Privacy Policy

BusinessAudit.io provides paid business audits and free resources for small and medium businesses. If you have any question about this policy, or want your data removed, email support@businessaudit.io.

Information you give us.

• When you buy an audit: your name and email address, collected by Stripe during checkout. We never see or store your card details.
• At intake: your business name, what your business does, your website address, where your customers come from, and optionally a phone number.
• In the conversation that follows: whatever you tell us about the problems your business is facing, and — if you choose to share them — rough business figures such as revenue, average sale, enquiries, close rate, margins, marketing spend, and team size. The conversation is run by an AI consultant, and we keep both the transcript and a structured summary of what you said, because that summary is what your report is written from. Figures you give us appear in your report labelled as self-reported; they are not shared with agencies (see below). Tell us only what you are comfortable having in your report — and please leave out details about identifiable individuals, such as named employees or customers.
• When you download a free resource: your email address, and optionally your first name.

Information we gather about your business. When you buy an audit, we research the business you asked us to audit using publicly available sources:

• We fetch and read pages of the website you give us, in the same way a search engine does. We only read what is publicly accessible — we do not log in, submit forms, or attempt to reach anything private.
• We ask Google PageSpeed Insights for performance and technical data about that site.
• We look up your business on Google Maps / Google Business Profile for your listing, rating, review count, and opening hours.

Information collected automatically. When you click a tool recommendation on our site, we record which link was clicked, which audit it came from, the page you came from, your browser's user-agent, and a one-way cryptographic hash of your IP address. We store the hash rather than the address itself, so we can count distinct visitors without holding the underlying data.

This is how it works in practice:

• Consent is opt-in. The box is unticked by default. If you leave it unticked, your details are never offered to any agency, and your audit is identical.
• We record exactly what you agreed to. We store the version and the precise wording of the consent text you saw, along with the time you agreed, so there is never any doubt about what was consented to.
• What we share: your business name, what your business does, your website, your audit score and findings, and your name, email address, and phone number if you provided one. We do not share the financial figures you gave us in the conversation — revenue, margins, spend, and the like stay in your report.
• Who with: marketing agencies and service providers who may be able to implement the recommendations in your audit. They pay us for the introduction.
• Withdrawing. Email support@businessaudit.io and we will stop offering your details immediately. Withdrawal does not affect your audit or your access to your report. We cannot recall details already passed to an agency, but we will tell you who received them so you can ask them directly.

The wording you agree to at intake is: “I understand that BusinessAudit.io may share my name, business name, contact details, and audit results with marketing agencies and service providers who may contact me about implementing these recommendations. I can withdraw this at any time by emailing support@businessaudit.io, and withdrawing does not affect my audit or my access to this report.”

We use the following services to run the product. Each one only receives what it needs.

We do not sell your data to advertisers or data brokers. The only sharing we do is the agency introduction described above, and only with your consent.

Your report is reachable by a long, unguessable link. Anyone holding that link can view the report, so treat it as you would a password — it is designed so you can forward it to your team without needing accounts. Tell us if you believe a link has been shared more widely than you intended and we will issue a new one.

• Audits and reports: kept indefinitely so you retain access to what you paid for, unless you ask us to delete them.
• Contact details: kept until you ask us to remove them.
• Free resource sign-ups: kept until you unsubscribe or ask us to remove you.
• Click records: kept for two years, then deleted.
• Payment records: retained as long as tax and accounting law requires.

Whatever jurisdiction you are in, we will honour these on request: a copy of what we hold about you, correction of anything wrong, deletion of your data, and withdrawal of consent to agency sharing. Email support@businessaudit.io and we will respond within 30 days. We will not charge you or make it difficult.

Deleting your data means deleting your report as well, since the two are the same record. We will say so before doing it.

Some tool recommendations in our reports and free resources are affiliate links, meaning we may earn a commission if you sign up. This never changes what we recommend, and every such link is marked. When you click one, we record the click as described above so we can see which recommendations are useful.

If we change this policy in a way that affects how we share your data, we will not apply it retroactively to consent you have already given. We will ask again instead.

support@businessaudit.io — for anything in this policy, including data access, deletion, and withdrawing consent.