Legal
Privacy
What we collect, why we collect it, and who else sees it.
Who is responsible
NamedFirst is the data controller for the information described here. Questions, corrections and deletion requests: hello@namedfirst.co.uk.
What we collect
- Your email address and the domain you audit. We need the domain to run the measurement and the email to send you the report and, on paid plans, the invoice.
- A hashed form of your IP address. Used only to stop one person taking hundreds of free audits. It is a one-way hash; we cannot read the original address back out of it.
- Your public website. We fetch pages the same way a search engine does, obeying robots.txt. We do not log in and we do not read anything behind a login.
- Billing details. Held by Stripe. We receive the amount, the currency, the outcome and the last four digits — never the card number.
- On plans that include site work: the credentials or API access you grant us, encrypted at rest, used only for the changes you approve, revocable by you at any time.
We do not use advertising trackers, we do not sell anything to anyone, and there is no analytics cookie following you around this site.
Who else sees it
To do the work we send data to a small number of processors. The buyer questions we send to the engines contain your brand name and your market — not your email address.
- OpenAI, Google, Anthropic and Perplexity — the engines we measure, through their APIs
- Stripe — payments and the billing portal
- Supabase — the database holding your audits and dashboard
- Resend — the emails we send you
- Vercel — hosting
Some of these process data outside the UK. Where they do, the transfer relies on the provider's standard contractual clauses.
How long we keep it
Audits, measurements and the answers behind them are kept while you are a customer, because the whole product is the comparison over time, and we keep free audits so that a repeat visitor sees their history. Invoices are kept for as long as the law requires. Ask us to delete everything and we will, except records we are legally required to keep.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to hello@namedfirst.co.uk; we answer within 30 days. You can also complain to the Information Commissioner's Office.
Cookies
The public site sets no cookies. The admin area sets one signed session cookie, and it is only ever set for us, not for you.
Last updated September 2026.