Legal
Privacy Policy
Effective October 17, 2026
What Vetted Authority collects, what it doesn't, how our privacy-focused analytics work, and how that will change as the platform grows.
What we currently collect
Vetted Authority does not currently have user accounts, authentication, or payments, and does not use any advertising service or advertising pixel. The free tools on this site (like the calculators under /tools) run entirely in your browser — the numbers you enter are never sent to our servers or to our analytics provider. Standard web hosting logs (IP address, requested URL, timestamp, user agent) are generated by our hosting infrastructure for security and reliability, as is true of virtually any website; those logs are separate from the website analytics described below.
Website analytics
We use Umami Cloud, a privacy-focused analytics service, to understand how the site is used so we can improve our content and tools. It records page visits (the page address, the referring site, campaign tags, browser, device type, screen size, language, and approximate location such as country or city) and a small set of interactions we have chosen to measure, such as clicking through to a vendor's website or a source, choosing a tool, starting a calculator, finishing an Opportunity Scorecard, or clicking our contact email link. Those interaction events carry only fixed labels — for example which page or tool, or a broad score range — never anything you type. Specifically, analytics never receive calculator inputs or results, Opportunity Scorecard idea names, customers, problems or ratings, Product Wizard prompts, research, evidence, or generated content, or the text of any email you send us. Page addresses are stripped of their query strings (other than standard utm_ campaign tags) before they are sent. Umami Cloud is configured not to use tracking cookies; it distinguishes visits with a session value its servers derive from request information such as IP address and browser user agent, and according to Umami it does not track visitors across websites. If your browser sends a Do Not Track signal, the analytics script sends nothing at all. Analytics only report visits to vettedauthority.com itself.
Software Stack Audit requests
If you send the Software Stack Audit intake or waitlist form, we collect what you enter: your email address, your name if you give it, what the business does, its team size, which audit you are interested in and, on the intake form, the tools you pay for and what you want from the audit. Our server forwards the form to the service we use to receive it, which delivers it to our inbox; that service handles the data under its own privacy terms. We use your answers only to reply to you and to prepare your audit. We do not sell them, share them with anyone else or use them for advertising, and we do not add you to the price-alert newsletter. None of it is sent to our analytics provider: the only analytics event is a count of intake forms sent, with nothing you entered attached, and our server does not log your answers. Payment, when you buy an audit, happens on the checkout provider's own page, never on this site. Do not include passwords, API keys or other credentials in the form. To have your request deleted, email us through the Contact page.
Product Wizard
Product Wizard (at /create) is different from the browser-only tools above: the objective and product-opportunity details you enter are sent to our servers so we can process them, and from there to whichever AI provider (Google Gemini and/or OpenRouter, depending on what's configured) and research provider (Firecrawl, for live web search) are active at the time. Those providers handle that text under their own privacy and data-retention terms, not ours — we don't control or guarantee how long they retain it. Your Wizard progress itself (objective, generated opportunities, validation results) is saved only in your own browser's local storage, never in a database we operate — clearing your browser storage deletes it. Don't enter anything you'd consider confidential, since it does leave your browser and pass through third-party AI/research providers before an answer comes back.
What may change
As the platform grows to include accounts, a working marketplace, or additional product-usage analytics (for example, measuring which Product Wizard steps people complete), this policy will be updated before those features launch — not after — and will describe exactly what's collected, why, and how to opt out where applicable. Our analytics are built to measure behavior, not personal identity, and to stay provider-neutral (no vendor lock-in).
Children's privacy
Vetted Authority is not directed at children under 13, and we do not knowingly collect personal information from them.
Questions
See the Contact page.