How we handle your data

Content Commerce Labs LLC, doing business as Kovmere, is a company registered in Washington State, USA — the same operating entity and state named on the About page.

The site URL, category, brand name, and competitor names you enter to start a reading, and your email address if you leave one. If you buy a plan that includes written fixes, the public pages of your own website that we read to write them; you do not fill in a questionnaire. The sampled answers each engine returns, every URL those answers cite, and what we found when we fetched your own pages. IP address, timestamps, and request counts, used only for rate limiting and spend caps. The Stripe checkout and order identifiers for what you bought — never your card number.

The site, its database and its backups run on DigitalOcean servers in the United States — the same subprocessor named below and in the privacy policy.

We do not run an automatic, time-based deletion job for most of what we hold — each kind of data is kept until you ask us to delete it, not a fixed expiry enforced in code. Paid orders are kept indefinitely as a financial and tax record. Operational logs are kept indefinitely as an audit trail, but a deletion request scrubs your email address out of every row that carries one. Nightly backups keep roughly the last 14 days before the oldest is rotated out, so a deletion request can still exist inside a backup made just before it until that backup ages out. The full breakdown, kind by kind, is in the privacy policy's Retention and deletion section.

Deleting or exporting your data: log in with your email and password, then choose Delete my data or get a copy of everything under that address.

A report's URL is an unguessable, single-purpose link, not a password — anyone holding it can open it, the same as any unlisted link elsewhere in this product. Changing anything on a report (minting or revoking a white-label share link, re-running a missing engine, editing questions or the Fix package) needs the owner to be logged in with the email and password of the address the report belongs to, which keeps that browser logged in for 30 days. An Agency workspace opens only for its owner and the team members the owner added, each with their own email and password. Kovmere's operator can also open it, to give support. Nothing we email is a login link. White-label share links are revocable — turning one off invalidates every copy of it at once, and a link can be minted with its own expiry.

Checkout, card entry, and billing run on Stripe's own hosted pages. Your card number and billing details go directly to Stripe; they never reach us. Payment records come back from Stripe — we never see or store your card details.

We do not hold a SOC 2 or ISO 27001 certification. We will not claim one here unless a real audit report exists to back it.