Privacy Policy of Site Audit Pro and siteauditpro.com

Site Audit Pro and siteauditpro.com collects some Personal Data from its Users.

Personal Data processed for the following purposes and using the following services:

    • Advertising

      • Meta ads conversion tracking (Meta pixel)

        Personal Data: Trackers; Usage Data

    • Analytics

      • Google Analytics for Firebase

        Personal Data: Application opens; Application updates; Cookies; device information; first launches; geography/region; In-app purchases; number of sessions; number of Users ; operating systems; session duration; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

      • Fabric Answers

        Personal Data: Cookies; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

      • Meta Events Manager

        Personal Data: browsing history; clicks; page views; Trackers; Usage Data

    • Content performance and features testing (A/B testing)

      • Firebase Remote Config

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Device permissions for Personal Data access

      • Device permissions for Personal Data access

        Personal Data: Camera permission; Photo Library permission; Storage permission

    • Handling activities related to productivity

      • Notion

        Personal Data: Data communicated while using the service; email address; first name; last name; phone number; screenshots; Usage Data

      • Google Docs

        Personal Data: Data communicated while using the service; Usage Data

    • Handling finance and accounting

      • Disclosure of your personal data to our Accountancy Service Providers

    • Handling payments

      • RevenueCat

        Personal Data: Application opens; Usage Data

      • Payments processed via the Apple App Store

        Personal Data: payment data

      • Payments processed via the Google Play Store

        Personal Data: device information; purchase history; Usage Data

    • Hosting and backend infrastructure

      • Firebase Cloud Firestore, Firebase Cloud Functions and Firebase Cloud Storage

        Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service

      • Firebase Hosting, Algolia, Amazon Web Services (AWS) and GitHub Pages

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Infrastructure monitoring

      • Crashlytics

        Personal Data: geographic position; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service

      • Firebase Performance Monitoring

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Internal processing tools

      • Processing of your data through MIRO and Processing of your data through Slack

    • Managing contacts and sending messages

      • Firebase Notifications

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Managing support and contact requests

      • Zendesk

        Personal Data: various types of Data as specified in the privacy policy of the service

    • Platform services and hosting

      • Apple App Store and Google Play Store

        Personal Data: Usage Data

    • Registration and authentication

      • Firebase Authentication

        Personal Data: email address; first name; last name; password; username

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

    • How to file a complaint with the Supervisory Authorities

      Under both the EU and UK GDPR, you have the right to lodge a complaint with your country’s data protection authority.

      If you are based in the EU, you can refer to the directory below for guidance on submitting a complaint:

      https://iapp.org/resources/global-privacy-directory/

      If you reside in the UK, you can get in touch with the ICO(UK Data Protection Authority):
      The ICO’s address:

      Information Commissioner’s Office
      Wycliffe House
      Water Lane
      Wilmslow
      Cheshire
      SK9 5AF

      Helpline number: 0303 123 1113
      ICO website: https://www.ico.org.uk

    • Data Retention period for your Account Data

      Data Retention Policy

      We retain your account information — including your full name, email address, affiliated company name, and any data you have directly imported into our mobile app — for as long as you have an active subscription with us.

      If your subscription expires but you maintain an active account with us, we will retain your account information for an additional two years after the subscription's expiration.

      Once your account is deleted, it will no longer be visible within the app and we will delete your personal data from our systems immediately, except in the following circumstances:

      Legal Compliance: If applicable laws require us to retain certain information (e.g., for tax and accounting purposes in cases where purchases were made within the app).

      Regulatory Obligations: If retention is necessary to demonstrate our compliance with legal requirements (e.g., if an account has been blocked, we may retain related records as evidence in case of disputes or legal inquiries).

      Pending Issues: If there are unresolved matters such as claims, disputes, or legal proceedings that require us to retain the relevant information until they are settled.

      Legitimate Business Interests: Data retention is necessary to prevent fraud, enhance user security, or maintain platform integrity (e.g., to prevent a previously banned user from creating a new account due to safety concerns).

      After these periods, any retained data will be securely deleted in accordance with our data protection policies.

    • Legal Bases we rely on under the EU and the UK GDPR

      Under the UK and EU GDPR, we are required to identify and rely on a lawful basis to collect and process your personal data. Depending on the purpose, we rely on the following legal grounds:

      1. Analytics

      We process your data for analytics purposes based on your consent, as required under Article 6(1)(a) of the UK and EU GDPR. This includes data such as:

      In-app purchases
      Device information
      Session duration
      Unique device identifiers (e.g., IDFA)
      Usage data, including clicks and in-app activities

      2. Content Performance and A/B Testing

      For content performance evaluation and A/B testing, we process your data based on your consent under Article 6(1)(a) of the UK and EU GDPR. This includes:

      In-app purchases
      Device information
      Session duration
      Unique device identifiers (e.g., IDFA)
      Usage data, including clicks and in-app activities

      3. Device Permissions

      To access certain device features, such as your photo library, we process your data based on your consent under Article 6(1)(a) of the UK and EU GDPR.

      4. Processing Through Productivity Tools

      For internal communication, project management, and team collaboration, we process your data under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR. This includes:

      Basic account details
      Account-related information
      Content you upload to the app

      5. Payment Processing

      To facilitate payments, we process your data under the ‘Contractual Necessity’ basis in Article 6(1)(b) of the UK and EU GDPR. This includes:

      Payment method
      Card details
      Purchase history

      6. Hosting and Infrastructure

      To provide hosting and infrastructure services, we process all relevant data under the ‘Contractual Necessity’ basis in Article 6(1)(b) of the UK and EU GDPR.

      7. Infrastructure Monitoring

      For platform security and performance monitoring, we process all relevant data under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR.

      8. Internal Collaboration Tools

      To facilitate internal communication and team collaboration, we process your data under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR. This includes:

      Basic account details
      Purchase history
      Content you upload to the platform

      9. Managing Contacts and Sending Messages

      For communication purposes, we process your basic account details under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR.

      10. Customer Support and Contact Requests

      To assist with customer inquiries and support requests, we process your basic account details under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR.

      11. Platform Services and Hosting

      To provide platform functionality, we process all usage and account data under the ‘Contractual Necessity’ basis in Article 6(1)(b) of the UK and EU GDPR.

      12. Account Registration

      For user registration, we process your name, surname, email address, and affiliated company name under the ‘Contractual Necessity’ basis in Article 6(1)(b) of the UK and EU GDPR.

      13. Authentication

      For account authentication, we process your data under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR.

      14. Legal Compliance and Protection

      To defend legal claims, enforce our rights, and ensure the safety of individuals, we process all relevant data under the ‘Legitimate Interests’ basis in Article 6(1)(f) of the UK and EU GDPR.

    • International data transfers

      INTERNATIONAL DATA TRANSFERS

      We may transfer your data outside of the UK and the EEA area. When we transfer your personal data abroad to a jurisdiction with no adequacy status, we rely on one of the following international data transfer mechanisms to ensure compliance with the UK and the EU GDPR:

      Transfers outside the UK

      We rely on the International Data Transfer Agreement and IDTA issued by the UK ICO:

      https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-data-transfer-agreement-and-guidance/

      Transfers outside the EU & EEA


      We rely on Standard Contractual Clauses 2021, issued by the European Commission:

      https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

    • Your Data Subject Rights under the UK GDPR an other Applicable Laws

      Users may exercise certain rights regarding their Data processed by the Owner.

      In particular, Users have the right to do the following under the UK and the EU GDPR:

      Right to be informed: Users have the right to be informed about whether their personal data is processed, and how it is collected, used, and handled.

      Right to withdraw consent: Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.

      Right to object to the processing of personal data: Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.

      Right to access personal data: Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.

      Right to rectification: Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.

      Right to restrict processing of personal data: Users have the right to restrict the processing of their Data. If this legal ground applies, the Owner will not process their Data for any purpose other than storing it.

      Right to deletion of personal data: Users have the right to obtain the erasure of their Data from the Owner.

      Right to data portability: Users can submit a request for their personal data to be transferred to another organization, subject to certain conditions.

      Lodge a complaint with supervisory authorities: Users have the right to bring a claim before their competent data protection authority.

      Right to file a complaint with the organisation that acts as a Data Controller: From June 19, 2026, an individual whose personal data is processed under the UK data protection law shall have the statutory right to lodge a complaint directly with the organisation in relation to alleged breaches of data protection law due to the way his/her personal data was processed. In the event that you exercise your right to file a complaint with Us, we will acknowledge your complaint within 30 days of the receipt of your complaint, investigate your complaint thoroughly, and we will respond to your complaint without undue delay.

      If you are not satisfied with our handling of your complaint, you may submit a complaint to the relevant data protection authority in your jurisdiction.


      Users are also entitled to learn about the legal basis of Data transfers to a country outside the United Kingdom or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

      If any such transfer takes place, Users can find out more by checking the relevant sections of this document or enquiring with the Owner using the information provided in the contact section.

      How to exercise your Rights under the UK GDPR

      If you wish to exercise any of your rights under the UK GDPR, or other applicable data protection laws, including your right to file a complaint with our Organisation, you should contact us via one of the following ways:

      Email: support@veamstudios.com

      Post: Bank Chambers, 1/3 Woodford Avenue, Ilford, England, IG2 6UF


Contact information

    • Owner and Data Controller

      Veam Studios Ltd., Bank Chambers 1-3, Woodford Avenue, Gants Hill, Ilford, Essex, IG2 6UF

      Owner contact email: support@veamstudios.com