Privacy policy

Who we are

Ambarverde ("we", "us") is a website launch readiness service operated from the United Kingdom. Contact for anything in this policy: hello@ambarverde.com.

What we collect

• Account details: your email address, an optional name, and a securely hashed password. We never store your password in readable form.
• Scan data: the website URLs you submit and the results of analysing the publicly available content of those websites (scores, findings and generated recommendations).
• Anonymous scans run from our homepage store the submitted URL and results, and a temporary record of your IP address used only for rate limiting.
• A session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

The Ambarverde Chrome extension

The Ambarverde Pre-Live Scanner extension lets paid users scan pages that are not publicly reachable, such as sites on localhost, staging behind a login, and password-protected client previews. It only runs when you click its toolbar icon on a tab you have chosen to scan; it does not read pages in the background.

• Website content: when you click Scan this page, the extension captures the rendered HTML of that one tab, together with the URL, its response time from your browser's Performance API, and the same-origin robots.txt and sitemap.xml if they exist. That bundle is sent to ambarverde.com/api/scan/snapshot and filed as an audit against your account. It is not shared with anyone else.
• Authentication information: your Ambarverde connect token (a string starting with avx_) is stored in Chrome's built-in sync storage on your device and sent as a Bearer token to authenticate scan requests. Only its SHA-256 hash is stored on our servers. You can regenerate or revoke it at any time from the Extension page in your dashboard.
• What the extension does not do: it does not read pages when you are not scanning, does not track your browsing history, does not log clicks or keystrokes, does not contact any server other than ambarverde.com, and does not use remote code.

How we use it

• To run scans, build your reports and track your score over time.
• To generate plain-English summaries and advisor answers, scan results are processed by Anthropic's Claude API. Scan results describe your website, not you.
• To email you things you have asked for, such as password resets and, on paid plans, monitoring reports.

What we do not do

• We do not sell or rent your personal data.
• We do not send marketing email you have not opted into.
• Scans launched from ambarverde.com only reach content that is publicly reachable on the web. Scans launched from the Chrome extension only touch the tab you have explicitly chosen to scan.

Data retention and your rights

Your account and scan history are kept while your account is active. Email us to access, correct or delete your data; deletion removes your account, websites and scan history. Under UK GDPR you also have the right to complain to the ICO.

Changes

If this policy changes materially we will note it here with a new date at the top.