Privacy policy

UnvelloWeb is operated by [Company legal name], [Registered address], Accra, Ghana (“we”, “us”). We are the data controller for the personal data described here. Questions or requests: privacy@unvelloweb.com.

• Account details — your name, email address and profile picture, provided through our sign-in provider (Google or email and password).
• Your answers — the short onboarding questions (your role, goal and who implements fixes), notification preferences, and branding you add for reports.
• Websites and audits — the addresses you audit and what our crawler reads from those public pages, the findings, scores and reports we produce, and anything you export or share.
• Team information — who belongs to a workspace, their role, and invitations (including the invited email address).
• Billing — your plan and subscription status. Payments are handled by our reseller (merchant of record); we never see or store your card details.
• Messages you send us — expert-help requests and feedback.
• Technical data — IP address (to prevent abuse; stored hashed where we keep it), browser type, and error logs.
• Attribution (only with your consent) — which link or campaign brought you to us. See the cookie policy.

• To provide the service (contract): run audits, show reports, send the emails you ask for, manage teams, subscriptions and exports.
• To keep it safe and working (legitimate interests): prevent abuse and fraud, rate-limit, debug errors, and keep audit logs of billing and account changes.
• To improve it (legitimate interests, or consent for attribution): understand which features are used and which campaigns work. We don't build advertising profiles.
• To meet legal obligations: tax, accounting and responding to lawful requests.

AI analysis: parts of an audit use AI models to read the public text of the website being audited. We send page content, not your account details, and our providers may not use it to train their models.

We share data only with service providers who process it for us under contract:

• Clerk — sign-in and account security
• Lemon Squeezy — payments, invoices and tax (merchant of record)
• Resend — sending our emails
• Cloudflare — network security, bot checks (Turnstile) and file storage (R2)
• Anthropic and OpenAI — AI analysis of public website content
• Google — PageSpeed measurements of public pages, and business lookups (Knowledge Graph, Places) for external validation
• Vercel — hosting the website
• Sentry — error monitoring
• Our hosting provider — the API servers and databases

Some providers are outside Ghana (for example in the EU or the US). Where required, transfers are covered by appropriate safeguards such as standard contractual clauses. We never sell personal data.

• Account, websites and audits: while your account is open.
• Stored copies of crawled pages: up to 90 days; findings and scores stay with the audit.
• Exported files: 30 days (you can export again).
• When you delete your account (Settings → Account): it closes immediately and nobody can use it. We keep your details and workspace data for 30 days so we can restore the account if you ask, then delete them permanently. Billing records are kept by our payment provider as the law requires.

Under Ghana's Data Protection Act, 2012 (Act 843) — and, where they apply to you, the GDPR and UK GDPR — you can ask to access, correct, delete or receive a copy of your data, object to or restrict certain processing, and withdraw consent at any time. Most of this you can do yourself in your account settings; otherwise email privacy@unvelloweb.com. You may also complain to the Data Protection Commission of Ghana or your local supervisory authority.

Our crawler, UnvelloBot, reads public pages, respects robots.txt and identifies itself. Site owners can ask us not to audit their site — see UnvelloBot.

Data is encrypted in transit, access is limited to people who need it, and every workspace is isolated from every other. No system is perfectly secure; if something goes wrong that affects you, we'll tell you promptly.

UnvelloWeb is a business tool and isn't meant for anyone under 16.

We'll update this page when our practices change and email account holders about significant changes before they take effect.