Privacy policy

When you run the free assessment we record the website address you enter, the public information our scan reads from that site, and the answers you give to the assessment questions. This is stored as soon as the scan completes, before you have given us any contact details.

If the scanned website publicly names its team, the assessment may ask which of those people you are. Your answer, including any name or role you type instead, is stored with the assessment. The list of names itself comes from your own website and is not stored beyond that answer.

If you choose to continue, we also store the work email address you provide and which package you selected. If you use the contact form we store the name, email and message you submit.

We do not ask for or store payment card details. We do not use advertising trackers or third-party analytics.

We run our own first-party usage measurement: which pages are visited, how far they are read, and which parts of the assessment are used. It uses no cookies and no third-party services, we honour the Global Privacy Control browser signal, and visitors from regions that require consent are measured per visit only, with nothing linking one visit to the next.

The assessment data is used to produce your recommendation, to follow up with you if you asked us to, and to understand where people find the assessment useful so we can improve it. We do not sell it or share it for marketing.

Because the record is created when the scan finishes, an assessment you abandon still exists without any contact details attached. It contains the website address and your answers, but nothing that identifies you personally. We may use it to understand how the assessment performs.

We use a small number of providers to run the service. Each one only receives what it needs:

• Convex stores the assessment, enquiry and account data.
• Google (Gemini) receives an extract of the public text from the website you submit, so it can be analysed. Your email address is never sent.
• Resend delivers the emails we send you.
• Cloudflare serves the website.
• Stripe processes payments, if and when you choose to pay a deposit. Card details go directly to Stripe and never reach us.

The assessment fetches publicly available pages from the website address you provide, the same way a search engine would. This can include a team or about page linked from the page you submit. It does not attempt to access private, password-protected or internal systems, and it will not scan addresses that resolve to private networks.

Assessments that are never linked to an email address are kept for no longer than twelve months and then deleted. Enquiries and engagement records are kept for as long as we need them for the work and for our record-keeping obligations.

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@laiko.dev and we will respond within a reasonable period. If you would rather not have an assessment stored at all, do not submit a website address.

If this policy changes we will update the date at the top of this page. Material changes affecting existing customers will be raised with them directly.