Data collected by the static MVP is intentionally limited.

What the MVP may collect

• Submitted public store domain.
• Generated demo score bucket and category summary.
• Email address only when a report or update intent form is submitted.
• Basic validation events such as audit start, audit complete, and form intent.

What is not collected

• No store admin credentials.
• No payment credentials.
• No customer records or private store data.
• No login-only pages and no bot-protection bypass attempts.

Local QA behavior

When this site runs locally, forms may save intent records in browser localStorage for QA because Netlify Forms is not available. Local QA data stays in that browser unless cleared.

Future live audits

If live crawling is added, the free audit should still limit pages, avoid expensive model calls, and store only the minimum evidence needed to deliver a self-serve report.