What we keep, and why.

We store the domain, the report we generate, screenshots of the homepage's hero section, and when it ran. Reports are about a website's public pages, not about you. Each report is deleted 7 days after the scan, with its screenshots. To stop abuse, we check each scan with Cloudflare Turnstile and count scans per IP address for rate limits.

To write the report and the PDF, we send the text of the public pages we read to a language model through OpenRouter. We don't send anything you type except the domain.

We store your email address, the role you picked if you picked one, the domain you scanned and where you came from (such as the campaign link you clicked). We use them to email you the PDF and a few follow-ups about it. Emails are sent through PostShiba. Every email has an unsubscribe link, and unsubscribing stops them.

When you type your email for the PDF, PostShiba's ShieldShiba checks the address and your browser before we accept it. PostShiba keeps the email's domain, a one-way hash of the address, your IP address and which browser you use. It never keeps the address itself.

A link in one of our emails can open the homepage with your address in it. The form then shows that address, and checking a site from there asks for its PDF too.

Once your PDF goes out, we also add your address to RightMessage's email list in Bento, with the domain you checked, the role you picked, highlights from its report and links to the report and the PDF, so our follow-ups can talk about your site. Unsubscribing from our emails takes you off that list too.

We keep this in our own database and in Bento. We don't sell it or hand it to other marketing lists. If you start a RightMessage trial from a report while it's still live, the report goes with you so your project starts with it.

We build the PDF from the report and new screenshots of the site's pages, and attach it to the email. We keep the PDF after its report is deleted, so the link in that email keeps working. Removing a site's report deletes its PDFs too.

We use PostHog to count things like scans started, reports viewed and buttons clicked, so we can tell whether the tool is useful. When you ask for the PDF, PostHog also gets your email address, so we can tell whether a report led to a RightMessage signup.

These pages also run RightMessage's own script, as the rest of rightmessage.com does. It keeps a visitor ID in your browser and records the pages you view. When you ask for the PDF, it records that you asked, without your email address.

A report is visible to anyone with its link and hidden from search engines by default. The site owner can opt in to indexing. Anyone can ask us to remove a report at hello@rightmessage.com.

Reply to any email we've sent you and ask, and we'll delete your email address and anything linked to it.