Privacy Policy

Overview

RWC Guide is operated by IdentityRecord and is the public category site and Known Business Check diagnostic for Real World Commerce. We collect a small amount of personal data — primarily an email address when you unlock a full report or contact us — and a larger amount of business-level data about the website you ask us to diagnose. This page describes what we collect, how we use it, who we share it with, and how you can have it removed.

What we disclose

The items below are the mandatory disclosures for RWC Guide:

Lightweight website crawling

When a visitor submits a website to the Known Business Check, RWC Guide performs a lightweight server-side crawl of the submitted domain. The crawler fetches the homepage and a small number of internal pages (about, services, contact, FAQ, reviews, menu, booking, locations) up to a strict budget. No third-party domains are fetched as part of the diagnostic, and the crawl runs from RWC Guide servers rather than the visitor's browser.

robots.txt respect

The crawler honors the submitted site's robots.txt rules. If robots.txt disallows the relevant paths, the affected pages are skipped and the diagnostic notes the gap in the report rather than bypassing the directive.

No raw HTML storage

RWC Guide does not store the raw HTML of crawled pages. The crawler parses each page in memory and extracts only the structured facts and short evidence snippets used by the report.

Evidence snippet storage

Short text snippets that demonstrate a finding — for example, an excerpt of an About section or a hours-of-operation block — are stored alongside the report so a business owner can see what the diagnostic actually read. Snippets are bounded in length and scoped to the public content needed to justify the score.

Email and report delivery

When a visitor unlocks the full report we email a private link to the address provided. The email contains the report URL, the readiness summary, and the standard report disclaimer. Reports are not published publicly and are not indexed.

HubSpot CRM

Lead details and consent state are synchronized to HubSpot so the RWC Guide team can manage outreach, suppression lists, and B2B follow-up. HubSpot is the system of record for marketing consent; deletion requests propagate to HubSpot as well.

PostHog and GA4 analytics

RWC Guide uses PostHog as the authoritative product and funnel analytics provider and GA4 as a mirror for acquisition reporting. Both providers receive event-level data about page views, diagnostic starts, report unlocks, and similar product events. Personally identifying details are minimized; consent state is logged with each event where applicable.

Resend email delivery

Transactional emails — report delivery, deletion verification, and admin notifications — are sent through Resend. Resend processes the recipient address and message contents solely to deliver the message.

Supabase database and authentication

Submissions, reports, leads, consent records, and admin accounts are stored in a Supabase Postgres database. Admin authentication is also handled by Supabase. The Supabase service role key is held only on the server; public visitors never query Supabase directly.

Sentry error monitoring

Server and client errors are reported to Sentry so the engineering team can investigate failures. Sentry events are scrubbed to avoid carrying user-provided emails, tokens, or other secrets into error payloads.

Vercel hosting

RWC Guide is hosted on Vercel. Vercel handles edge serving, the build pipeline, and short-lived platform logs. Long-lived application logs run through our own logging path with PII minimization.

IdentityRecord handoff

When a visitor chooses to bring their report to IdentityRecord, RWC Guide creates a one-time handoff token that IdentityRecord can redeem to read the relevant submission and report metadata. The handoff is opt-in. If the handoff is not redeemed it expires; the underlying record on RWC Guide is unaffected.

Deletion and revocation rights

You can request deletion of your data at any time by emailing us or by using the deletion form. We will verify the request from the email on file, anonymize or remove the matching submissions, reports, evidence snippets, and lead record, revoke any active report or handoff tokens, queue suppression in HubSpot, and confirm completion to you. We retain only the minimum log required to demonstrate that the deletion was honored.

No sale of personal data

We do not sell personal data, and we do not provide personal data to third parties for their own marketing purposes. The processors named above act on our instructions to operate the service.

Your rights

You can request access to, correction of, or deletion of your personal data at any time. To make a request, email privacy@realworldcommerce.com from the address on file, or use the deletion form linked from the site footer. We will verify the request, take the actions described under deletion rights, and confirm completion.

Where applicable law gives you additional rights — for example, the right to lodge a complaint with a supervisory authority or to withdraw consent — those rights are not waived by this policy.

Contact

For any privacy question, write to privacy@realworldcommerce.com. We respond from the same address and never ask for credentials or payment to act on a privacy request.