Legal
Privacy policy
This policy explains what information [Company legal name] (“Afterward”, “we”, “us”) processes when you use the Afterward website audit service through an MCP client, visit afterward.run, join our waitlist, or contact us. The short version: we need very little, we don’t sell it, and we don’t use it for advertising or to train AI models.
Website audits through an MCP client
When you ask an assistant such as ChatGPT or Claude to check a website, your MCP client sends Afterward a request to run the scan_website tool. We process:
- The address you ask us to check and the scan settings (such as the number of pages).
- The scan result. Afterward generates it and returns it to your MCP client. We do not save results in a database or build a profile from them.
- Rate-limit identifiers. The IP address the request comes from and, when ChatGPT provides one, an anonymized user identifier issued by OpenAI. We use these only to enforce fair-use limits. They are held in server memory, are not written to a database, and are discarded when the limit window ends (currently 10 minutes) or the server restarts.
- Operational logs. Our logs record the address scanned, the outcome, score and timing of each scan. When a request is refused for exceeding a limit, the log records the requesting IP address or a one-way hash of the anonymized identifier. We use logs to run, secure and fix the service.
MCP clients may attach other metadata, such as your locale or an approximate location. Afterward does not use or record it. Your conversations with your assistant are handled by its provider (for example OpenAI or Anthropic) under that provider’s own privacy policy; Afterward only receives what the client sends to the tool.
Websites we inspect
A scan fetches publicly available pages of the website you name, plus a small number of linked URLs. Those pages may contain information about people that the site’s owner has published. We process it only transiently to produce findings, which can quote evidence such as URLs, page titles or response headers. See how the Afterward crawler works.
Visiting afterward.run
Our website does not use cookies, analytics, advertising pixels or third-party tracking scripts. Like most websites, our hosting provider records standard request logs, including IP address, browser user agent and the page requested, for security and operations.
The Pro and Agency waitlist
If you join the waitlist, your email address is sent directly to Kit, our email provider, and stored there. We use it only to tell you when Pro and Agency are available. Every email includes an unsubscribe link, and you can ask us to delete your address at any time.
Contacting us
If you email us, we keep the correspondence for as long as we need it to help you and to keep a record of the request.
How we share information
We do not sell personal information or share it for cross-context behavioral advertising. We share it only with service providers that help us run Afterward, under their terms and only for that purpose:
- Railway hosts the website and the MCP server (United States).
- Kit stores waitlist email addresses and sends waitlist emails.
- Our email provider receives messages sent to support@afterward.run.
We may also disclose information when the law requires it, to protect the rights, safety or security of Afterward, its users or others, or as part of a merger or acquisition, subject to this policy.
How long we keep it
Rate-limit identifiers: up to the limit window, currently 10 minutes. Logs: a limited period set by our hosting provider. Waitlist addresses: until you unsubscribe, ask us to delete them, or the waitlist ends. Support email: as long as needed to handle your request.
Your choices and rights
You can ask us to access, correct or delete personal information we hold about you, or to stop emailing you. Depending on where you live, including several U.S. states, you may have further rights under local law, and you will not be treated differently for using them. Email support@afterward.run; we will respond within 45 days. Because we do not track visitors across sites, there is nothing for a browser’s Do Not Track or Global Privacy Control signal to switch off.
Children
Afterward is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.
Security and location
We protect information with reasonable safeguards, including encrypted connections and keeping as little as possible. No method of transmission or storage is completely secure. Afterward is operated from the United States, and information is processed there.
Changes to this policy
We will post any changes on this page and update the effective date. If a change is significant, we will give notice on the website before it takes effect.
Contact
[Company legal name], [State], United States. Email support@afterward.run.