Privacy Policy

Last updated: June 2025

This Privacy Policy explains how CachePlex ("we", "us", "our") collects, uses, and protects information about you when you use our service. We are committed to handling your data responsibly and transparently.

1. Information We Collect

a) Account Information
When you register, we collect your username, email address, and a hashed version of your password. We never store your password in plain text.

b) Scan Data
When you analyze a website URL, we record the URL, the resulting SEO score, the full analysis results (as JSON), and the AI-generated summary (if applicable). If you are logged in, this scan is associated with your account. Guest scans are stored without a user identifier.

c) Contact Form Submissions
When you submit a message through our Contact page, we collect your name, email address, subject, and message content, along with the IP address of the submission, solely for the purpose of responding to your inquiry and preventing abuse.

d) Usage Data
We may automatically collect technical information such as your IP address, browser type, referring URL, and the date/time of your requests. This data is used for security monitoring and service improvement. It is not sold or shared with advertisers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the SEO analysis service;
  • Associate scan history with your account and display it in your dashboard;
  • Respond to your contact form inquiries and support requests;
  • Detect and prevent fraudulent or abusive use of the Service;
  • Send transactional notifications directly related to your account (password resets, etc.); and
  • Comply with legal obligations where required.

We do not use your data to serve advertising, and we do not sell or rent your personal information to any third party.

3. Sharing of Information

We do not sell, trade, or otherwise transfer your personal information to outside parties, except in the following limited circumstances:

  • AI Processing: When you perform a scan and AI summaries are enabled, the analyzed URL and a structured summary of the scan results are sent to the Google Gemini API to generate a plain-language report. No personally identifiable information is included in this request. Google's use of data sent via its API is governed by Google's Privacy Policy.
  • Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process (such as a court order or government request).
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, user data may be transferred as part of that transaction, subject to the same privacy commitments.
4. Data Retention

We retain your account data for as long as your account is active. Scan records are retained to provide you with your history. Contact form submissions are retained until resolved. You may request deletion of your data at any time by contacting us via the Contact page.

5. Cookies and Local Storage

CachePlex uses a session cookie (PHP session) to maintain your login state. This cookie is essential to the Service's operation and does not track you across other websites. We do not use advertising cookies, third-party analytics cookies, or fingerprinting technologies. You can disable cookies in your browser, but this will prevent login functionality from working.

6. Security

We implement reasonable technical safeguards to protect your information, including:

  • Password hashing using PHP's password_hash() (bcrypt);
  • Prepared statements (PDO) to prevent SQL injection;
  • HTML output escaping to prevent XSS attacks;
  • HTTPS enforcement (recommended for production deployments).

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete the information.

8. Your Rights

Depending on your jurisdiction, you may have rights including:

  • The right to access the personal data we hold about you;
  • The right to correct inaccurate data;
  • The right to request deletion of your data ("right to be forgotten");
  • The right to object to or restrict certain processing;
  • The right to data portability.

To exercise any of these rights, please contact us. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. Your continued use of the Service after any change constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via our Contact page.

This policy is effective as of June 2025. See also our Terms of Service.