Privacy
The scanner is free and works without an account or an email address — giving us your email is always optional. Here’s the little we do process, and why.
What we process when you run a scan
- The website address you enter is sent to Jina Reader (jina.ai), a service that fetches the page and extracts its text so the report can be based on your real site.
- Your description and the extracted site text are sent to Anthropic’s Claude model via Vercel’s AI Gateway to generate your report. Please don’t put personal details in the description, just what the business does.
- Your IP address is used for rate limiting and abuse prevention (stored briefly in Upstash Redis, roughly an hour for rate-limit counters) and, when our bot check is active, shared with Cloudflare Turnstile to verify you’re human. Lawful basis: legitimate interests (keeping a free service running and un-abused).
- The “was this useful?” buttons store an anonymous daily counter, and your answer is noted against the stored report so we can review report quality.
- Your finished report is stored for 3 months, along with the business details you gave (address, description, and any optional “about your business” answers), so your report link keeps working and we can check report quality. Reports are deleted automatically after 3 months and their links stop working. Report links are long random addresses: anyone you share the link with can view that report, and it is excluded from search engines.
- Clicks on tool links in reports are counted (which tool, from which report) so we can see which recommendations are useful. No cookies, nothing tied to you.
- Page views are counted with Vercel Web Analytics, which is cookieless and doesn’t identify or track individual visitors.
If you choose to give us your email
After your report we may ask if you’d like to hear more. Both uses are strictly opt-in (lawful basis: your consent), and you can say no to either without affecting your report:
- Practical AI tips by email. If you tick the tips box (or press “Send me tips”), we’ll send occasional emails with practical AI suggestions for small businesses. Every email will include an unsubscribe link, and unsubscribing removes you from the list. We don’t share the tips list with anyone.
- Follow-up about hands-on help. If you tick the hands-on-help box, we may contact you about getting help with what’s in your report, and we may introduce you to one firm from the panel named on our partners page. That introduction happens in two steps:
- First we describe the job to a partner — team size, kind of help wanted, rough budget, timeframe. At this stage we send nothing that identifies you: no name, no email, no company or website, and nothing you typed in the “anything else” box.
- Only if that partner takes it on do we pass your details— your email address and your answers, including the “anything else” box — and only to that one firm.
- We’re paid for that introduction. If you go ahead with a partner, they pay us a fee or a share of the work. It costs you nothing and it does not affect what your report recommends.
We keep your email and those answers until you unsubscribe or ask us to delete them; you can withdraw consent at any time (email privacy@whatcanaidoformybusiness.com) and we’ll stop using — and stop sharing — your details from that point.
When you unsubscribe we stop emailing you immediately, and we keep a record that you opted out, along with the date. That record is how we make sure you don’t get added back by accident, so it is the one thing unsubscribing does not erase. If you want your details gone entirely rather than just switched off, ask us and we’ll delete them.
One honest limit on that: if you withdraw after we’ve already passed your details to a partner, we’ll stop sharing anything further and we’ll tell them you’ve withdrawn, but we can’t retrieve what they already hold. You can ask them to delete it directly, and they have their own legal obligation to do so.
What we don’t do
- No advertising or analytics cookies.
- No selling of data, and no sharing beyond the processors above — except the single hands-on-help partner described earlier, and only ever with your explicit consent.
- No sharing of your identity with partners who turn the work down: they only ever see the anonymised description of the job.
- We don’t keep your site’s extracted text after the scan completes — only the finished report, for the 3 months above.
Your rights
Under UK GDPR you can ask what we hold about you and ask for it to be deleted. For this scanner that is your stored report (send us its link and we’ll delete it early), any email address and follow-up answers you gave us, plus short-lived anti-abuse counters that expire on their own. Email privacy@whatcanaidoformybusiness.com, or use the contact form and pick the privacy option.