Quali dati personali raccoglie Trovavio?

Email e hash della password, dati di profilo facoltativi, gli URL e i risultati delle scansioni, e dati tecnici come l'indirizzo IP per la sicurezza. I pagamenti sono gestiti da Stripe: Trovavio riceve solo gli identificativi, mai i dati della carta.

Posso cancellare o esportare i miei dati?

Sì. Puoi cancellare l'account in qualsiasi momento dalla sezione Zona pericolosa del profilo (cancellazione immediata e irreversibile) ed esportare tutti i tuoi dati in formato JSON.

Trovavio condivide i miei dati con terze parti?

Solo con i fornitori necessari al servizio: Anthropic per la generazione AI, Stripe per i pagamenti e Resend per le email, tutti conformi agli standard GDPR per i trasferimenti extra-UE.

Legal

Privacy policy

Last updated: 23 May 2026

Data controller

Trovavio ("the Service"). For any question about how your personal data is handled, write to us at riccardo@trovavio.com.

Data we collect

Account: email address and a hash of the password (never stored in clear text).
Profile: display name, business name (both optional), line of work, chosen avatar, main site.
Usage data: the addresses of the sites you check, scan results, SEO/GEO scores, the list of things to improve.
Payments: handled by Stripe. Trovavio receives only the customer ID and the subscription ID, never the card details.
Technical: IP address for security purposes, access logs.

Purposes of processing

Providing the SEO + GEO audit service.
Sending transactional emails (welcome, password reset, weekly report, reactivation, team invitation).
Automatic weekly monitoring of sites (for users on a paid plan).
Account security (authentication, fraud prevention).

Legal basis

Performance of the contract (art. 6.1.b GDPR) for providing the service. Explicit consent (art. 6.1.a GDPR) for any marketing communication (we currently send no marketing email). Legitimate interest (art. 6.1.f GDPR) for account security.

Data retention

Data is kept until the account is deleted. You can delete your account at any time from the "Danger zone" section of your profile. Deletion is immediate and cannot be undone.

Your rights

Under the GDPR you have the right to: access, rectification, erasure, restriction, portability (export all your data as JSON from the "Data and privacy" section of your profile), and objection. To exercise any of these, write to us at riccardo@trovavio.com.

Data shared with third parties

Anthropic (USA): for generating AI content (titles, descriptions, schema). We send only the audit data that is needed, never passwords or personal information.
Stripe (Ireland/USA): for handling subscriptions and payments.
Resend (USA): for sending transactional emails.

All providers meet the GDPR standards for transfers outside the EU (standard contractual clauses).

Frequently asked questions

What personal data does Trovavio collect?

Your email and a hash of your password, optional profile details, the addresses and results of your scans, and technical data such as the IP address for security. Payments are handled by Stripe: Trovavio receives only the identifiers, never the card details.

Can I delete or export my data?

Yes. You can delete your account at any time from the Danger zone section of your profile (immediate and irreversible) and export all your data as JSON.

Does Trovavio share my data with third parties?

Only with the providers the service needs: Anthropic for AI generation, Stripe for payments and Resend for emails, all meeting the GDPR standards for transfers outside the EU.