Privacy policy

Lyntiq AI is a product of VibeSoft Studio, Kronenland 1116, 6605 RN Wijchen, the Netherlands (KvK 42136303). Questions: info@vibesoftstudio.com.

What we process

• The address you submit and the public content of that page. We fetch the page to run the audit. The report and a short excerpt of the page text (title, description, headings, button labels and the first 4,000 characters of text) are stored so the report keeps working at its own link. A Pro audit also reads up to 9 more pages of the same website; for those pages the report keeps the address, the status code, the title and what the checks found (which can quote a description), not the page text.
• Your IP address, to limit the number of audits per visitor. It is stored only as a keyed hash that cannot be read back, and deleted after at most two days.
• If you sign in: your email address, to send the sign-in link and to identify your account, and the list of audits you ran while signed in.
• If you buy Pro: your subscription status and billing period. Card details go directly to Stripe; we never see them.
• If you save settings: the goal of your site, and on Pro the tone, the description of your audience, the words to avoid, the language of rewrites, your coding assistant and whether new reports are private.
• If you allow analytics: which pages you open, how you arrived, and your browser, device and approximate location, through Google Analytics. Without your permission none of this is collected.

Cookies

Signing in sets cookies that keep you signed in. They are strictly necessary for the account and are only set when you sign in.

Google Analytics sets its cookies (_ga and _ga_T6L9WH43M5) only after you choose "Allow analytics". They count visits and last up to two years. Google signals and ad personalisation are switched off, so there are no advertising cookies. Your choice is kept in your browser's local storage; change it any time with "Cookie settings" at the bottom of every page. Choosing "No thanks" later stops the counting and removes the analytics cookies.

Who receives data

• Google PageSpeed Insights receives the address you submit, to measure speed and accessibility.
• An AI provider receives the check results and text from the audited page, to rank the problems and write the fixes, together with the goal from your settings if you set one. For Pro rewrites it receives the same page text again, with the tone, audience and words to avoid from your settings: Groq, Cerebras, Google (Gemini), Mistral, the Vercel AI Gateway or OpenRouter, whichever is available at that moment. When one is busy or its answer is unusable, the same text goes to the next one. Through the Vercel AI Gateway we only allow providers that do not train on the text and do not keep it. Your IP address and email address are not sent.
• Supabase stores the reports, accounts, settings and rate limits, on servers in the United States.
• Resend delivers the sign-in emails and receives your email address to do so.
• Stripe processes Pro payments and receives your email address and payment details.
• Vercel hosts the site and processes requests, including standard server logs.
• Google Analytics receives your visits only if you allow analytics. Google may process the data in the United States under the EU-US Data Privacy Framework.

How long we keep it

• Reports stay available at their link until you delete them, until the account that ran them is deleted, or until the owner of the audited website asks us to take them down. A private report (Pro) opens only for the account that ran it.
• Deleting a report removes its content and rewrites at once. An empty record with the date and your account stays, so the audit still counts toward your plan, and goes when you delete the account.
• An account and its audits are kept until you delete the account.
• Google Analytics keeps visit data for at most 14 months.
• Stripe keeps payment records as long as Dutch tax law requires (seven years).

Your rights

Under the GDPR you can ask what we hold about you, have it corrected or have it removed. You can delete a single report on the report itself, and your account with all its audits and settings on your account page. If your website was audited and you object to a report, email us with its link and we take it down.