Last updated 3 October 2026.
This policy explains what siseo.io (“siseo”, “we”) collects when you use this website, run a scan or buy a report, why we collect it, how long we keep it and what you can do about it. If anything here is unclear, write to us at support@siseo.io.
When you run a free scan
- The address you enter, and the public pages of that website, which our crawler reads the way a search engine does.
- A keyed hash of your IP address. We use it only to apply fair-use limits and stop abuse, such as automated mass scanning. Your IP address itself is never stored.
- Basic details of your visit: your country as reported by our network provider, your browser’s user agent, the page that sent you here and any campaign tags in the link (such as utm_source), so we know which pages and channels bring people to siseo.
We use these to run the scan, show you the result and keep the service available to everyone. Free scans and their results are deleted after 90 days.
When you ask for your result by email
We keep your email address and whether you agreed to hear from us. We use it to send you the result. We send other emails about siseo only if you ticked the box to agree, and you can withdraw that at any time by replying to any email or writing to us.
When you buy a report
- Your account: your name, email address and password. Passwords are stored only in hashed form.
- Your order: what you bought, when, the amount and the billing details asked for at checkout.
- Payment: payments are processed by our payment providers, Dodo Payments and, as a backup, Razorpay. They receive your payment details directly; we never see or store your full card number.
We use these to deliver your report, give you access to it, handle refunds and support, and keep the records that tax and accounting law require. Reports you buy stay in your account until you ask us to delete them or close your account.
Cookies
- Signing in and checkout: WordPress and WooCommerce set cookies that keep you logged in and remember your checkout.
- Your reports: when you open a report, report.siseo.io sets one cookie,
siseo_session, so you stay signed in to your reports for a limited time. - Bot protection: the scan form uses Cloudflare Turnstile, which may use its own cookies or similar technology to tell people from automated traffic.
We don’t use advertising or cross-site tracking cookies.
Who helps us
We share only what each service needs to do its job:
- Our hosting providers run the website and the scanning engine and store their data.
- Cloudflare provides Turnstile on the scan form.
- Google receives the addresses of the pages we speed-test (PageSpeed Insights) and, for full reports, the site’s address for a malware and phishing check (Web Risk). Google’s Gemini models write report summaries and notes from the scan’s findings and short extracts of the scanned site’s public pages.
- Our email provider delivers result and report emails.
- Our payment providers process payments and refunds, as described above.
We don’t sell your personal data.
How long we keep things
| What | How long |
|---|---|
| Free scans and their results | 90 days |
| Reports you buy | Until you ask us to delete them or close your account |
| Fair-use and abuse records, email delivery logs | 180 days |
| Orders and invoices | As long as tax and accounting law requires |
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Depending on where you live, you may have further rights under laws such as the GDPR, the UK GDPR or India’s Digital Personal Data Protection Act. Write to support@siseo.io from the email address on your account, and we’ll reply within the time the law allows. You can also complain to your local data protection authority.
Children
siseo is a service for businesses and website owners and isn’t meant for children under 16.
Changes to this policy
When we change this policy, we update this page and the date at the top. If a change affects how we use data you have already given us, we’ll tell you by email first.