Privacy
Your data, simply. Treated like it’s yours.
The short version: we collect the minimum needed to email you an audit report or reply to your inquiry, we don't sell anything to anyone, and we delete what we no longer need.
Last updated · May 6, 2026
1. Who we are
BitCarve Digital (“BitCarve,” “we,” “us”) is a sole-proprietorship web studio based in Mississauga, Ontario, Canada. This policy explains how we handle personal information collected through bitcarvedigital.com and our free SEO audit tool.
2. What we collect
We only collect information you give us, plus a small amount of technical data your browser sends automatically.
- Contact form submissions: name, email, vendor type (photographer, planner, HMUA, etc.), and any message you write.
- Audit tool submissions: the website URL you submit, the email address you provide to receive the report, and the vendor type you select.
- Audit results: the performance metrics returned by Google PageSpeed Insights for your URL, and the analysis our AI generates from those metrics.
- Standard request data: IP address, browser type, referrer, and timestamps captured by our hosting provider for security and abuse prevention.
- Analytics events: page views, sessions, referring source, device class, and country — captured via Google Analytics 4 and (if running ads) Meta Pixel. See section 7 for the full cookie list and how to opt out.
3. Why we collect it
- To deliver your audit report by email, including a PDF summary and the underlying scoring.
- To reply to your inquiry if you reach out via the contact form, WhatsApp, or email.
- To improve the audit tool by reviewing aggregated performance patterns (we do not single you out).
- To prevent abuse such as automated submissions and bot traffic.
4. Where your data goes
We use a small set of trusted third-party services to actually run the website and the audit tool. Each one only sees the slice of data it needs to do its job.
- Vercel — hosting and infrastructure. Sees standard request data (IP, browser). Vercel privacy policy →
- Resend — transactional email delivery. Sees the recipient email address and the contents of the audit report or reply we send you. Resend privacy policy →
- Anthropic (Claude) — generates the written analysis inside your audit report. Sees the URL you submitted and the PageSpeed metrics, but not your name or email. Anthropic privacy policy →
- Google PageSpeed Insights — measures the performance of the URL you submit. Receives only the URL. Google privacy policy →
- Google Analytics 4 — counts page views and sessions to help us understand which pages are useful. Receives aggregated event data and a randomly-generated client ID; no name, email, or phone number is sent. Google privacy policy →
- Meta Pixel (Facebook/Instagram)— used only if we run paid ads. Records page visits and event timestamps so we can measure ad performance and show our ads to people who’ve already visited the site. No name, email, or message content is sent. Meta privacy policy →
We do not sell, rent, or trade your information to anyone, ever.
5. How long we keep it
- Inquiries and contact-form messages: kept for up to 24 months so we can keep context across follow-ups, then deleted.
- Audit submissions: the URL and email pass through our system to generate and send the report. We retain a copy of the generated report for up to 60 days for support purposes.
- Server logs: retained by our hosting provider for up to 30 days for security and debugging.
6. Your rights
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws, you have the right to:
- Ask what personal information we hold about you.
- Request a copy, correction, or deletion of that information.
- Withdraw consent for us to keep contacting you (we’ll honour this immediately).
- File a complaint with the Office of the Privacy Commissioner of Canada.
7. Cookies & tracking
We use a small, named set of cookies. No third-party advertising network or cross-site retargeting other than the items below.
- Google Analytics 4: sets
_gaand_ga_<measurement-id>in your browser to count unique sessions. Expires after 2 years. Used to count page views, sessions, and referring sources — not to identify you personally. - Meta Pixel: sets
_fbpin your browser when we’re running paid ads. Expires after 90 days. Lets us measure whether ads on Facebook or Instagram drove traffic to the site, and show our ads to recent visitors.
How to opt out. You have three options at any time:
- Enable Do Not Track (DNT) in your browser settings. We honour it — when DNT is on, we do not load GA4 or the Meta Pixel at all on your visit.
- Block third-party cookies in your browser settings. Most modern browsers (Safari, Firefox, Brave) block them by default.
- Clear cookies for bitcarvedigital.com in your browser settings.
Any of these will stop the next page view from being measured.
8. Children
The site is intended for business owners and is not directed to children under 16. We do not knowingly collect information from minors.
9. Security
All traffic to the site is encrypted in transit via HTTPS. Our hosting and email providers maintain SOC 2 controls. No system is perfect, but we follow standard practices to keep your data safe.
10. Changes to this policy
If anything material changes, we’ll update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.