01 —Who we are
Sitelens is an SEO audit service: it crawls websites with its own crawler, SitelensBot, and turns what it finds into audit reports. Sitelens is operated by Earth Wide Service Limited, a company incorporated in Hong Kong. In this policy, “Sitelens”, “we”, “us” and “our” refer to Earth Wide Service Limited.
- Legal entity
- Earth Wide Service Limited
- Incorporated in
- Hong Kong
- Company Registry No.
- 79877575
- Registered address
- Room 511, 5/F, Ming Sang Industrial Building, 19-21 Hing Yip Street, Kwun Tong, Hong Kong
For the personal data of account holders described in this policy, we are the data controller (a “data user” under the Hong Kong Personal Data (Privacy) Ordinance). You can reach us about anything in this policy at [email protected].
02 —What this policy covers
This policy explains how we handle personal data when you:
- visit sitelens.dev or use the free single-page checker, signed in or not;
- create a Sitelens account and use the dashboard, audits, scheduled audits, email reports and exports;
- buy a paid plan; or
- contact us, report abuse, or are the owner of a website that SitelensBot visits.
How we handle cookies is described in more detail in our Cookie Policy. What the crawler does on the websites it visits is described on About SitelensBot.
03 —Account and billing data
When you sign up and use your account, we store:
| Data | Details | Why we need it |
|---|---|---|
| Email address | The address you sign up with. | Signing in, password resets, receipts, service notices and (if enabled) audit reports. |
| Name | The name you give us. | Addressing you in the product and in emails. |
| Password | Stored only as a bcrypt hash. We never store or see your password in plain text. | Authenticating you. |
| Email-report preference | Whether you want an email after each audit. | Sending, or not sending, audit report emails. |
| Plan and billing history | Your plan, billing interval, renewal date, and past payments and receipts. | Providing the plan you paid for, invoicing and accounting. |
| Sessions | A hashed session token and your browser's user-agent string, kept server-side for 30 days. | Keeping you signed in and letting you recognise your sessions. |
Payment details
Card payments are processed by our payment provider. Sitelens never receives or stores your full card number or security code (CVC). We keep only the details needed to show you which card is on file and to issue correct receipts: card brand, last four digits, expiry date, cardholder name, country and postal code.
04 —Sites, audits and checks
Sites you add
For each site (project) you add we store its start URL and your settings: page limit, include and exclude paths, whether robots.txt is respected, and the audit schedule.
Crawl results
For each audit we store the SEO data SitelensBot extracted from the pages it crawled:
- URLs, HTTP status codes, redirects, response times and page sizes;
- page titles, meta descriptions, headings, canonical URLs and word counts;
- the link graph: links between pages and outbound links, with their anchor text;
- the issues we detected and the scores we calculated.
Single-page checks
If you are signed in, we store each single-page check you run (the URL, the optional target keyword and the result) so you can find it again. If you are not signed in, guest checks are not stored; your IP address is used only for rate limiting, as described below.
05 —Technical data and rate limiting
To protect the service from abuse, we use the IP address of each request transiently for rate limiting. Rate-limit counters cover windows of one hour or less and are not used to build a profile of you.
We do not use analytics, advertising or social-media trackers, and we don’t sell or share your personal data for advertising. Our servers may keep routine technical logs (such as errors) to keep Sitelens running and secure.
06 —Why we use your data and our legal bases
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and running your account, running audits and checks, scheduled audits, exports | Performance of our contract with you |
| Taking payment, issuing receipts, keeping accounting records | Contract; compliance with legal obligations |
| Sending service emails: password resets, receipts, notices about your account | Contract |
| Sending audit report emails | Contract, according to your email-report preference |
| Rate limiting, preventing abuse, securing the service, handling abuse reports | Our legitimate interest in a safe, reliable service |
| Answering your messages | Our legitimate interest in replying; contract where it concerns your account |
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
07 —Who processes data for us
We share personal data only with service providers that help us run Sitelens, under contracts that limit their use of it to providing their service to us:
| Provider | What they do for us |
|---|---|
| Railway Corporation (USA) | Hosting and database for the application and all stored data |
| Resend | Transactional email: password resets, receipts, notices and audit reports |
| Our payment provider | Payment processing; Sitelens receives only the limited card details listed above |
We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users or others. If Sitelens is ever sold or merged, account data would transfer to the new operator, who would remain bound by this policy until it is changed with notice.
08 —International transfers
Sitelens is operated from Hong Kong, and our hosting and email providers are in the United States, so your data is transferred outside your country. Where the GDPR, UK GDPR or similar laws require it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) with our providers. You can ask us for more information about these safeguards at [email protected].
09 —How long we keep data
- Account data: for as long as you have an account.
- Sites, audits and stored checks: until you delete the audit, the site or your account.
- Sessions: 30 days, or until you sign out.
- Rate-limit data: windows of one hour or less.
- Billing records: as long as tax and accounting laws require us to keep them, even after your account is deleted.
- Backups: deleted data is purged from backups within 30 days.
10 —Exporting and deleting your data
Export. In Settings you can download all of your account data as a JSON file. On Pro and Agency plans you can also export each audit as CSV.
Delete. In Settings you can delete your account yourself after confirming your password. This immediately deletes your account, sites, audits and stored checks. Copies in backups are purged within 30 days. Billing records we must keep by law are retained as described above.
11 —Your rights
Depending on where you live, you have some or all of these rights:
- GDPR and UK GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and the right to complain to your local data protection authority.
- California (CCPA/CPRA): to know what personal information we collect and how we use it, to access, correct and delete it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
- Hong Kong (PDPO): to request access to and correction of your personal data.
Most of these you can exercise yourself in Settings. For anything else, email [email protected]. We may need to verify your identity before acting, and we reply within the time limits set by applicable law.
12 —If SitelensBot visited your site
SitelensBot fetches only publicly available pages, identifies itself in its user-agent, and respects robots.txt by default. Audit results belong to the Sitelens user who ran the audit; they are not published by us.
You can block or limit the crawler with robots.txt. See About SitelensBot for examples. To report unwanted crawling, email [email protected] or use our report form.
13 —Security
We protect data with encryption in transit (HTTPS), bcrypt password hashing, hashed session tokens, access restricted to the people who need it, and providers with established security practices. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the relevant authorities where the law requires.
14 —Age requirement
Sitelens is intended for people aged 16 and over. We do not knowingly collect personal data from anyone younger. If you believe a child under 16 has given us personal data, contact [email protected] and we will delete it.
15 —Changes to this policy
We will update this policy when our practices change and revise the “Last updated” date above. If a change is significant, we will tell account holders by email or in the product before it takes effect.
16 —Contact
Questions about privacy or requests about your data: [email protected]. Postal address: Earth Wide Service Limited, Room 511, 5/F, Ming Sang Industrial Building, 19-21 Hing Yip Street, Kwun Tong, Hong Kong.