Privacy Policy

Spendjot Ltd, a company registered in England and Wales (company number 16431337), is the controller of personal data processed through Purlock. Our registered office is 86-90 Paul Street, London, England, EC2A 4NE. For anything about your data, email support@spendjot.app.

Our legitimate interests are running a useful free service safely, keeping it fair for everyone and improving it. We don't make decisions about you that have legal or similarly significant effects based only on automated processing.

Scans read public web pages. Those pages can include personal data that their owner chose to publish, such as a contact name, email address or phone number. We process it only as part of the page text, to check the website for problems, and we don't use it to contact or profile anyone.

If you own a website that was scanned and want the results deleted, email us and we'll remove them. You can also stop future scans by blocking PurlockBot in your robots.txt, as explained on the PurlockBot page.

To find facts such as prices, trial lengths and refund windows, we send the text of scanned pages to Anthropic, the company behind Claude, through its API. We don't send your name, email address or IP address with it. Under Anthropic's commercial terms, this data isn't used to train its models, and Anthropic keeps it only for a limited period for safety and abuse monitoring.

We use these providers to run Purlock. They process data only on our instructions, under data processing terms:

When you sign in with Google or GitHub, they share your basic profile with us under their own privacy policies. We'll update this list before we start using a new provider that handles personal data. We may also disclose data if the law requires it, to protect our rights or our users, or to a buyer of our business, who would be bound by this policy.

Some providers process data outside the UK and EEA, mainly in the USA. Where that happens, we rely on adequacy regulations (including the UK and US data bridge where the provider is certified) or on standard contractual clauses with the UK addendum.

We only use cookies that Purlock needs to work, so we don't need your consent for them. We don't use advertising or analytics cookies.

Everything is encrypted in transit. Our database can't be read through public interfaces, only by our own servers. We never store IP addresses in readable form, there are no passwords to leak, and full scan results are only shown to their owner. No system is perfectly secure, but we'll tell you and the regulator promptly if a breach puts your data at risk.

Under UK and EU data protection law, you can ask us to:

• give you a copy of your data, or send it to you in a portable format;
• correct anything that's wrong;
• delete your data or your account;
• restrict how we use your data, or object to uses based on legitimate interests.

Email support@spendjot.app and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you live in the EU. We'd appreciate the chance to sort it out first.

Purlock isn't meant for anyone under 16, and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.

We'll update this policy when Purlock changes, and change the date at the top of the page. For material changes, we'll tell account holders by email or in the app before they take effect.

Privacy questions and requests: support@spendjot.app. Post: Spendjot Ltd, 86-90 Paul Street, London, England, EC2A 4NE.