inspeccia
What we analyze How it works Price Expert Audit FAQ Contact Analyze my site
Legal

Privacy policy

Effective from: 2026-07-28

Last updated: 2026-07-28 (v0.97.1)

Service: inspeccia — automated AI-powered web auditing

Service URL: https://inspeccia.com

inspeccia collects only what is needed to deliver the service, and nothing more. We do not sell personal data and we do not use email addresses for marketing. We do use third-party measurement tools (Google Analytics, Meta Pixel, Microsoft Clarity) under an opt-out consent model — you can reject them at any time (see Section 7). This policy describes, in plain language, what personal data inspeccia (hereinafter, "the Service", "we") collects, what it uses it for, with whom it shares it, and what rights you have as a user. It reflects, word for word, what the system actually does.

The Service operates from Uruguay and is governed by Law No. 18.331 on Personal Data Protection and Habeas Data Action (LPDP), its regulatory decree No. 414/009 and concordant regulations. For users residing in the European Union, the principles of the GDPR (EU Regulation 2016/679) additionally apply.

1. What data we collect

When you request an analysis, we collect:

  • The URL of the website you want to analyze (public information).
  • Your email address, exclusively to notify you when the report is ready and to send you the unique access link.
  • Automatic technical request data: source IP address, date and time, browser user-agent. Kept in standard server logs for abuse detection and technical diagnostics.
  • Random token generated by the system so that your report is accessible only from a private link.

When the analysis runs, we also download the public HTML of the site you indicated (the same that any visitor sees) and, optionally, the public HTML of up to 8 competing sites that the system automatically identifies through web search. This content is processed to generate the report and stored together with the result.

What we NEVER collect

  • We do not install cookies or scripts on the site you analyze.
  • We do not request admin, FTP, control panel, platform or CMS credentials.
  • We do not access your Google Analytics, Meta Business, Search Console, or any private integration.
  • We do not read your database, private files, or anything behind a login.

2. What we use this data for

  • Process your analysis request and generate the report.
  • Email you the report when it is ready (3 to 6 minutes later).
  • Maintain the analysis history associated with the domain (versions V1, V2, V3...) so you can compare evolutions.
  • Operate the weekly tracking subscription, if you purchase it: automatically re-audit the subscribed domain every week, email you each weekly report — a transactional service email, not marketing, which stops when the subscription ends — and keep the domain's measurement history to show its evolution between audits.
  • Detect and prevent abuse of the system (spam, malicious scraping, quota abuse).
  • Improve the service through aggregated internal analysis of usage patterns (without identifying individual users).

We do not use your email for marketing, we do not sell it, we do not transfer it to third parties for commercial purposes, we do not add it to mailing lists.

3. With whom we share data

To produce the report, the scraped HTML content and output texts pass through artificial intelligence model providers (data processors under the LPDP). According to the current Service configuration, the providers may be:

  • OpenAI (api.openai.com) — United States.
  • Anthropic (api.anthropic.com) — United States.
  • Google (Gemini API) — United States / European Union.

The content sent to these providers is essentially public HTML from websites. Your email is not sent to the AI provider. These services process requests according to their own privacy policies. The current providers declare that they do not use data sent via API to train their models by default.

International transfers: by using the Service you accept that certain data (HTML of the analyzed site and derived prompts) is transmitted to servers of the AI providers mentioned, located outside Uruguay. Providers adhering to frameworks such as the EU-US Data Privacy Framework offer equivalent guarantees.

Additionally:

  • Hosting: the Service is hosted on CreaWeb servers in Uruguay. CreaWeb acts as infrastructure provider.
  • Email: notification emails are sent from the Service's own server, without intermediation of external email marketing services.
  • Web search: to identify real competitors, the system performs queries on public web search engines. These queries do not include your email.

Payment processing: when you make a payment, the data necessary to process the transaction (name, email, billing address, card data) are collected directly by Paddle (Paddle.com Market Limited, United Kingdom), which acts as Merchant of Record. inspeccia does not receive or store your card data. For more information, see Paddle's Privacy Policy.

4. How long we retain your data

  • Generated reports: retained indefinitely while the Service is active, associated with the analyzed domain, so you can revisit them with the private link and so we can keep the version history of the domain.
  • Requester's email: kept associated with the analysis. You can request its deletion at any time (see Section 6).
  • Server logs: kept for limited periods (typically 30 to 90 days) according to the hosting provider's configuration.
  • Failed or canceled analyses: partial data may be retained for up to 30 days for diagnostics, then deleted.

5. How we protect your data

  • Encrypted connection via HTTPS across the entire Service.
  • Access to reports through a unique random token generated per analysis. Without the token, the report is not accessible.
  • Administrative passwords stored with cryptographic hash (not plain text).
  • Access to the admin panel restricted by authenticated session.
  • Communication with the database and external providers via encrypted connections.

No system is infallible. In the event of detecting a security incident that could affect your data, we will inform you by email and notify the competent authority in accordance with applicable regulations.

6. Your rights

As the data subject, you can exercise at any time the rights recognized by Law 18.331 (and its equivalent under GDPR if applicable):

  • Access: know what data we hold about you.
  • Rectification: correct inaccurate data.
  • Cancellation / Erasure: ask us to delete your personal data and the associated reports.
  • Objection: object to certain uses of your data.
  • Portability: receive a copy of your data in a structured format.
  • Restriction of processing: ask us to pause processing while a dispute is resolved.

To exercise any of these rights, write to [email protected] identifying yourself and describing your request. We respond within a maximum of 5 business days.

If you believe that the processing of your data does not comply with regulations, you have the right to file a complaint with the Unidad Reguladora y de Control de Datos Personales (URCDP) of Uruguay, the enforcement authority of Law 18.331 (www.gub.uy/unidad-reguladora-control-datos-personales).

7. Cookies and measurement tools

This Service uses two categories of cookies. The first are technical and always active. The second are measurement cookies and you can reject them with a click on the consent banner.

7.1 Strictly necessary cookies

Cannot be disabled without affecting the site's functioning:

  • PHP session cookie (PHPSESSID or equivalent): keeps flash messages between redirects (e.g. "Analysis queued correctly"). Removed when the browser closes.
  • Admin session cookie: only if you access the /admin panel. Necessary to keep the session active.
  • Language cookie (lang): remembers your preference between Spanish and English.
  • Country cookie (geo_country): caches for 24 hours the ISO code of the country detected from your IP address. Used exclusively to display the country-specific price that applies to you (if any). The actual price charged by the payment gateway is determined at checkout based on the data you provide to Paddle.
  • Consent cookie (inspeccia_consent): records your decision regarding measurement cookies. Lifetime: 1 year.

7.2 Measurement cookies (opt-out via banner)

To measure site usage, attribute advertising campaign conversions and improve the user experience, we load the following third-party tools. We operate in opt-out mode: the tools are enabled by default and a banner lets you reject them with one click. Your decision is persisted in the inspeccia_consent cookie and honored server-side and client-side in future visits.

  • Google Analytics 4 + Google Ads conversion tracking (Google LLC, United States): web traffic measurement and advertising campaign conversion attribution. Typical cookies: _ga, _ga_*, _gid. See Google's privacy policy.
  • Meta Pixel + Meta Conversions API (Meta Platforms Ireland Limited, with data transfer to the United States): measurement and attribution of Facebook and Instagram campaigns. Typical cookies: _fbp, _fbc. See Meta's privacy policy.
  • Microsoft Clarity (Microsoft Corporation, United States): heatmaps and anonymized session recordings to understand how the site is used and improve the experience. Sensitive text content is automatically masked ("Strict" mode); sensitive URL parameters (including report access tokens) are filtered before being stored. Typical cookies: _clck, _clsk. See Microsoft's privacy statement.

How to reject measurement cookies: click "Reject" on the consent banner that appears when you enter the site. The decision is saved for one year. If you already dismissed the banner by accepting, you can delete the inspeccia_consent cookie from your browser settings to make it reappear; or block third-party cookies directly from your browser.

International transfers: the use of Google Analytics, Meta Pixel/CAPI and Microsoft Clarity entails transfers of technical data (IP address, cookie identifiers, navigation events) to servers in the United States. All three providers are certified under the EU-US Data Privacy Framework, which offers equivalent guarantees to European regulations.

We do not use fingerprinting cookies nor sell data to advertising brokers. Measurement tools are used exclusively to measure the operation of the Service, attribute conversions of our own campaigns and improve the user experience.

8. Limitation of liability over the report content

The report generated by the Service is the result of automated processing through artificial intelligence. The recommendations are strategic suggestions based on HTML evidence and do not replace the professional judgment of a marketing, UX, development or legal advisory team.

inspeccia is not responsible for:

  • Business, technical or marketing decisions made based on the report.
  • Modifications the client makes on their website derived from the suggestions.
  • Commercial results (or absence thereof) after implementing the recommendations.
  • Incorrect information provided by the client when requesting the analysis (incorrect URL, site down, content temporarily blocked).
  • Changes to the content of the analyzed site after the date of the report.

9. Third-party sites and data

When you analyze a site that is not your own (e.g. a competitor), you are responsible for ensuring that you have a legitimate interest in doing so and for respecting the terms of use of the analyzed site. inspeccia only accesses public HTML content and respects standard robots.txt-type directives where applicable.

Brand, product or service names mentioned in reports are the property of their respective owners and are used only for descriptive and comparative purposes.

9.bis Commercial use of the report · compliance with local regulations

The report generated by inspeccia may be used for commercial purposes by individuals, companies, agencies, consultancies, freelancers and any other professional figure, in accordance with the detail set forth in the Terms and conditions · section 9. This includes, among other uses, delivering the report to end clients, embedding it into the user's own sites or portals, billing for professional services that incorporate it, and reusing it as input for presentations, proposals or editorial materials.

Local compliance — disclaimer. Any commercial use of the report is solely the user's responsibility, who must verify in advance that such use complies with the applicable regulations in their country of residence or activity and in any other jurisdiction where the report is shared, delivered or used.

Regulatory compliance includes, without the enumeration being exhaustive: data protection laws (GDPR, UK GDPR, CCPA/CPRA, LGPD, LFPDPPP, Law 25.326, Law 19.628, Law 18.331 and equivalents); regulations on unfair competition and comparative advertising; intellectual property rights over the analyzed sites, their trademarks and content; consumer protection laws; tax and invoicing rules applicable to the user's professional service; sector-specific regulations governing the user's activity; and any other relevant territorial or sectoral rule. inspeccia does not provide legal advice on such uses, does not audit the legality of the user's professional framework, and assumes no responsibility whatsoever for uses of the report that violate applicable regulations in the user's jurisdiction or in their clients' jurisdictions.

10. Changes to this policy

We may update this policy to reflect changes in the Service, in applicable regulations or in industry best practices. When we make a substantial change:

  • We will update the "last updated" date at the beginning of the document.
  • If the change materially affects how we treat your data, we will notify you through available channels (email to users with recent analyses and/or visible notice on the home page).

We recommend reviewing this policy periodically.

11. Contact

For any inquiries regarding this policy or the processing of your personal data:

Email: [email protected]

Document versioned together with the Service. Current revision: v0.97.1 · 2026-07-28.

inspeccia

Made with a critical eye for websites that want to work better.

[email protected] · Privacy · Terms · Refunds · Custom audit


Apple Pay Google Pay

POWERED BY NEURATIA

We use cookies to understand which parts of the site work and improve the experience.