Privacy

No accounts

There are no customer accounts and no passwords. You reach your subscription through a signed link we email to you.

Your link

The link carries your subscription reference, its purpose, and its expiry date, sealed so it cannot be changed. Anyone holding the link can open your feed, so keep it inside your organization.

Payments

Stripe processes payments and collects your card and billing address. We keep your email address and Stripe's customer and subscription references. We never see or keep your card number.

What we keep, and for how long

We keep four kinds of personal data.

Your subscription email with the Stripe references, to send your feed and answer you. 24 months after the subscription ends, it is replaced by a one-way hash.

A one-way hash of the fingerprint Stripe gives your card, so the first-month refund applies only to the first subscription paid with that card. It stays after your email is deleted. We never see your card number.

Copies of the emails we send, including feed links and the proof links sent to site addresses, for 365 days, to trace delivery problems. Our email provider delivers them and receives the addresses they go to. Our mail plugin keeps its own log of sent emails for 14 days.

Network addresses, stored only as salted one-way hashes for 24 hours, to limit abuse of the forms and the free JSON.

If you write to support, your message stays in our mailbox so we can answer you.

Deleting your email

After your subscription ends, you can delete your email yourself: open the link to your feed and press Delete my data, while the last link we emailed you still works (90 days). Or ask support@runitbyrobot.com; WordPress then emails you a link to confirm the request. Either way, we replace your email with a one-way hash, delete our copies of the emails we sent you, and refer deletion of Stripe's records to Stripe.

Removed sites

Removing a site stops the robot reading it and takes its report off every public and paid page at once. Dated records already made stay in the robot's archive, off the site, as a record of what was once public. Records no published change cites are deleted on the normal schedule.

Proving you run a site stores nothing about you.

Changes to this page

We update this page when the service changes what it keeps. The version on this page is the one that applies.