Privacy
Last updated 7 September 2026
Agent Ready Bot is operated by Robots Drinking Tea LLC. This page explains what we collect, who else handles it, and how long we keep it. It is written to be read, not to be survived.
What we collect
- Your account
- Your name and email address. If you sign in with Google, we receive your name and email from Google — nothing else. Company name and profile picture are optional and only exist if you add them.
- Sites you scan
- The address you submit, and the publicly accessible pages we fetch from it: their HTML, response headers, timings, and screenshots of how they render.
- Your network address
- Used to limit how many scans can be started from one network, and for nothing else.
- Product events
- Coarse counts such as "a scan finished", so we can tell whether the product works.
- Your purchases
- If you buy a report, we keep a record of the payment as Stripe describes it to us — the payment reference, the amount, the billing country and the email you gave Stripe. Never the card.
- Business outreach
- For a complimentary business scan, we may store a publicly listed business email, company name, website and the public sources used to verify them. The address is used to send and securely claim that scan, record delivery status, note when the link in that email is first opened, and honor suppression requests. An open is a weak signal and not a fact about a person: mail security systems routinely open links automatically, before anyone has read anything. It is never treated as a registered account until its owner verifies it.
What we do not collect
- • Passwords. There are none — we use one-time email links and Google sign-in, so there is no password to store or leak.
- • Payment card details. Stripe handles the payment and keeps the card; we are told only that it succeeded, along with your billing country and the email you gave them.
- • Anything behind a login on a scanned site. We never sign in, never submit forms, and read only what any visitor can read.
- • Advertising or tracking cookies. The only cookie we set is the one that keeps you signed in.
The part worth reading twice
To tell you what an AI assistant makes of a site, we have to show the site's text to one. Page text we fetched is sent to Anthropic's API for that analysis, and their answer becomes part of your report. This applies to the public pages of whatever site was scanned — including, if you scanned it, your own.
We never send your account details to Anthropic, and we never send anything from a page that required signing in, because we never sign in.
Who else handles your data
We are one person and a small stack. These are the services that process data on our behalf, and what each one does:
| Service | Purpose | Where |
|---|---|---|
| Supabase | Database, accounts, file storage | Canada (Montreal) |
| Vercel | Serves this website | Global edge network |
| Amazon Web Services | Runs the scanner | United States |
| Upstash | Queue of pending scans | United States |
| Resend | Delivers your sign-in emails | United States |
| Zoho | Delivers our operational email and an approved business outreach campaign | United States |
| Stripe | Takes payment for a report | United States |
| Anthropic | Reads scanned page text to judge what an AI agent would understand | United States |
| Cloudflare | DNS and email routing | Global |
| Only if you choose to sign in with Google | Global |
We do not sell your data, and we do not share it for advertising. There is no advertising here to share it with.
How long we keep it
- • Free scans: the fetched pages and screenshots are deleted after 90 days. The score and findings remain so your report keeps working.
- • Paid reports: the evidence is kept, because it is what you paid for.
- • Your account: kept until you delete it. Deleting your account removes your profile, your sites and your scans.
- • A fingerprint of your email address, after deletion: we keep a one-way fingerprint — a SHA-256 digest of your address, not the address itself, and we cannot read your address back out of it. It exists so that deleting an account and signing up again cannot be used to reset the one free scan per account. It also means the same address cannot register again for 30 days. We keep nothing else about a deleted account.
- • Payment records: kept, including after you delete your account, with your name and email removed from them. A purchase is something both sides may need to prove later — a refund, a card dispute, our own bookkeeping — and a record that vanishes on request is no use to either of us.
Your choices
You can see everything we hold about you on your dashboard, correct your name and company on your account page, and delete your account entirely — which deletes your scans with it. If you would rather ask us than click, write to us.
If your site was scanned
Anyone with an account can scan any public site, and we do not verify that they own it. We read only public pages, at no more than one request per second, and identify ourselves in every request. Our crawler page explains exactly what we request and how to block us.
Children
This is a tool for businesses. It is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes
If this policy changes in a way that matters, we will update the date at the top and tell account holders by email.
Contact
The data controller is Robots Drinking Tea LLC, a Florida limited liability company, in the United States.