Privacy Policy

What we collect

• Account details. When you sign in with Google or GitHub we receive your name, email address (and whether it is verified), profile picture and your account id with that provider. We keep your sign-in sessions. The provider’s access tokens are stored encrypted and are not used after sign-in.
• What you send for analysis. The images and page addresses you or your agent submit.
• Usage. Which requests your account made, when, whether they succeeded, how long they took and how many screens they covered. These records hold no images.
• Connected agents. Which agents you have connected to your account. You can remove one from your account at any time; it loses access within the hour.
• Payment. Payments are handled by Stripe. We receive a record of your plan and payments; we never see or store your card number.

How long we keep it

Analyses, reports and uploaded files are kept for 24 hours so that your agent can come back to them, then deleted. The image you sent is not kept beyond that. Account details, usage records, credits and charges are kept while your account exists and for as long afterwards as the law requires.

What we use it for

To run the analyses you ask for, to count credits and bill you, to keep the service working and secure, and to answer you when you write to us. We do not sell your data.

Who processes it for us

We use these providers to run Heatshot, and they process data only to provide their service to us: Vercel (hosting and file storage), Neon (the database for accounts and credits, in the United States), Cloudflare (rendering the pages you give us by address), Google and GitHub (sign-in) and Stripe (payments).

Cookies

We use the cookies needed to keep you signed in. We do not use advertising cookies.

Your choices

You can ask us for a copy of your account data, ask us to correct it, or ask us to delete your account and the data tied to it.