Super Auditor

Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how SuperAuditor, Inc. ("we", "us", "our") collects, uses, and protects information when you use our platform and Chrome Extension (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and company name. We use Supabase Auth for authentication — we never store passwords directly.

Billing Data from GoHighLevel

When you run the Chrome Extension, it pulls billing transaction data from your GoHighLevel account using your existing authenticated session. This includes:

  • Agency wallet transactions (charges, recharges, fees)
  • Sub-account usage summaries (Voice AI, Email, SMS, Phone, Workflow)
  • SaaS subscription details (plan names, prices, statuses)
  • Location names and identifiers
  • Wallet balances and complimentary credits

We do not collect GHL login credentials, OAuth tokens, or personal data of your sub-account end users (patients, customers, etc.).

Usage Data

We collect basic analytics about how you use the Service: pages visited, features used, and error logs. This helps us improve the product. To do that, this site loads a few tools from other companies:

  • Google Tag Manager and Google Analytics: we use them to measure visits and how fast pages load. Google Analytics only uses analytics cookies if you accept them in our cookie banner.
  • Meta (Facebook) pixel: Google Tag Manager also loads this marketing tag for us.
  • Sentry: we use it to catch errors. When an error happens, Sentry may also record a replay of that visit, which can include what was on your screen at the time.
  • Google Fonts: loads one of our fonts from Google's servers.

These companies receive your IP address and browser details when your browser loads their tools. We do not run advertising networks or ad SDKs on this site. The first-party visitor tracking is described in the next section.

Visitor Tracking

When you visit this site, we record the pages you view and the links you click. To do that, we store a random ID in your browser, and we save it along with your IP address and details about your browser, such as the type and version.

This site is part of our family of websites. When you follow a link from one of our websites to another, we may recognise you as the same visitor and link those visits together. If you later give us your email address, for example by signing up or buying something, we may link the visits we recorded to that email address.

We delete visit records (the pages you viewed, the links you clicked, your IP address and your browser details) after 24 months. If you gave us your email address, we keep a note of how you first found us with your contact details: the site and page you first arrived on, the page that sent you there, and any campaign tags in that link.

We do not track visitors in the European Union, the United Kingdom or Switzerland. We also do not track any browser that sends a Global Privacy Control or Do Not Track signal.

On this site we only do this if you accept analytics cookies in our cookie banner. If you decline, we stop recording your visits and remove the ID from your browser.

To ask us to delete what we have recorded about you, contact us at supertools00@gmail.com.

2. How We Use Your Data

  • Provide the Service — Categorize your wallet charges, calculate your cost per minute and your spend per category and per sub-account, and store the resulting report so you can read and share it.
  • Improve the product — Aggregate usage patterns to identify bugs and feature opportunities. We never analyze your billing data for our own business intelligence.
  • Communicate with you — Send account-related emails (password resets, billing receipts). We do not send marketing emails without your consent.
  • Enforce terms — Detect abuse, prevent fraud, and enforce our Terms of Service.

3. Data Storage & Security

Your data is stored on Supabase (hosted on AWS) with:

  • TLS 1.2+ encryption in transit
  • AES-256 encryption at rest
  • Row-Level Security (RLS) — your data is architecturally isolated from other users
  • API keys are stored as SHA-256 hashes — we cannot see your raw keys

See our Security page for detailed technical information.

4. Chrome Extension Privacy

The SuperAuditor Chrome Extension:

  • Does not track your browsing activity outside of GoHighLevel
  • Does not collect or store your GHL password
  • Does not inject ads, trackers, or third-party scripts
  • Does not access data from other tabs or websites
  • Only activates when you explicitly click "Run Audit" on a GHL billing page
  • Only sends data to your SuperAuditor account via your API key

The extension reads authentication tokens from your active GHL session to make API calls on your behalf. These tokens are used in-memory during the audit and are not persisted or transmitted outside of GHL's own APIs.

5. Data Sharing

We do not sell or rent your data. Period.

We only share it in these cases:

  • Analytics and marketing tools: Google, Meta and Sentry receive visit information such as your IP address and browser details, as described under Usage Data.
  • Infrastructure providers — Supabase (database), Vercel (hosting), Resend (transactional email). These providers process data on our behalf under strict data processing agreements.
  • Legal requirements — If required by law, subpoena, or court order.

6. Data Retention

  • Active accounts: Your data is retained as long as your account is active.
  • Deleted accounts: Data is permanently deleted within 30 days of account deletion.
  • Canceled subscriptions: Your data is retained for 90 days after cancellation in case you resubscribe. After 90 days, it is permanently deleted.
  • Visit records: Pages viewed, links clicked, IP address and browser details are deleted after 24 months.

7. Your Rights

You have the right to:

  • Access your data — everything is visible in your dashboard
  • Export your data — available via the Debug JSON download in the Chrome Extension
  • Delete your data — use Settings → Billing & Data → Delete All Data, or email us
  • Close your account — available in Settings at any time

For GDPR, CCPA, or other data rights requests, contact our support team

8. Cookies

SuperAuditor uses minimal cookies:

  • Authentication cookie — maintains your login session (essential, cannot be disabled)
  • Sidebar state — remembers whether the navigation sidebar is collapsed (functional, no tracking)

If you accept analytics cookies in our cookie banner, Google Analytics, the Meta pixel may also set their own cookies in your browser. We do not run advertising networks on this site. The random visitor ID described under Visitor Tracking is kept in your browser's local storage, not in a cookie.

9. Children's Privacy

SuperAuditor is not intended for use by anyone under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect.

11. Contact

Questions about privacy? Contact our support team