Last updated 8 October 2026

Privacy

Fervani opens a web page, looks at it, and writes a report. This page explains who is responsible for your data, what is collected, why, who else handles it, how long it is kept, and the rights you have. It describes what the product actually does today.

Who is responsible for your data

The data controller is Eugen Lyubinskyi, a sole trader in the United Kingdom trading as Fervani (“we”, “us”). Our postal address is Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset BH16 6FA, United Kingdom. For anything about your data, email privacy@fervani.com.

What we collect

• Account details. Your email address and, if you set one, a password, which is stored in hashed form by our authentication provider — we never see it. If you sign in with Google, Google shares your email address and basic profile details such as your name and profile picture.
• The web addresses you submit for review.
• What we capture from those pages. We open each page in a real browser, take desktop, mobile and full-page screenshots, and read its visible text, title, description, headings, calls to action and loading measurements. Your report stores the screenshots, the measurements and passages quoted from the page.
• Usage records, such as how many reviews you have run each day, so plan limits can be applied.
• Subscription and agreement records: your plan, subscription status, Stripe customer reference, which version of the Terms you accepted and when, and which version of this Privacy Policy you acknowledged and when.
• Messages you send us, and our replies.
• Technical data, such as your IP address and browser information, which our hosting and security providers process when you use the site and when we check that sign-ups are not automated.

We count page visits with Vercel Web Analytics, which uses no cookies and does not identify you. We do not use advertising trackers, we do not build a profile of your browsing, and we do not sell your data.

Why we use it, and our legal basis

• To provide Fervani — creating and running your account, performing reviews, storing and showing reports, sending sign-in and account emails, and managing your subscription. Legal basis: performing our contract with you.
• To keep the service fair, secure and available — applying limits, preventing fraud, abuse and automated sign-ups, and keeping backups. Legal basis: our legitimate interest in running a secure and reliable service.
• To understand how the site is used — counting visits, which pages are viewed and where visitors arrive from, in aggregate. Legal basis: our legitimate interest in improving the site.
• To keep business records — payment, tax and agreement records. Legal basis: our legal obligations, and our legitimate interest in being able to show what was agreed.
• To answer you when you contact us. Legal basis: our legitimate interest in replying, or our contract where it concerns your subscription.

We do not use your data for marketing.

Personal data on pages you review

A public page can contain information about other people, such as names or photographs. We process only what any visitor can already see, only to produce the review that was requested, and it is stored in that report like the rest of the page content. Our legal basis is our legitimate interest in providing the review. If you appear on a page someone has reviewed and want that report removed, email privacy@fervani.com.

Who else handles it

We use the following providers. They process data on our instructions, except where noted.

• OpenAI (API) — the text and desktop and mobile screenshots of the page being reviewed are sent to OpenAI to produce the analysis. API data is not used to train OpenAI's models by default. We disable saved API responses, but OpenAI may retain content for abuse monitoring for up to 30 days, or longer where required by law. See OpenAI's data controls.
• Supabase — database, sign-in and file storage for your account, reports and screenshots.
• Vercel — hosts the website, counts page visits without cookies (Vercel Web Analytics), and runs the isolated browser that opens and captures the pages you submit, in a single-use machine that is deleted after each review.
• Hugging Face — runs the service that manages reviews and sends each capture for analysis.
• Stripe — processes payments and provides the billing portal. Stripe receives the billing details you enter on its pages and also uses payment data as an independent controller, for example to prevent fraud; Fervani stores only Stripe references and subscription status.
• Cloudflare — checks that sign-ups and sign-ins come from a person rather than a bot, using signals such as your IP address and browser characteristics.
• Resend — sends account confirmation, sign-in and password-reset emails.
• Google Sign-In — only if you choose to sign in with Google.
• ImprovMX — forwards email sent to our fervani.com addresses to our inbox.
• Microsoft OneDrive — stores encrypted backups of our database and stored files.

We may also disclose data where the law requires it, or to protect our rights or someone's safety.

Transfers outside the UK

Some of these providers store or process data outside the United Kingdom, including in the United States and the European Union. Where they do, the transfer is covered by UK adequacy regulations — including the UK–US data bridge for providers certified under it — or by the International Data Transfer Agreement or UK Addendum included in the provider's data processing terms.

Reports are reachable by link

Every finished report gets a long random address such as /r/8eM95TjXjKRXN_Bm. Unless the report is private, anyone holding that link can open it and its screenshots without signing in — that is what makes reports shareable. The address cannot be guessed and reports cannot be listed or searched, but treat the link itself as the secret. On Pro you can make a report private, so only you can open it.

How long we keep it

• Account details, reports and screenshots — until you delete your account, or earlier if you ask us to remove a report.
• Temporary review data — the isolated browser's machine is deleted as soon as the capture is finished, and the review service clears its working copy within about 15 minutes of the review finishing.
• Payment, subscription and agreement records — as long as UK tax and accounting rules require, currently at least 5 years after the 31 January deadline for the relevant tax return.
• Emails with us — up to 2 years after our last contact.
• Backups — encrypted daily copies of the database and stored files, such as screenshots, are kept for up to 30 days and then deleted automatically. Data you delete can remain in a backup until that backup expires.
• Technical logs — kept by our hosting, database and security providers for short periods set by their own policies.

Removing your data

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• ask us to restrict how we use your data;
• receive data you gave us in a portable format, where we process it to perform our contract with you;
• object to processing we carry out on the basis of our legitimate interests.

To use any of these rights, email privacy@fervani.com. It is free, and we will reply within one month. We may need to confirm your identity first, usually by asking you to write from the email address on your account.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

Cookies

We only use cookies that are strictly necessary: the session cookies that keep you signed in and protect your session. When you sign up or sign in, Cloudflare's check may also store or read information in your browser to confirm you are not a bot. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent. If that ever changes, we will ask first.

Security

Data is encrypted in transit, access to our systems is restricted, pages are opened in an isolated browser that has no access to our database or keys, stored screenshots are private, and backups are encrypted. If a personal data breach occurs, we will report it to the Information Commissioner's Office within 72 hours where the law requires, and tell you without undue delay if it is likely to put your rights at high risk.

Automated decisions

Fervani scores web pages, not people. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

Children

Fervani is not intended for anyone under 18, and we do not knowingly collect data from children.

Auditing pages you do not own

Fervani only reads what any visitor to a public page can already see. It does not sign in, fill forms, or attempt to reach anything behind a login. Addresses that resolve to private networks are refused.

Changes

If this policy changes, the date at the top changes with it, and we will tell account holders about significant changes by email. Questions go to privacy@fervani.com. See also our Terms.