Data processing

• Your account. For your own account details, billing and how you use SlapMyWeb, we decide what is collected and why, so we act as the controller. The privacy policy covers this.
• Data you bring for your clients. When an agency uses SlapMyWeb for its clients — audits, reports, connected Search Console, GA4 or Bing data, and leads captured through its widget — the agency decides what goes in and why. For that data the agency is the controller and we act as its processor.

• Audit results for client websites: URLs, page content we fetch, screenshots, scores and issues.
• Reports, shared links and scheduled report emails you set up.
• Search Console, GA4 and Bing data for client sites you connect.
• Leads captured through your lead widget: name, email, company, website and phone, as the visitor enters them, plus any follow-up emails you turn on.
• Team members you invite to your workspace.

The outside services that receive this data, what each receives and when, are on the subprocessors page. Our controls are described on the security page.

Email info@slapmyweb.com with your company name, your SlapMyWeb account email and the plan you are on. We will send our DPA for review and signature. If your company uses its own DPA template, attach it and we will review it.

If someone asks you to access or delete their data held in SlapMyWeb, you can delete scans from your scan history. For anything else, such as removing a captured lead, email info@slapmyweb.com and we will help.