Privacy & Data Handling

What Data We Collect

• Account information: Email address and optional display name, collected during sign-up.
• Submitted URLs: The website URLs you enter for analysis.
• Scan results: The assessment output generated by the rubric, including dimension scores, evidence citations, and confidence labels.
• Usage metadata: Which URLs were scanned, when, and by whom—used for rate limiting and abuse prevention.
• Feedback: Optional star ratings and free-text feedback you submit about a report.

How We Process Scan Data

When you submit a URL, the AVS Rubric performs the following steps:

1. Public content scraping: We retrieve publicly accessible text from the submitted website (homepage, pricing page, documentation). No login-gated or private content is accessed.
2. AI-powered analysis: The scraped content is sent to a large language model for structured evaluation against the AVS Rubric dimensions. No personal data is included in the AI prompt—only website content.
3. Result caching: Analysis results are cached for 7 days to ensure consistent outputs and reduce redundant processing. After expiry, a new scan produces a fresh analysis.
4. Evidence gap logging: If the rubric detects missing public evidence for a dimension, it logs the gap anonymously to improve future accuracy.

Data Retention

• Scan results: Cached for 7 days, then automatically expired.
• Account profiles: Retained as long as your account exists.
• Usage logs: Retained for operational purposes (rate limiting, abuse detection).
• Feedback: Retained indefinitely to improve the rubric methodology.

Data Security

All data is transmitted over HTTPS. Database access is protected by row-level security policies that restrict reads and writes to authenticated users and their own data. No scan results or profile information are shared with third parties. AI model providers process only website content—never your personal information.

Email Communications

You may receive product-related emails based on your account. You can opt out of all non-essential email communications at any time using the Email Preferences link in the footer of the landing page. Your preference is stored and respected immediately. We comply with CAN-SPAM, CASL, and GDPR requirements for email consent.

Your Rights

• Access: You can view all your scan results and profile data within the application.
• Correction: You can update your display name and email preferences at any time.
• Deletion: Contact us to request full account and data deletion. We will respond within 45 days.
• Opt-out: You can opt out of email communications via the footer link on the landing page.
• Non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

Categories of Personal Information Collected

• Identifiers: Email address, display name, user ID.
• Internet activity: URLs submitted for analysis, scan usage logs, interaction with the application.
• Inferences: Rubric scores and dimension assessments derived from publicly available website content (not from your personal information).

We Do Not Sell or Share Your Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

Your CCPA Rights

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and any third parties with whom it was shared.
• Right to Delete: You may request deletion of your personal information. We will comply within 45 days and direct any service providers to do the same.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your data, so no opt-out mechanism is required. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined by the CCPA.
• Non-Discrimination: We will not deny services, charge different prices, or provide a different quality of service because you exercised your CCPA rights.

How to Submit a Request

To exercise any of these rights, email us at privacy@valuetempo.com. We may verify your identity before fulfilling a request. You may also designate an authorized agent to make a request on your behalf.

Disclosure of Personal Information

In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose: Internet activity data (website content only, not personal data) shared with AI model providers for rubric analysis. No personal identifiers are shared with third parties.

Third-Party Services

The AVS Rubric uses the following third-party services to deliver its functionality:

• AI model providers: For rubric analysis. Only public website content is shared—never personal data.
• Cloudflare Turnstile: For bot protection during scan submission. Subject to Cloudflare's privacy policy.