How LLMready handles your data

When you audit a website we store the address you entered and the report: scores, the checks that passed or failed, and the generated llms.txt files. Reports have a shareable link, so treat them as public.

Audits run without an account are tied to a random token kept in your browser; we store only a salted hash of it. To enforce the free limit we also store a salted hash of your IP address with the audit — never the address itself.

Free quick checks (API and agent connection) record a salted hash of your IP address, or your account when signed in, plus the checked address and its result. We use this for the rate limits and to reuse very recent results.

Signing up stores your email address, an optional display name and your notification settings. Sign-in is handled by our hosting provider; with Google sign-in we receive your email address and name from Google.

Pro waitlist: if you join, we store your email address, the plan you picked (monthly or yearly), the page you joined from, the consent text you agreed to and when, and your account id if you were signed in with the same email. We use it only to email you when Pro opens, and delete it when you ask or once Pro has opened. To leave, sign in with that email and choose “Leave the waitlist” under Billing.

Payments are processed by Stripe. Your card or bank details go to Stripe, not to us. We store your subscription status, plan, billing period and the Stripe customer and subscription ids so we know whether your account has Pro.

For the sites you monitor we store the domain, the hosted llms.txt files, weekly check results and competitor scores.

Crawler hits come only from requests to your hosted files and the server logs you choose to forward. We keep the crawler name, path, status and time — not the visitor's IP address.

For AI answer checks we send the questions you track to AI answer engines (OpenAI web search and Google Gemini, through Lovable AI) and store whether your site was mentioned or cited, with the answer snippet and sources.

API keys and log-forwarding keys are stored only as salted hashes; we show the full key once, when you create it.

For the agent connection and public API we keep daily totals per call, result, client name and user agent — no IP addresses, accounts, keys, request contents or checked addresses. These totals are deleted after 400 days.

LLMready keeps your sign-in session and the tokens for audits you ran without an account in your browser's local storage. We don't add advertising or third-party tracking scripts.

Lovable Cloud hosts the site, database and sign-in. Stripe handles payments. Lovable AI routes AI answer checks and question suggestions to OpenAI and Google. Audits fetch the websites you ask us to check.