Privacy Policy

1. Who we are

AX Rush is operated by Warp Valley Inc. (“Warp Valley”, “we”, “us”). The service, at axrush.com, measures how ready websites are for AI agents and helps site owners improve that readiness.

For anything in this policy (questions, requests, complaints), write to info@axrush.com. That address is read.

2. Information you give us

• Your email address and, if you use one, a password. Passwords are stored only as a cryptographic hash by our authentication provider; we cannot read them.
• The name of your organization, the domains you add, and the settings you choose: scan schedules, alert rules, industry corrections.
• Anything you send us directly, such as email to info@axrush.com.

3. Signing in with GitHub or Google

If you sign in through an identity provider such as GitHub or Google, we receive the profile the provider shares: your name, email address and avatar. We never see your password for that provider.

When a provider has verified your email address, the sign-in is linked to any existing account with the same address, so you remain one user rather than becoming two.

4. Information collected automatically

Our servers keep ordinary request logs: IP address, user agent, timestamps and the path requested. We use them to keep the service secure, to enforce rate limits, and to investigate abuse; for example, the anonymous scanner is rate-limited by IP address.

We use only essential cookies: the session cookies that keep you signed in. There are no advertising cookies, no third-party analytics scripts, and no cross-site tracking on this site.

5. Data about scanned websites

When a scan runs, we fetch publicly accessible resources of the scanned domain (pages, robots.txt, published files, response headers) with a small, bounded number of requests, the same way any visitor or crawler could. We store the resulting measurements, and excerpts of what was fetched, to produce the report and its history.

This is data about websites, not about people. Where a published page happens to contain personal data, we process it only as the site itself published it, and only to measure that site.

Scans submitted through the anonymous public scanner produce reports that are public and may be indexed by search engines. If you operate a website and want its public report removed, write to info@axrush.com and we will remove it.

6. AI analysis

Parts of the service use large language models: naming the page templates a site is made of, identifying what kind of site it is, and similar analysis. For this, excerpts of publicly fetched site content and counts derived from it are processed by third-party model providers (currently Anthropic) under API terms that do not permit the provider to train models on that data.

7. Email

We send transactional email only: account confirmations and the alerts you configured. Delivery runs through Resend, and we record delivery status so an alert that bounced is not counted as one that arrived. We do not add you to marketing lists.

8. Payments

Paid subscriptions are processed by Stripe. Your card details go to Stripe and never touch our servers; what we keep is your plan, its status, and billing history.

9. Service providers

We share personal data only with the providers that run the service, each receiving what its role requires and nothing more:

• Supabase: database and authentication
• Vercel: hosting and request logs
• Resend: email delivery
• Anthropic: AI analysis
• Stripe: payments
• GitHub and Google: sign-in, when you choose them

Processing happens in the United States and the European Union. Where data crosses borders, it does so under recognized safeguards such as standard contractual clauses.

10. How we use information

To provide and operate the service, to keep it secure and fairly rate-limited, to send the messages your settings ask for, and to understand and improve how the product works.

We do not sell personal data, and we do not use it for advertising.

11. Retention

Account data is kept while your account exists. Scan history is the product (a trend needs a series), so measurements are kept while the site remains in your account. Public reports are kept so their URLs keep meaning something. Request logs are kept briefly.

When you delete your account, we delete the personal data associated with it, except what the law requires us to keep, such as billing records.

12. Your rights

Depending on where you live, including under the EU and UK GDPR and certain U.S. state privacy laws, you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict some processing.

Write to info@axrush.com to exercise any of them; we will need to verify that you are you. You also have the right to complain to your data protection authority.

13. Security

Data is encrypted in transit and at rest. Access inside the service is enforced row by row at the database, and credentials are scoped to the least each component needs. No system is perfectly secure; if you believe you have found a vulnerability, write to info@axrush.com.

14. Children

The service is not directed to anyone under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

When this policy changes, the new version is published here with its date. If a change materially affects account holders, we will email the address on the account before it takes effect.

16. Contact

Warp Valley Inc.

info@axrush.com