Privacy Policy

FlawPilot is a free website analyzer operated by Logicwind. We scan public-facing signals about a website you submit, generate a report, and (if you opt in) email it to you. We do not require an account. We do not request, store, or transmit credentials. We do not sell data.

The longer version below explains exactly what we collect, why, how long we keep it, and the choices you have.

When you use FlawPilot we may collect the following limited information:

• The URL you submit. Required to run the scan. Stored alongside the resulting report so the shareable result page can show what was scanned.
• Your email address (only if you provide it). Used solely to send you the scan report when it’s ready. You can run a scan without entering an email.
• Standard request data. IP address, user agent, and request timestamp. Used for rate-limiting, abuse prevention, and basic operational logging.
• Analytics events. Anonymous usage events (e.g. “scan submitted”, “report viewed”) via Google Analytics 4. No email addresses, raw URLs, or user identifiers are sent with these events.

• We do not request login credentials, API keys, or any private access to your site.
• We do not install agents or code on your servers.
• We do not scrape pages behind a login or on private networks.
• We do not sell, rent, or trade your information.
• We do not run advertising on the FlawPilot product.

Every FlawPilot scan checks only publicly accessible signals about your site — the same things any visitor, search-engine crawler, or potential attacker can see from the public internet. We do not authenticate, log in, or attempt to bypass access controls. Scans are read-only and respectful of your server, similar in nature to a standard search-engine crawler.

• Scan results and share links are retained for 30 days from creation. After that, share links stop resolving and the underlying report is purged from active storage.
• Email addresses submitted with a scan are retained alongside the scan record for the same 30-day window. We do not add them to any marketing list.
• Operational logs (IP, user agent, timestamp) are retained for up to 90 days for abuse investigation, then deleted on rotation.
• Analytics data is retained per the GA4 default retention setting on our property.

FlawPilot uses Google Analytics 4 to understand aggregate traffic patterns (which pages people visit, where they drop off in the scan flow). GA4 sets first-party cookies in your browser. We do not load advertising cookies or cross-site trackers.

You can opt out of analytics by using a browser-level do-not-track setting, blocking third-party scripts, or installing Google’s opt-out browser add-on.

We share your information only in the following limited cases:

• Service providers we rely on to operate the product (hosting on Vercel, email delivery, GA4). These providers process data on our behalf under their own privacy commitments.
• Legal compliance. If required by law, court order, or to investigate abuse of the service.
• Successor entity. If Logicwind is acquired or merges, scan data may transfer to the successor under the same terms.

We use HTTPS everywhere, encrypt data in transit, and limit internal access to scan results and email addresses to a small set of authorised engineers. No system is perfectly secure, but the dataset itself is intentionally minimal — we do not store credentials, payment details, or content from logged-in sessions on your site.

Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you. Email us at sales@logicwind.com with the URL of the scan or the email address you used and we will respond within a reasonable period.

FlawPilot is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided information to us, contact us and we will delete it.

We may update this policy from time to time as the product evolves. The “Last updated” date at the top reflects the most recent change. Material changes will be reflected here; continuing to use FlawPilot after a change constitutes acceptance of the updated policy.

Questions about this policy or how we handle your data? Reach out at sales@logicwind.com. FlawPilot is operated by Logicwind.