Privacy Policy

Who we are

WPAQ.com operates the website health checker at wpaq.com. For privacy questions, email [email protected].

Information we collect

• Scan data. The URL you submit, discovered page URLs, HTTP status codes, titles, findings, evidence, and screenshots of publicly accessible pages. Anonymous scans are tied to the scan identifier, not necessarily an account.
• Account data. Name, email address, and a hashed password if you register with email. If you use Google sign-in, we receive your Google account identifier and profile email. We also store plan limits, scan history, remaining AI credits, monitoring preferences, and terms acceptance records.
• Team and integrations. On eligible plans, we store team invite emails and roles, API key fingerprints (not the full secret after creation), webhook endpoint URLs, event preferences, and Slack webhook destinations you configure.
• Usage data. Basic request logs (time, path, status) needed to run, secure, and debug the service. We do not use advertising trackers.
• Payment data. If you buy a paid plan, billing is handled by Dodo Payments as merchant of record. We receive subscription status, plan identifiers, and invoice references — not your full card number.

How we use it

We use this information to run scans, show reports, save history for signed-in users, send monitoring alerts, deliver webhooks and Slack notifications you configure, generate optional AI explanations, prevent abuse, and communicate about your account. We do not sell personal information. When you request an AI explanation, finding text and scan evidence are sent to our AI provider to generate the response.

Scan reports and search engines

Scan report URLs are served with noindex instructions so they are not meant to appear in search results. You should still treat a report link as sensitive if it includes findings about a private project.

Cookies

Essential cookies keep you signed in and protect forms. Details are in the Cookie Policy.

Processors

We use hosting, email, CDN, payment (Dodo Payments), AI, and analytics providers as subprocessors to operate WPAQ. Favicons in the app may be requested from Google’s public favicon service. Cloudflare may process requests when the app is proxied. Webhooks and Slack notifications send scan metadata only to destinations you configure.

Retention

Scan results and screenshots are kept so you can reopen reports and so we can operate the product. Retention depends on your plan and applies per website:

• Starter — the last 20 completed scans per site.
• Business — scans from the last 18 months per site.
• Agency — scans from the last 36 months per site.

Anonymous scans are removed after a short period. You can ask us to delete an account and associated scan history by emailing [email protected]. We may retain limited records required for security, billing, or law.

Your choices

You can use a basic scan without an account. If you have an account, you may request access, correction, or deletion of personal data we hold. If we cannot verify the request, we may ask for the account email.

Children

WPAQ.com is not directed at children under 16. Do not create an account for a child under 16.

Changes

We will update this page when our practices change. The date at the top is the latest revision.