SiteSignal Privacy Policy

1. Who is responsible and what this covers

SiteSignal is operated by NetCoreSolutions.com LLC ("NetCore Solutions," "we," "us," or "our"), at NetCoreSolutions.com, PO Box 61, Plainfield, IL 60544.

This policy explains how SiteSignal handles personal information, including scans, accounts, purchases, reports, AI follow-up questions, and related support. The NetCore Solutions marketing website and its contact form may have their own privacy notice. A separate professional engagement may have additional terms.

2. Information we process

Submitted websites and results. We process the URL you submit, publicly accessible content we fetch within the scan's stated scope, and the resulting findings, severity and confidence ratings, coverage, and masked evidence. URLs and page content can contain personal information even when public. Do not submit URLs that contain passwords, access tokens, or unnecessary personal information.

Account and communications. We process your verified email address, account identifiers, sign-in and session records, report-delivery requests, and messages you send to support. We keep a record of your acceptance of the Terms (which version and when) and of your answer to the "I'm authorized to check this website" question.

Payments. Stripe processes your payment on its own hosted checkout page. We receive transaction identifiers, the items bought, amounts, currency, payment, refund, and dispute status, and the email address you give at checkout, so we can deliver your purchase and keep accounting records. We never receive or store full card numbers or card security codes. Stripe's own privacy notice and terms also apply to its processing.

AI questions and explanations. We process your follow-up questions, the relevant report context, the generated answers, and your saved conversation history for that report. We use automated measures meant to remove suspected credentials and other unnecessary sensitive material before it is sent to our AI provider or stored. These measures are not perfect, so do not submit passwords, private keys, full payment-card numbers, health information, or other sensitive records.

Technical and security information. Every web request exposes an IP address and basic request details to the servers that handle it. For SiteSignal's free-scan limits and abuse controls, we store a keyed hash of your IP address, not the raw address. This reduces exposure but does not make the record anonymous. Our hosting, payment, and other providers may separately process or keep IP addresses and request details under their own terms.

We also process operational events, timestamps, job results, error categories, and security signals. Our application logging is designed to avoid recording full fetched page content, cookie values, full AI prompts, and credentials. If something is collected by accident, we limit access to it and remove it.

3. How we use information

We use information to run requested scans; create, store, and deliver reports; verify access; answer questions; process purchases and refunds; keep credit balances; provide support; prevent abuse; investigate incidents; keep the Service reliable; meet legal and accounting duties; and establish or defend legal claims.

We do not publish customer reports or build marketing profiles from security findings. We do not sell personal information or share it for cross-context behavioral advertising.

AI training. We do not use your scan content or follow-up conversations to train AI models. Our AI provider is Anthropic, used through its commercial API. Anthropic's commercial terms say it does not train its models on data sent through the API (inputs or outputs). We do not opt in to sharing this data for training, and SiteSignal does not send feedback on AI answers to Anthropic.

4. Cookies and browser storage

SiteSignal uses one first-party cookie, called ss_session. It is strictly necessary: it keeps your session, links an anonymous free scan to your browser (so you can come back to your results), and keeps you signed in after you verify your email. It is secure, HTTP-only, and limited to SiteSignal's own site. It contains a random token; we store only a hashed copy of that token on our side. A session lasts about 12 hours. Blocking or clearing this cookie may stop you from opening anonymous results.

We do not use analytics tools, advertising cookies, tracking pixels, or third-party scripts on SiteSignal pages, so there are no optional cookies to switch on or off. Fonts are served from our own site.

When you pay, you are sent to Stripe's hosted checkout page. Stripe may use its own cookies there for payment processing and fraud prevention, under Stripe's privacy notice.

5. Service providers and other recipients

We share only what each provider reasonably needs for its role, under appropriate contract terms. Some providers may act on their own for things like fraud prevention, payment compliance, or their own legal duties.

AI requests pass through NCS-ai, an internal NetCore Solutions service that applies cost limits and safety checks and then calls Anthropic. NCS-ai is run by us, not an outside company. It records usage counts and costs, not the text of your questions or answers. Report findings and questions can still identify you even without your email address.

We may also disclose information to professional advisers who owe us confidentiality; to authorities when legally required; to parties reasonably needed to investigate fraud, protect rights, or address security threats; and to a successor in a genuine business transfer, subject to applicable law and appropriate protections. We share information when you ask us to, such as emailing your report. We do not make nonpublic reports publicly available.

6. Retention

The Data Retention Policy explains how long we keep each kind of record, including backups, accounts, and payment records. In short: free results are kept for 7 days and each paid report version for 90 days. Payment records are kept for 7 years. Copies you download or email are outside our control.

7. Your choices and requests

You can email admin@netcoresolutions.com to ask for access, correction, deletion, account closure, or information about our practices. We verify requests in a reasonable way and do not ask for unnecessary sensitive identification. Applicable law decides any mandatory rights, exceptions, deadlines, and appeal rights. We will explain a denial or limitation where required and will not penalize you for using your privacy rights.

Deleting report content ends hosted access to it. Account closure and unused credits are handled together under the Refund Policy; we explain the effects before an irreversible closure where practical. We may keep limited records needed for legal duties, security, disputes, or paid entitlements, as described in the retention policy.

You can run eligible free scans without verifying an email address. Some transactional emails are needed to deliver a purchase or keep your account secure. SiteSignal does not currently send marketing emails; if we ever do, they will include an unsubscribe option.

8. Security and incidents

We use reasonable administrative, technical, and organizational safeguards, including encrypted connections (HTTPS, and TLS to our database), access controls, and hashed sign-in and session tokens. No system is completely secure. If a security incident requires notice under applicable law, we will give the required notice.

9. Children and processing locations

The Service is meant for people 18 or older and is not directed to children. If you believe a child has given us personal information, contact us so we can look into it and take appropriate action.

We operate from the United States, and SiteSignal is intended for customers in the United States. Our providers may process information in the United States or other locations, depending on their infrastructure.

10. Changes and contact

We show changes with an updated effective date and give clear notice of material changes through the Service and, where appropriate, by email. We ask for consent where the law requires it before materially different processing. Posting an updated policy does not by itself allow an incompatible use of information we collected earlier.

Privacy contact: admin@netcoresolutions.com

Operator: NetCoreSolutions.com LLC

Mailing address: NetCoreSolutions.com, PO Box 61, Plainfield, IL 60544