Privacy Policy

Last updated: May 2026

AutoScore is operated by Works. (works.is). This policy explains what data we collect, why, and how we handle it.

What we collect

• Website URL — entered by you to run a scan. Used to generate your automation report.
• Scan data — when you run a scan, we log the domain, your automation score, the top gaps identified, and the date of the scan. This is stored in our database to help us improve the service and understand usage patterns.
• Email address — only if you choose to enter it (either to receive your full report or to unlock additional results). If provided, your email is stored alongside your scan data and used to send your report. If your score indicates significant automation gaps and your email is from a business domain, we may follow up to offer our services.
• Contact form data — name, agency name, email, and website if you submit the white-label enquiry form. Used to respond to your enquiry.
• Analytics data — if you consent, we use Google Analytics (via Google Tag Manager) to collect anonymous usage data (pages visited, session duration, device type). No personal data is linked to analytics.

Legal basis (GDPR)

• Scan data logging: legitimate interest — to operate and improve the service.
• Email for report delivery and follow-up: legitimate interest and your explicit request when submitting your email.
• Contact form: legitimate interest to respond to business enquiries.
• Analytics cookies: consent — only set after you click Accept in the cookie banner.

Cookies and local storage

We use no tracking cookies unless you consent. Your cookie preference is stored in your browser's local storage (not a cookie) so we remember your choice without tracking you. If you accept cookies, Google Analytics sets cookies to measure traffic. You can withdraw consent at any time using the Manage cookies link in the footer.

Data sharing

We do not sell your data. We share data only with the following processors:

• Brevo — used to send scan report emails. Your email is transmitted to Brevo solely for delivery purposes.
• Google Analytics — anonymous usage data only, if you have consented.
• Cloudflare — our infrastructure provider. Scan data is stored in Cloudflare D1, a serverless database.

Data retention

Scan logs (domain, score, detected gaps, and email if provided) are retained for up to 12 months, after which they are deleted. Contact form submissions are retained only as long as needed to respond. Analytics data is retained per Google's standard policy (26 months).

Your rights

Under GDPR you have the right to access, correct, or delete your data. To request deletion of your scan data or email, contact us at [email protected] with the domain you scanned.

Contact

Works. · works.is · [email protected]