Soarce

Privacy policy

Last updated Oct 2, 2026. Soarce is run by me, Rajan Chavada, in Toronto. This page says what I collect, why, who else sees it, and how to delete it.

What I collect

  • Your website. The address you enter to start a scan.
  • Your email. When you start a scan, so I can send you the report. I also use it to allow one scan per site and per email each month.
  • Scan data. Text from your homepage, the brand name and competitors suggested from it, the buyer questions, the AI answers, and the pages those answers cite.
  • The services form. Your name, email, website, the plan you picked, and your note.
  • Request logs. For each page view: the time, the page, the response code and speed, the site that linked you (the domain only), any utm tags in the link, and your browser's user agent. I don't store your IP address. I store a visitor id made by hashing your IP, user agent and the date with a secret value, so it changes every day and can't link your visits across days.
  • Product events. Things like "scan started" or "report viewed", with the same daily visitor id.

To limit abuse, the app keeps your IP address in memory for up to an hour to count scans and form posts from your network. It is not written to the database.

Cookies

The site sets no cookies for visitors, and uses no ad or analytics trackers. The only cookie is the login cookie for my own admin pages.

Who else receives data

  • Resend sends email. It receives your email address and the report email, and the contents of the services form when it notifies me.
  • DataForSEO asks the buyer questions on ChatGPT, Google AI Mode, Gemini and Perplexity for me. The questions can name your brand and your competitors. DataForSEO and the AI assistants do not receive your email.
  • Anthropic (Claude) reads your homepage text to suggest your brand, competitors and questions, then reads the answers and cited pages to count recommendations. It does not receive your email.
  • Railway hosts the app and its database.
  • Cloudflare sits in front of the site, so every request passes through it, including your IP address.
  • Google Fonts serves the site's fonts, so your browser contacts Google when a page loads.

To build a report, the app also loads public pages: your homepage, the pages the answers cite, and the Trustpilot page for your domain if one exists. I don't sell your data or share it with anyone else.

Who can see your report

Reports have no login. Anyone with the report link can open it, so share it only with people you want to see it.

How long I keep it

  • Request logs are deleted after 90 days.
  • Scans, reports, emails, form requests and product events are kept until you ask me to delete them.

Deleting your data

Email me at [email protected] from the address you used, with the site you scanned. I'll delete your scans, reports and email, and reply when it's done.

Contact

Rajan Chavada, Toronto, Ontario, Canada. [email protected]

Plain-language summary written by the founder. Email me with any questions.