Privacy policy

1is4me is an AI growth partner for small and medium-sized businesses. We run the free Business Health Checkup and the audits built from it. In this policy, "1is4me", "we" and "us" mean the team behind 1is4me.com. For anything about your data, write to contact@1is4me.com.

We collect only what you give us and what the service needs to work:

• Account details. When you sign in with Google, we receive your name, email address and a link to your Google profile photo. We do not get your Google password or access to anything else in your Google account. If you create an account with an email address and a password, we store your email address, the name you enter and your password as a one-way hash, never the password itself.
• Checkup answers and business details. Business name, industry, city and country, years in operation, team size, business currency and revenue band; if you choose to give them, last month's exact revenue and your monthly payroll; optional links to your website, Google Maps listing, Instagram and Telegram; and your self-assessment and notes for each of the 15 questions.
• Contact preferences. The phone number and Telegram username you may add at the end of the checkup, so we can reach you about your results.
• Income figures. The monthly income amounts you enter on dashboard.1is4me.com or in the Android app.
• Requests to talk to us. When you use the call-request form: company name, phone number, email address, your question and the page you sent it from. Requests for a human audit or a call made from the dashboard are stored the same way.
• Credits and orders. Your credit balance and a record of every change to it (the free credit, purchases, audits), and for each purchase the pack, amount, currency, status and the payment provider's reference. We never see or store your card details.
• Audit reports. The reports we generate for you, including their PDF files.
• Technical data. Our web server keeps standard access logs: IP address, browser type, the page requested and the time. Your IP address is also used briefly in memory to limit abuse (rate limiting) and is not saved for that. For call requests we store a salted one-way hash of your IP address and your browser type, to spot spam. The Android app keeps a sign-in session record on our server with the app version and platform.
• On your device. Your language choice and an unfinished checkup draft are saved in your browser's local storage, so a page refresh does not lose your answers. Signing in sets a session cookie. We use no advertising or analytics cookies.

If you finish the checkup before signing in, your answers are stored under a random, hard-to-guess ID and linked to your account when you sign in.

• To generate your audit report and its PDF from your answers.
• To run your account: sign-in, credit balance, audit history, the dashboard and your income charts.
• To answer your requests and, because you agree to it in the checkup, to contact you about your results.
• To send sign-in emails: verification and password-reset codes.
• To keep the service safe: stopping spam and abuse, and fixing errors.

We do not sell or rent your data, we do not show ads, and there are no analytics or advertising trackers on our sites.

Your report is written by an AI model from DeepSeek, a third-party AI provider. To generate it, our server sends DeepSeek:

• your business details: business name, industry, city and country, team size, years in operation, currency, revenue band, and the optional exact figures and links;
• your 15 answers with your notes, and the language and type of the report;
• when you update an audit, which answers and figures changed.

We do not send your name, email address, profile photo, phone number, Telegram contact or any other account details. The AI does not open your links; they are passed along as text. Notes are sent exactly as you wrote them, so please keep personal details about yourself or other people out of them.

DeepSeek is a company based in China. It processes this data on its own servers, under its own terms and privacy policy. The PDF file itself is created on our own server.

We use a small number of service providers. Each one gets only what it needs to do its job:

• Contabo (Germany) hosts our server and our MongoDB database, where the data described above is stored.
• DeepSeek writes audit reports from your checkup answers, as described above.
• Google provides "Sign in with Google". Our pages also load fonts from Google Fonts, so your browser connects to Google's servers.
• Resend delivers our sign-in emails (verification and password-reset codes), so it receives your email address and the message.
• Microsoft 365 hosts our contact@1is4me.com mailbox, so it holds the emails you send us.
• Cloudflare runs the DNS for 1is4me.com. Your traffic goes straight to our server, not through Cloudflare.
• Google Sheets, only if we switch it on, can receive a copy of new checkup submissions (business details, answers and contact preferences) in a private spreadsheet for our team.
• A payment provider handles payment when you buy credits. You pay on the provider's side; we receive only the order status and a reference.

We share data with anyone else only when the law requires it.

• Account details, answers, reports, income figures and requests: for as long as your account exists, or until you ask us to delete them.
• After a deletion request: deleted within 30 days.
• Records of paid orders and the matching credit history: for as long as tax and accounting law requires.
• Database backups: kept for 14 days, then deleted automatically.
• Web server access logs: rotated and deleted after about 14 days.
• Email sign-in codes: stored only as a hash and deleted when they expire after 15 minutes.
• Android app sign-in sessions: expire after 30 days unless the app renews them.

• Every connection to our sites and the app uses HTTPS, so your data is encrypted in transit.
• The database cannot be reached from the internet; only our app talks to it.
• Access to personal data is limited to a small number of 1is4me administrators, and admin actions are logged.
• Passwords and one-time codes are stored only as one-way hashes.

No system is perfectly secure, but we work to keep your data protected.

You can ask us at any time to:

• give you a copy of the data we hold about you;
• correct anything that is wrong;
• delete your account and your data;
• stop contacting you about your results.

Write to contact@1is4me.com from the email address you sign in with, or follow the steps on the delete account page. We answer within 30 days. You also have the right to complain to the data protection authority in your country.

1is4me is made for business owners. It is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

If we change how we handle data, we will update this page and the "Last updated" date at the top. For important changes we will also post a notice on the site.

Questions about privacy or your data: contact@1is4me.com.