Privacy policy

The auditor processes a submitted public URL and public web responses only for the requested audit.

Controller

The publisher and data controller is ARAMAN ADVERTISING DMCC, trading as ASTUDIO, 403, 1 Lake Plaza, Cluster T, JLT, Dubai, United Arab Emirates.

Data and purpose

The service retrieves the submitted public HTTPS page, its redirects, robots.txt, a declared or default sitemap, llms.txt, and llms-full.txt. It processes response status, content type, bounded response content, metadata, and technical evidence to return the audit. Do not submit secrets, signed URLs, personal data, authenticated pages, or private-network addresses.

Storage and retention

Version 1 has no accounts, database, object store, analytics replay, or cross-user result cache. Audit URLs, query strings, response bodies, filenames, headers, and result content are not written to application logs. In-memory content is discarded when the request completes. Signed checkpoint tokens expire after 15 minutes. Edge rate-limit identifiers remain only for the one-minute bucket window.

Operational application logs contain event category, status, latency, request count, byte count, and aggregate check counts. They are retained for up to 30 days for security and reliability, then deleted or overwritten.

Infrastructure and transfers

Infrastructure, edge-network, hosting, and security-monitoring providers process limited operational data on ASTUDIO's behalf. Processing may occur in the United Arab Emirates and other locations where those providers operate. ASTUDIO uses contractual and technical safeguards for cross-border handling.

Host processing

ChatGPT, OpenAI, or another host may process your conversation and tool results under that host's own terms and privacy policy. The auditor does not sell data, use it for advertising, or use submitted content to train models.

Your contact and deletion route

Use ASTUDIO's public contact form for privacy questions or deletion requests. Include the approximate request time and do not include the audited URL if it is sensitive. Because audit content is not stored by this service, there may be no audit record to delete after completion.