1. Who we are

This website, angeo.dev, is operated by:

Ievgenii Gryshkun
Netherlands
info@angeo.dev

For the purposes of the General Data Protection Regulation (GDPR), Ievgenii Gryshkun is the data controller responsible for your personal data. This policy covers angeo.dev and the AEO scan service at api.angeo.dev.

2. What data we collect

We collect only the data you voluntarily provide, plus usage statistics if you agree to them:

• Contact form — name, email address, store URL, and message content when you submit the contact form.
• Newsletter subscription — email address when you subscribe to our blog updates. Brevo also records your IP address and the date of sign-up as proof of consent.
• AEO scan — when you run a scan we record the address of the store scanned, the two scores it received, and the time. We do not record who you are, your IP address, or your browser. If you never submit an email address, a scan leaves nothing that identifies you.
• AEO scan — full report — if you ask to unlock the full report we additionally store your email address, the store you scanned and its scores, a shortened version of your IP address, and whether you asked for marketing email.
• Usage statistics (only with your consent) — if you allow analytics, Google Analytics records which pages you visit, how you arrived (for example from a search engine or an AI assistant), your approximate location (country or city), your device type and browser. Google Analytics 4 does not store your full IP address. We do not use this data to identify you.
• Technical data — IP address and browser information collected automatically by hosting infrastructure and Google reCAPTCHA to prevent spam.

We do not collect payment information, sensitive personal data, or data about minors. The scan reads only what any visitor or AI crawler can already fetch from a store — it never has access to your store admin, your customers, or your orders.

3. Why we collect it

The report and the newsletter are separate. The marketing checkbox on the scan form is unticked by default, and ticking it is not required to see your report. Declining it changes nothing about the results you receive, and you can withdraw consent later without losing anything you already have.

Analytics is optional too. If you click “Reject”, the site works exactly the same.

4. Who we share data with

We use the following third-party services that may process your data:

• Brevo (Sendinblue) — email marketing platform where newsletter subscribers are stored. Brevo stores data on three geographically distinct servers within the EU and is ISO 27001:2022 certified. Brevo records subscriber IP addresses as proof of consent. Brevo Privacy Policy.
• WPForms — contact form plugin. Form submissions are stored in the WordPress database on our server.
• Google Analytics (Google Ireland Ltd / Google LLC) — website statistics, used only if you allow analytics. Data may be transferred to the United States under the EU-US Data Privacy Framework. Google Privacy Policy.
• Google reCAPTCHA — spam protection service operated by Google LLC. Subject to Google’s Privacy Policy.
• Hostinger — our hosting provider, which necessarily processes data as part of running the server, under their own data processing terms.

AEO scan data is not shared with any of the above beyond hosting. It is not sent to a CRM, an analytics platform or a mailing service — it sits in ordinary files on our own EU server. We do not sell, rent, or trade your personal data to any third parties.

5. How long we keep your data

• Contact form submissions — retained for up to 12 months, then deleted.
• Newsletter subscribers — retained until you unsubscribe. Every email includes an unsubscribe link.
• Analytics data — event-level data is kept in Google Analytics for 2 months, and user-level data for up to 14 months after your last visit. After that it is deleted automatically. Reports show only totals.
• Scan records — the store scanned and its scores are kept indefinitely as anonymous statistics. They contain nothing about who ran the scan.
• AEO report requests — your email address, the store you scanned and its scores are retained until you ask us to erase them.
• Saved report pages — deleted automatically 30 days after the scan.

6. The AEO scan in detail

Your report link. When you unlock a report we give you a long, unguessable web address where it stays for 30 days. We cannot reconstruct that address from our own records — we store only a one-way hash of the token it comes from. That makes the link safe to keep, and it also means anyone who has the link can open the report, so treat it as you would any other private link. We cannot recover it for you if it is lost; running the scan again takes a few seconds and gives a current result.

The report page asks search engines not to index it.

Scanning a store you do not own. The scan fetches public pages, exactly as a search engine or an AI crawler does. It does not log in, submit forms, or place orders. If you scan a store you do not own, that store’s server may record a request from api.angeo.dev — the same record it keeps for any other visitor. We never learn who ran a scan, so we could not identify you to them even if asked.

Rate limiting. To stop the tool being used to scan the web at scale, we count recent requests against a shortened form of your IP address — the last part is removed, so it identifies a network rather than a device. These counters are discarded within the hour.

7. Your rights

Under GDPR you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”). For the AEO scan this removes every record of your address, not only the marketing flag.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — unsubscribe from the newsletter at any time via the link in any email, or by emailing us; change your analytics choice at any time with “Cookie settings” in the footer. Withdrawing consent does not affect a report you have already received.
• Object — object to processing based on legitimate interest.

To exercise any of these rights, email us at info@angeo.dev. We will respond within 30 days. You do not need to give a reason, and none of these requests costs anything.

8. Cookies

This website uses the following cookies:

• Strictly necessary cookies — set by WordPress for session management, and the cookie angeo_consent, which remembers your cookie choice for 180 days. These cannot be disabled.
• Google reCAPTCHA cookies — set by Google on pages with a form, to tell humans from bots. Subject to Google’s cookie policy.
• Analytics cookies (only with your consent) — Google Analytics sets _ga and _ga_<ID> to count visits and see which pages help people. They last up to 2 years. They are set only if you click “Allow analytics” in the cookie banner.

If you click “Reject”, Google Analytics is not loaded and no data about your visit is sent to Google. If you allowed analytics earlier and then reject it, the _ga cookies are deleted.

You can change your choice at any time with “Cookie settings” in the footer, or by deleting cookies in your browser.

The AEO scan tool sets no cookies and uses no browser storage of any kind.

We do not use advertising cookies.

9. Complaints

If you believe we are handling your data incorrectly, you have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens, or with the supervisory authority in your own country.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of angeo.dev after changes constitutes acceptance of the updated policy.