Short version: we never get access to your store, we only read what's already public, and your account runs on Cloudflare with no passwords to steal.
We never touch your store
- No app install, no admin login, no API keys to your store.
- We read your public catalogue and pages, the same way a search engine does.
- Your Foreanswer site lives on a subdomain you point to us with one DNS record. Remove the record and it's disconnected.
Sign-in
- Google sign-in only. We never see or store a password.
- Sessions are random tokens in secure, HTTP-only cookies; we store only a hash of each token.
- Every business is private to its members. Owners can invite viewers, who can read but not change anything.
Where it runs
- The app, database and background jobs run on Cloudflare (Workers, D1, R2), with TLS everywhere.
- Answers we collect are stored append-only, so measurement history can't be quietly edited.
- Encrypted nightly backups, with regular restore tests.
- Our crawler refuses private and internal network addresses, so a page can't trick it into reaching systems it shouldn't.
What AI providers see
To draft guides and run checks, we send your public product facts and your buyers' questions to AI providers (Google Gemini, OpenAI). We don't send your customers' personal data, because we never have it.
Report a problem
Found a security issue? Email [email protected]. We reply within 2 working days.