Privacy
QuotedWrong is a scan and audit product. We hold as little as the product needs to work.
What we hold
The data controller is HerSecret.fi Oy, business ID 3331060-3, Savolanmutka 3 A 1-2, 70820 Kuopio. Contact: [email protected].
Email address, when you leave it on a scan result, request an audit, or sign in.
The domain you ask us to scan or audit, and the observations that scan produces: prompts, platforms, models, answer excerpts, citations, and observation times.
For free scans we store a keyed hash of your network address range (the IPv4 address or the IPv6 /64), used only to enforce the daily scan limit. The raw address is not stored with the scan.
Payment status. Payments are processed by Stripe; QuotedWrong never sees or stores your card details.
Scan results are not listed or indexed. Anyone with the result link can open it, and a new scan of the same domain reuses the result until the date shown on it. Results cover only public pricing information.
Why we hold it
We use your email, domain and payment status to deliver the scan or audit you asked for and to sign you in. We use the network address hash to keep the free scan limit fair. Attribution and analytics run only with your consent.
Attribution and analytics
If you accept the consent banner, we record first-party attribution (such as UTM parameters, landing path, and referrer host) and load Google Analytics 4. Google Analytics is loaded only after you accept. If you decline, we store no attribution and Google Analytics is not loaded.
You can change your choice at any time by clearing the qw_consent_v1 cookie and answering the banner again.
Who processes data for us
Stripe processes payments. Resend delivers our emails. Cloudflare sits in front of the site and handles network traffic.
To collect and compare AI answers, the domain and the pricing questions about it are sent to DataForSEO, which queries the AI assistants, and to Anthropic, whose model extracts pricing facts and claims. Your email address is not part of those requests.
Google Analytics receives data only if you accept the consent banner.
How long we keep it
Reports, the working data of an order, scan data (including the network address hash) and email addresses you leave with us are kept for 24 months.
Accounting records are kept for 6 years, as Finnish law requires.
What we never do
We never sell your data, never send correction briefs or any message to a third party without your explicit approval, and never email you without a way to opt out.
Your rights
Write to [email protected] to access, correct, export, or delete the data we hold about you. We answer within a reasonable time.
Questions about this page: [email protected]