Effective 25 Sep 2026, updated 2 Oct 2026
What we store
- Your email address and account id, so you can sign in.
- Your product's website address and the listing details you approve: name, descriptions, categories, pricing, logo and similar fields.
- Your orders: the plan or credits, the amount and the payment state. Card details stay with Dodo Payments.
- Your listing progress: which directories we submitted to, what happened at each step, the link to each live listing, and screenshots of the forms and pages.
- Your badge key, and the result each time we check your site for the badge.
- Emails directories send to the address we use for your listings, so we can confirm them.
What we do with it
We use it to list your product on the directories in your plan, to show you each listing's progress, and to check that your listings and your badge stay live. We read your public website to draft your listing. We do not sell your data, and your account and product details are never used for advertising.
A listing is public by nature. The details you approve are published on each directory's own site, under that directory's own terms and privacy policy.
Who processes it for us
- Clerk: your sign-in: email address and login sessions.
- Vercel: hosts this site and the app, and stores listing screenshots.
- Neon: the database holding your account, product details and listing progress.
- Railway: runs the worker that fills in the directory forms.
- OpenAI: writes listing copy from your public website, which you approve before use.
- Dodo Payments: takes payment as the merchant of record; we never see your card details.
- CapSolver: answers captchas on directory forms; it receives the captcha, not your details.
- Resend: sends our emails to you: receipts, progress and the notes you ask for.
- SpeedyIndex: receives the public URLs of your live listings when they are sent for indexing.
- DataForSEO: receives the public website addresses you enter in the gap analysis, to count their links.
The badge on your site
The badge script loads the directory badges for your plan. It sets no cookies and does not track your visitors. We fetch your page to check the badge is present.
Visits to submi.io and the app
We count visits ourselves. Each page you open on submi.io or app.submi.io records the page, the site that sent you, any campaign tags in the link, your approximate location (country and city, from your IP address, which we do not store), and your device and browser type. One first-party cookie, submi_src, holds a random visitor id and where your first visit came from, for one year, so we can tell which sources bring customers. It is never shared.
Google Ads
We advertise with Google Ads, and both sites load the Google tag. Google uses cookies to tell us when someone who clicked one of our ads later signs up or buys, and may use them to show our ads to past visitors. Google receives the pages you open and your IP address, under Google's own policy. You can turn off personalised ads at adssettings.google.com.
If your browser sends Global Privacy Control, neither our visit counter nor the Google tag runs.
Keeping and deleting it
We keep your data while your account exists. Ask us to delete your account and we remove your account, product details and listing records. Listings already published on directories are controlled by those directories; we will tell you which ones exist so you can ask them too.
Contact
Questions or requests about your data: hello@submi.io.