How we handle your data.

What we collect

Public scoring. When you submit a URL for a free public score we record the URL, your IP address (for rate-limiting), and the resulting score. Nothing else.

Waitlist. Email address, the source page you signed up from, IP address, and user-agent string for spam filtering.

Authenticated use. When you sign up via Clerk we store your Clerk user ID, email, and (optionally) full name. Authentication itself is handled by Clerk and they are the data processor for those flows — see their privacy policy at clerk.com/privacy.

Payments. Billing is processed by Dodo Payments. We never see your card number — only a customer ID we use to look up your subscription status.

What we do NOT collect

• Your API keys for the products you submit. Test runs use throwaway sandbox credentials.
• The bodies of any real API requests against your production systems.
• Browser fingerprints or third-party tracking cookies.

How long we keep it

• Test traces: 90 days hot, then archived to cold storage for 2 years.
• Billing records: 7 years (legal/audit requirement).
• Waitlist signups: until you ask us to delete them.

Your rights

We follow GDPR and India's DPDPA. You can request a full data export or deletion at any time by emailing founders@jazel.co. We respond within 30 days.

Subprocessors

The list below reflects subprocessors used in production today. We'll update this page (and email paid subscribers, when we have them) before any new subprocessor is added.

• Supabase (Postgres hosting)
• Upstash (Redis — rate limiting and abuse prevention)
• Resend (transactional email — waitlist confirmations)
• Vercel (frontend hosting + runtime logs + Web Analytics + Speed Insights)
• Railway (backend + harness hosting)

Planned for the paid plan (not yet active): Clerk for authentication, Cloudflare R2 for trace storage, Dodo Payments as merchant of record for billing. Error tracking (Sentry) and product-event analytics (PostHog) are not currently wired — when we enable them we'll say so here and disclose the cookie behaviour.

Analytics

We run two analytics products on the marketing site, both from Vercel:

• Web Analytics — counts page views and a small set of interaction events (e.g. waitlist signup). It is cookieless, does not fingerprint, and does not collect personally identifiable information. See vercel.com/docs/analytics/privacy-policy.
• Speed Insights — measures real-user page-load performance (Core Web Vitals). Also cookieless and contains no PII.

Cookies

The marketing site (this page and the landing page) does not set any first-party cookies and does not load third-party tracking pixels. Vercel Analytics is cookieless by design — that is the reason we chose it over Google Analytics, Mixpanel, or Segment. When authentication is enabled for the paid plan, Clerk will set a single session cookie; we will update this section the day that happens.

Contact

Questions about this policy: founders@jazel.co.