Privacy

This page explains how Spexter collects, uses, stores and protects personal data when you run a scan, preview an analysis, buy the Complete Analysis or recover access to a past audit.

Who we are

Spexter is a Canada-based service that analyses how Google search and AI search systems describe small and mid-size businesses. See the Imprint page for the operator and contact details.

What we collect and why

• The URL you ask us to scan and the city you specify, used to generate your audit and Deep Analysis probes.
• Your email address, if you submit it on the scan form or at checkout — used to deliver your audit and, if you opt in, send follow-ups.
• A salted hash of your IP address, used for abuse prevention. We do not store the raw IP.
• Payment details, handled exclusively by our Merchant of Record (Lemon Squeezy). We never see your card or bank data.
• Standard web request metadata (URL path, coarse geo, user agent) retained in Vercel access logs for a limited period for security and service reliability.

Where it is stored

Your audit records and email are stored in Supabase, hosted in Frankfurt (Germany) in the European Union. Payment-related data is held by Lemon Squeezy. AI-search probe traffic is sent to Google (Gemini).

Who processes it on our behalf

A complete list of sub-processors — what they do, where they operate and which data they see — is published on the Sub-processors page.

How long we keep it

Audits and the email associated with them are retained for 12 months after your last interaction with the service, after which they are deleted. You can request earlier deletion at any time by emailing contact@spexter.app.

Your rights under GDPR (EU / EEA)

If you are in the EU / EEA you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email contact@spexter.app.

Your rights under PIPEDA (Canada)

If you are in Canada, PIPEDA grants you the right to access and correct the personal information we hold about you and to withdraw your consent. To exercise these rights, email contact@spexter.app.

Cross-border transfers

Some processors operate globally, including in the United States. When data originating in the EU / EEA is transferred outside the EEA, we rely on the Standard Contractual Clauses adopted by the European Commission, together with supplementary safeguards where appropriate.

AI transparency

Parts of each audit — scoring, AI-search probes and recommendation drafts — are produced by automated systems. The AI transparency page describes what is automated, what remains your decision and how to raise a concern. Automated processing does not make legal decisions about you.

Contact

Privacy-related enquiries: contact@spexter.app.