Billing data. Subscription and payment state. Card details are handled by Stripe; we do not store full card numbers.
- Operational data. Logs, error reports, and traces used to keep the service running.
How we use it
- Run crawls and audits on the sites you track.
- Show findings, exports, and reports in your dashboard.
- Send optional notifications you enable (email, Slack).
- Process subscriptions and enforce usage quotas.
- Monitor, debug, and secure the service.
Service providers we share with
We share the minimum data needed with processors that run parts of the service. Each processes data on our behalf:
- Supabase — authentication and database (account, sites, crawls, findings).
- Vercel — application hosting; optional deployment metadata when you connect Vercel.
- Stripe — billing and payments.
- Resend — transactional and audit-complete email (when enabled).
- Slack — audit notifications to a webhook you configure (when enabled).
- Google PageSpeed Insights — performance lab data for pages you crawl (when configured).
- Sentry and Langfuse — error monitoring and tracing.
Data retention
We keep account, site, and audit data while your account is active. You can delete sites and their findings from the dashboard. When you close your account, we delete or anonymize your data within a reasonable period, except where we must retain records to meet legal or billing obligations.
Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.
Security
We use row-level security to isolate each account’s data, restrict access to production systems, and validate crawl targets to prevent requests to internal or private addresses. No system is perfectly secure, but we work to protect your data in transit and at rest.
Changes to this policy
We may update this policy. Material changes will be reflected by a new effective date at the top of this page.
Contact
Questions about this policy or your data: privacy@carefulship.com.