Who is responsible

PageXray AI is sold by Dínamoxigenado Unipessoal, Lda. (NIPC 518435067), Montijo, Portugal.

It is the data controller for this website and for the extension.

Privacy questions and requests: privacy@pagexray.io. Anything else: hello@pagexray.io.

The extension: on-page checks

• The on-page checks run in your browser and send nothing to us.
• The extension only reads a page after you open the side panel on it.
• Link checks run only when you press "Check broken links". Requests go straight to the linked sites, without cookies.
• In your browser only, it keeps your interface preferences, your answer to the AI consent and a random installation ID.

AI audit and AI visibility check (optional)

The first time, the extension asks you to agree and links to this notice. Before that, nothing is sent.

After you agree, opening the AI tab asks our server how many free runs you have left.

That request carries only the random installation ID and your interface language. Page data is sent only when you click.

When you click "Run AI audit", we send this data about the page you are viewing:

• address, language, title, meta description, canonical and robots;
• headings, word count, and link and image counts;
• hreflang, structured data types and Open Graph tags;
• an excerpt of up to 12,000 characters of its text.

When you click "Check AI visibility", we send the brand, domain and topic you typed.

The data goes to our server and from there to OpenAI, which generates the result.

OpenAI processes these requests in the United States, outside the European Union.

This transfer relies on the standard contractual clauses provided for in OpenAI's data processing terms.

With each request we also send OpenAI a pseudonymous identifier derived from the installation ID, used to prevent abuse.

We ask OpenAI not to store the responses. OpenAI may keep requests for up to 30 days to monitor abuse.

OpenAI does not use API data to train its models. See OpenAI's privacy policy.

We do not store the page content, the questions or the answers. For each run we keep only:

• a pseudonymous code of the installation ID;
• a pseudonymous code of your IP address, for the daily limits, deleted 24 hours after the end of the day it was recorded;
• the date, language, model, tokens used, estimated cost, duration and result.

The free limits are counted per installation ID. It is a random number, not linked to your name or email.

Legal basis: providing the audit or check you ask for (Article 6(1)(b) GDPR).

For the usage records, our legitimate interest in applying the free limits, preventing abuse and controlling cost (Article 6(1)(f) GDPR).

How long we keep it: the records of AI runs, 13 months.

The IP address code is deleted 24 hours after the end of the day it was recorded (at most about two days).

What we collect when you join the waitlist

• Your email address.
• The language of the page you signed up on and the date and time you gave consent.
• The page that linked you to us, address only, without parameters.
• Any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term).

We use this only to email you when PageXray AI is on the Chrome Web Store and about the founding plan.

We do not sell or share your email, and we do not use it for anything else.

Legal basis: your consent (Article 6(1)(a) GDPR), given by ticking the box on the form.

You can withdraw it at any time, with effect for the future.

How long we keep it: until you ask us to delete it, and at most 12 months after the waitlist closes.

Visit counting, without cookies

This site uses no cookies and stores nothing on your device.

Each page view sends the page address, the referring page without parameters and any campaign tags.

We also count clicks on the pre-order, extension and waitlist buttons.

To count daily visitors, the server turns your IP address and browser type into a pseudonymous daily code.

The key for that code is random and thrown away every day, so codes from different days cannot be linked.

Your IP address and browser details are not stored.

Legal basis: our legitimate interest in measuring interest in PageXray AI (Article 6(1)(f) GDPR). You can object at any time.

How long we keep it: visit and click counts, 13 months.

Against abuse of the signup form, the server keeps a one-way code of your IP address in memory for one hour at most.

That code is never written to disk.

Fonts are served from this site. No request goes to third-party font or analytics services.

Pre-orders and refunds

The founding plan is paid on a Stripe payment page. We never see your card number.

Stripe processes your payment details under its own privacy policy.

From Stripe we receive your email, name, country and the payment details needed for invoices and refunds.

We keep them as long as Portuguese tax law requires (Article 6(1)(b) and (c) GDPR).

You can ask for a full refund within 14 days of payment, no questions asked, at hello@pagexray.io.

Who else receives data

• OpenAI, for AI audits and visibility checks.
• Stripe, for payments.
• The company that hosts our server, which processes data only on our behalf.

OpenAI and Stripe may process data outside the European Union.

These transfers rely on the standard contractual clauses provided for in the data processing terms of these providers.

Your rights

You can ask to access, correct or delete your data, or to receive a copy of it.

You can object to processing based on legitimate interest, or withdraw your consent.

Write to privacy@pagexray.io. We reply within one month.

Visit counts and AI records hold only pseudonymous codes, so we may not be able to find yours.

You can also complain to a data protection authority, in Portugal the Comissão Nacional de Proteção de Dados (CNPD).