Privacy

Launch updates

If you subscribe, we store your email address, consent, signup source and date for launch news and product updates. Resend manages our subscriber list and delivers these emails. Marketing emails use open and link-click tracking to help us understand engagement and improve future updates. Open counts can be affected by email privacy features and automated scanners. You can unsubscribe through the link included with updates or contact support@cantheyfindme.com. We retain an unsubscribe record to respect your choice; submitting the form again does not automatically restart updates.

Who operates the service

Can They Find Me is operated by Almario Consulting Limited. This notice explains how we use information to provide and manage the service.

Information we use

• Account details: your name, email address, sign-in-provider identity and the security records needed to verify account access.
• Website-review information: the website address, business context you provide, public-page evidence, observations, recommendations and report history.
• Service records: orders, payment and subscription references, report-access permissions and support correspondence.
• Security information: essential session and verification records, limited security events and information processed by our hosting and security providers to protect the service.

When you choose a sign-in provider, it provides the basic identity information you authorise. Your provider’s password stays with that provider. If you create an email/password account, the service stores a password hash rather than a readable password.

Why we use it

We use this information to provide and improve website reviews, deliver reports, verify permissions and payment status, support customers, send account-security messages, prevent misuse and meet applicable record-keeping obligations.

Connected reporting accounts are optional. If you choose to connect an account for reporting, the permissions requested and information used belong to that connection; they are separate from basic sign-in.

Google reporting connections

Connecting Google Search Console or Google Analytics is optional and separate from signing in. Google asks you to approve read-only reporting access. We read your verified Google account email and available property details so you can identify the connection and choose sources for your websites. We do not receive your Google password or permission to change your Search Console or Analytics settings.

For a Search Console property you select, we read search queries, clicks, impressions, click-through rates and average positions, including available country and device breakdowns. For a selected Google Analytics 4 property, we read its website-stream details, reporting timezone, currency and aggregate organic-search figures such as sessions, users, key events and revenue where available. Website and property permissions are checked before a source is linked.

Use, storage and access

We use these figures to display and refresh the connected reporting features in your customer account, including comparisons between reporting periods. Google data is not sold, used for advertising or used to train AI models. Our use and sharing of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Cloudflare processes and stores the connection and report information on our behalf to provide the service. Reporting credentials are encrypted before storage and used only on the server. Website reports are restricted to the customer account that owns the connection. People may view Google data only with your permission, where necessary for security, or as required by law.

Retention, disconnecting and deletion

While a website remains linked, we keep its reporting connection and cached figures so its reports can refresh when the portal is closed. A failed refresh may retain clearly labelled figures from the last successful update.

Use Disconnect in the portal to stop imports through that account and delete its stored reporting credentials and linked cached Google figures from active customer reporting storage. We also attempt to revoke the Google permission. You can remove permission in your Google Account's third-party connections settings. Other account, support and security records follow the retention information below. To request access, correction or deletion of Google-related information or your account, email support@cantheyfindme.com; we may need to verify your identity.

Service providers

Cloudflare provides hosting, database and security services. The sign-in provider you select verifies your identity. Resend manages marketing subscriptions and delivers opted-in launch news, product updates and transactional account emails. Purelymail handles business correspondence. When payments are enabled, Stripe processes payment details and provides payment and subscription references to the service.

These providers may process information outside New Zealand. We use service providers for the functions described here and limit account and report access through service permissions.

Account and payment security

Customer access requires verified sign-in and a second-factor check. Administrators are appointed separately from customer signup. Private report access is tied to the customer account and release permissions.

Payment-card details are entered through the payment provider when that feature is enabled. Do not send card details, passwords, one-time codes or recovery codes to our support email.

Cookies and browser storage

Essential cookies support sign-in, second-factor verification, session security and development-access protection. These information pages do not embed advertising or behavioural-tracking scripts. Signing out ends the application session through the portal’s sign-out control.

Retention and your requests

Account, report and service records are kept for the purposes described here, including providing your service, handling billing questions and meeting legitimate security or legal requirements. Some records may need to be retained after an account is closed.

Contact support@cantheyfindme.com to request access, correction or deletion, or to ask how a particular record is used. We may need to verify your identity before responding or changing private records.

Privacy and security contacts

For privacy questions, contact hello@cantheyfindme.com. For a suspected vulnerability or account-security concern, contact security@cantheyfindme.com.