Privacy Policy

1. Information We Collect

AudEsto is built as a privacy-conscious, agency-first platform. We collect only what's needed to run audits, power the free SEO utilities, generate reports, and enforce fair usage limits.

• Audit & Utility Target URLs: The website addresses you enter into the audit tool or any of the individual free utilities (Meta Tags Generator, Open Graph Tester, Heading Tags Checker, Bulk Checkers, etc.) are fetched strictly to run the corresponding checks.
• Agency Branding Assets: Logos, brand colors, and agency names you optionally supply to generate white-label PDF reports are processed to render the report and stored only as long as the underlying report is retained (see Section 4).
• Account & Authentication Data: When you sign in with Google, described further in Section 2.
• Usage & Device Data: IP address, browser type, and coarse request metadata, used only for rate limiting, abuse prevention, and basic analytics.
• Contact Form Submissions: Name, email, optional website, and message content you submit via our Support page, used solely to respond to your inquiry.
• Support Tickets: The subject, category, optional related URL, and messages of tickets you open from the Support page, stored with your account so you and our support staff can follow the conversation. Used solely to resolve your request.

2. Account & Profile Data

Signing in is optional and only required to raise your daily limits and access My Reports. When you sign in with Google, we receive and store only your verified email address, display name, and avatar image - never your Google password, contacts, or any data outside these three fields. This profile data is used exclusively to:

• Identify your account for daily usage-quota tracking (guest vs. registered limits).
• Associate generated reports with your account so they appear in My Reports.
• Personalize the interface (showing your name and avatar in the navigation bar).

We never sell or rent your profile data, and we never share it with data brokers. The one exception to keeping it in-house is ad measurement, and only if you allow Marketing cookies: when you buy credits, a scrambled (SHA-256 hashed) copy of your email address is sent with the purchase to the ad platforms we use, so they can tell whether an ad led to it (see Section 10). You may delete your account and associated profile data at any time by contacting us.

3. Use of Free SEO Utilities

AudEsto's standalone utilities - including the Meta Tags Generator, Open Graph Tester, Heading Tags SEO Checker, Semantic Content Analysis Tool, Google Docs Word Counter, Bulk Dofollow Link Checker, Bulk Page Index Checker, Bulk Domain Age Checker, Bulk Domain IP Checker, and Orphan Page Checker - are free, require no account, and carry the exact same data-handling protections as a full audit. When a utility fetches a URL you provide, that request is made server-side, is subject to SSRF and domain-safety protections, and is not stored beyond what's needed to return your result. Text you paste directly into a utility (for example, into the Word Counter) is processed in memory for that single request and is not retained afterward.

4. Generated Report Storage

When an audit or single-page check completes, AudEsto generates a report identified by a secure, non-guessable UUID. Access to a report is restricted to whoever holds that link and, for signed-in users, to the account that generated it. We do not publish, index, or share your audit reports, crawled URL structures, or client lists with third parties.

5. Report Deletion & Retention

Reports are deleted automatically once their retention window ends (24 hours for guest reports, 30 days for signed-in reports) - no action is required on your part. If you'd like a report removed sooner, or want your entire report history and account data erased ahead of schedule, contact us and we will honor the request within a reasonable timeframe. Deletion is permanent and cannot be undone.

6. Usage Limits & Rate Limiting

To keep AudEsto free and fast for everyone, the audit engine has its own 150 free credits per 24 hours (with a separate 10 audits/day as a guest, or 15 audits/day once registered, allowance on top), and each individual free utility has its own separate 10 free credits per 24 hours - all tied to your IP address and, if signed in, your account. See our Terms of Service for the full breakdown of how credits work. We log request counts and timestamps (not full request content) purely to enforce these limits and to detect automated abuse.

7. Accuracy & No Guarantee of Results

Audit scores, heading outlines, semantic-SEO scores, and every other diagnostic AudEsto produces are generated from publicly available page data and automated heuristics modeled on established SEO and accessibility guidance. Search engine algorithms and AI answer-engines change frequently and are not fully disclosed by their operators, so we cannot and do not guarantee that following our recommendations will produce any specific ranking, traffic, or indexing outcome. Treat every score as a diagnostic signal, not a promise.

8. reCAPTCHA & Third-Party Services

AudEsto uses Google reCAPTCHA on audit, utility, and contact-form submissions to distinguish human visitors from automated bots and keep our infrastructure available to everyone. Completing a reCAPTCHA challenge sends data to Google and is subject to Google's own Privacy Policy and Terms of Service. We also rely on Google Sign-In for authentication; on Google Analytics (and, where enabled, Microsoft Clarity) for aggregate usage statistics, only with your Analytics consent; on advertising platforms such as Meta, Google Ads, TikTok, LinkedIn, Pinterest, Snapchat, X, Microsoft Advertising and Reddit to measure our ads, only with your Marketing consent (see Section 10); and, for the AI-assisted rewrite features on select utilities, a third-party language-model provider that receives only the specific text you ask it to rewrite - never your account or browsing data.

9. Data Security

All traffic to AudEsto is encrypted in transit via HTTPS/TLS. Our crawler enforces SSRF protections that block requests to localhost, private/internal IP ranges, and other non-public network targets, and every audit and utility endpoint is rate-limited per IP and, where applicable, reCAPTCHA-gated to reduce automated abuse. Reports are addressed by unpredictable UUIDs rather than sequential IDs, and we apply the principle of least privilege internally - no team member accesses report content outside of debugging a reported issue.

10. Cookies, Consent & Tracking

AudEsto uses cookies and similar browser storage in three categories. Only Necessary cookies are always on; the other two are off until your choice allows them. When you first visit, a cookie banner lets you Accept all, Reject all, or Customize each category, and rejecting is as easy as accepting.

• Necessary: your sign-in session (sessionid, up to 7 days), form security (csrftoken), your cookie choice (audesto_consent, see below), your time zone for dashboard dates (audesto_tz), and browser storage that keeps you signed in, tracks your daily audit/utility usage against the limits in Section 6, and remembers your white-label agency preferences. The site can't work without these, so they don't need consent.
• Analytics: Google Analytics 4 (cookies such as _ga) and, where enabled, Microsoft Clarity (_clck, _clsk). They tell us, in aggregate, which pages and tools are used so we can improve them. They're only loaded once you allow Analytics. We use Google Consent Mode, so Google is told your choice and doesn't set its cookies without it.
• Marketing: tags from the advertising platforms we use to measure our ads - such as Meta (Facebook & Instagram), Google Ads, TikTok, LinkedIn, Pinterest, Snapchat, X, Microsoft Advertising and Reddit. They record page views and, if you buy credits, the purchase (order value and currency), so a platform can tell whether one of our ads led to it. For purchases we also send the same event from our server, with your email address in scrambled (SHA-256 hashed) form, your IP address and browser type, so the platform can match it reliably. None of this happens unless you allow Marketing. Each platform processes this data under its own privacy policy.

Where you are matters. If you're in the European Union/EEA, the United Kingdom or Switzerland, nothing in the Analytics or Marketing categories loads until you opt in. Elsewhere, including the United States, Analytics and Marketing are on by default and the banner lets you turn them off at any time. We detect your region from your browser's time zone and never from your precise location. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of Marketing (the "sale" or "sharing" of personal information under California law).

Changing your mind. You can change or withdraw your choice at any time from the cookie button in the corner of every page, or here: Cookie settings. If you withdraw consent, we stop loading those tags straight away and remove the cookies they set on AudEsto's domain.

How long choices last. Your choice is stored in the audesto_consent cookie for a limited period (currently 180 days, never more than 13 months), after which we ask again. We also ask again if we change what we use in a meaningful way. To be able to show that consent was given, we keep a record of each choice made on the banner: a random ID matching your cookie, the categories chosen, the date and the policy version. This record contains no IP address.

11. Children's Privacy

AudEsto is intended for business and professional use and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will remove it promptly.

12. International Users

AudEsto is accessible globally and may process data on infrastructure located outside your country of residence. Wherever your data is processed, we apply the same protections described in this policy regardless of jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy as AudEsto's features evolve. Material changes will update the "Last updated" date above; continued use of AudEsto after a change constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this policy, want to request data or report removal, or need clarification on how a specific utility handles your input, please visit our Contact Page.