Legal
Privacy Policy
Last updated 27 September 2026
1. Who is responsible
The controller responsible for personal data processed on this website (saltnsweet.masudslabs.com) is:
Shahzad Masud, trading as Masuds (sole proprietorship)1189 North California AvenueChicago, Illinois 60648United StatesEmail: shahzad@masudslabs.comFor any privacy question or request, write to the email address above or use the contact form in our Impressum. We answer within 30 days.
2. In short
- We don't use analytics, advertising or tracking cookies.
- We don't sell or share your personal information for advertising.
- The Instant Audit works on public web pages. It doesn't need any personal data from you.
- If you unlock a full report, we keep the answers you give us so we can follow up, and only with your consent.
3. Visiting this website
- What
- Technical data your browser sends with every request: IP address, browser and device type, the page requested, the referring page and the time. Our hosting provider processes this to deliver the site and may record it in server logs. Technical error reports (for example, a page failing to load) may also be sent to our hosting provider.
- Why
- To deliver the website securely, keep it running and stop abuse.
- Legal basis
- Our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)).
- How long
- Server logs are deleted by our hosting provider on its standard schedule, typically within 30 days.
Fonts. All fonts are served from our own website. Your browser doesn't contact Google or any other font service when you visit.
4. The Instant Audit
- What
- The product page address you enter. Our server fetches that public page, its robots.txt and llms.txt, and checks them. To limit abuse we count how many audits come from each visitor, using a one-way hash of your IP address; the IP address itself is not stored.
- Why
- To produce the audit report, and to protect the service from misuse and runaway costs.
- Legal basis
- Our legitimate interest in providing and protecting the service (GDPR Art. 6(1)(f)).
- How long
- Audit reports are cached for up to 1 hour and AI reviews for up to 24 hours, so the same page isn't re-checked on every visit. Usage counters expire after 1 hour (audits) or 24 hours (AI reviews).
AI review. After you unlock a report, we send the audited page's public content, the rule-based findings and the link to its main product image to an AI model through Lovable AI, which routes the request to a model provider such as Google. No personal data about you is included. The model's answers appear in your report.
5. The report unlock form
- What
- Your email address, role, monthly revenue range and main goal, plus anything you choose to add: name, company, page traffic, marketing channels, who makes changes to your store, timeline and your biggest challenge. We also store the audit report you unlocked alongside your answers.
- Why
- To unlock the full report for you, and to contact you about it and about SaltnSweet's services. Your answers help us understand which fixes matter most for a business like yours.
- Legal basis
- Your consent, given with the checkbox on the form (GDPR Art. 6(1)(a)), and steps you ask us to take before a possible contract (Art. 6(1)(b)). You can withdraw consent at any time by emailing us; this doesn't affect processing that happened before.
- How long
- Until you withdraw your consent or ask us to delete it, and at most 24 months after our last contact with you.
Your answers and the report are emailed to our team through Lovable's email service. We may also pass them to a customer-relationship or spreadsheet tool we use to manage enquiries. We don't email the report to you; you download it directly from the page.
6. The contact form
- What
- Your name, email address and message, sent through the form on our Impressum page.
- Why
- To answer your message.
- Legal basis
- Our legitimate interest in answering enquiries, and steps you ask us to take before a possible contract (GDPR Art. 6(1)(f) and (b)).
- How long
- Until your enquiry is resolved, and at most 24 months after our last contact with you, unless the law requires us to keep it longer.
The message is emailed to us through Lovable's email service, with your address set as the reply-to so we can answer you directly.
7. Cookies and browser storage
We don't set analytics or advertising cookies. When you unlock a report, we save a small unlock code in your browser's local storage so you don't have to fill in the form again for later reports. It contains no personal data and isn't used for tracking. It's strictly necessary for the feature you asked for, so it doesn't need separate consent. You can delete it at any time by clearing this site's data in your browser.
8. Service providers
We use these providers to run the site. They process data on our behalf and under their own security and privacy terms:
- Lovable (Lovable Labs Incorporated): website hosting, the AI gateway and email delivery (lead notifications and contact messages).
- Cloudflare (Cloudflare, Inc.): the network and caching layer the site runs on.
- Google (Google LLC / Google Ireland Ltd.): AI models reached through Lovable AI. Only public page content is sent.
- Other AI model providers that Lovable AI may route requests to, such as OpenAI. Only public page content is sent, never your personal data.
9. International transfers
We are based in the United States, and our providers process data in the United States and other countries. For data from the European Economic Area, the UK or Switzerland, transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
10. Your rights
Depending on where you live, you have the right to:
- know what personal data we hold about you and get a copy of it;
- have it corrected or deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw your consent at any time;
- not be treated differently for using these rights.
To use any of these rights, email shahzad@masudslabs.com. If you're in the EU or UK, you can also complain to your local data protection authority.
This website isn't directed at children under 16, and we don't knowingly collect their data.
11. Changes to this policy
We update this policy when the website or the way we handle data changes. The date at the top shows the latest version.