Privacy Policy
Last updated: 22 August 2026
SearchScore ("we", "us", "our") is operated by Product Specialists LTD, a company registered in England and Wales. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Data Controller: Product Specialists LTD (company no. 12575770)
Registered address: Afe Accountants Limited, Building 3 North London Business Park, Oakleigh Road South, London, England, N11 1GN
Contact: hello@searchscore.io
2. What data we collect
| Data | When collected | Purpose |
|---|---|---|
| Website URL you audit | When you run an audit | To perform the AI visibility analysis |
| Email address | When you unlock a full report or subscribe | To deliver your report and send relevant updates |
| Payment data | At checkout | Processed by Stripe - we never store card details |
| IP address & browser data | Automatically on visit | Security, analytics, fraud prevention |
| Cookies & tracking pixels | On page load (with consent) | Analytics and advertising (see section 6) |
2A. Website chat
If you choose to use SearchScore chat, we process the messages you send so we can answer your enquiry. We may also attach limited first-party context that is already available on the SearchScore page, such as the page path, the website being audited and its SearchScore scores, where available. We do not send page query strings, authentication tokens, payment details or cookies with chat messages.
The chat service is hosted on Cloudflare and messages are relayed to an authorised SearchScore operator through Telegram. Telegram is used as our operator message-delivery channel; the visitor does not need a Telegram account.
When you start a conversation, a random conversation identifier and secret are stored in your browser so the chat can survive page changes and refreshes. The server stores only a hash of the secret. We use a keyed hash derived from network information for abuse prevention rather than retaining the raw IP address in the chat database, and those rate-limit records are deleted after two days.
We use chat data only to provide the conversation, maintain service security and troubleshoot delivery. Chat transcripts are not added to marketing lists and are not used to train AI models by default. Conversations, message bodies and Telegram routing records are deleted after 30 days of inactivity.
Our legal basis is our legitimate interest in answering enquiries and operating a secure customer service channel, and where your enquiry relates to a service you have requested or purchased, taking steps to provide that service.
3. Legal basis for processing
- Contract performance - processing your audit and delivering paid reports
- Legitimate interests - improving our service, fraud prevention, security
- Consent - marketing emails and advertising cookies (you can withdraw at any time)
- Legal obligation - retaining financial records as required by law
4. How we use your data
- To run AI visibility audits on the URLs you submit
- To deliver paid reports and manage your subscription
- To send transactional emails related to your account
- To send marketing emails (only with your consent, unsubscribe any time)
- To improve our scoring algorithm and product
- To prevent fraud and abuse of our platform
5. Who we share data with
| Third party | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | US (EU-US Data Privacy Framework) |
| Brevo (Sendinblue) | Email delivery | EU |
| GoHighLevel | CRM and lead management | US (Standard Contractual Clauses) |
| Cloudflare | Hosting and CDN | EU/US (adequacy decision) |
| Google Analytics | Website analytics | US (consent-based) |
| Meta (Facebook) | Advertising analytics | US (consent-based) |
| Microsoft Clarity | Session recording and heatmaps | US (consent-based) |
| X (Twitter) | Advertising analytics | US (consent-based) |
We do not sell your personal data to any third party.
6. Cookies and tracking
We use the following types of cookies and tracking technologies:
- Essential cookies - required for the site to function (no consent needed)
- Analytics cookies - Google Analytics, Microsoft Clarity (require consent)
- Advertising pixels - Meta Pixel, X Pixel, Google Ads (require consent)
You can manage your cookie preferences at any time via our cookie banner or by contacting us.
7. Your rights
Under UK GDPR you have the right to:
- Access - request a copy of the personal data we hold about you
- Rectification - ask us to correct inaccurate data
- Erasure - ask us to delete your data ("right to be forgotten")
- Restriction - ask us to limit how we use your data
- Portability - receive your data in a portable format
- Object - object to processing based on legitimate interests
- Withdraw consent - at any time, for consent-based processing
To exercise any right, email hello@searchscore.io. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Data retention
- Audit results - retained indefinitely to power our dataset (no personal data attached to public scores)
- Email addresses - retained until you unsubscribe or request deletion
- Payment records - retained for 7 years as required by HMRC
- Session and log data - deleted after 90 days
9. Security
We use industry-standard security measures including TLS encryption in transit, access controls, and regular security reviews. Payment data is processed exclusively by Stripe and never stored on our servers.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of SearchScore after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related queries: hello@searchscore.io