Privacy
Privacy notice
Last updated August 30, 2026
Free website diagnosis and action plan
Bismion requires a verified account before starting a website scan. A URL entered on a marketing page is preserved through authentication, but no guest scan or quota record is created. After explicit confirmation, Bismion fetches public pages and stores bounded text, structured data, source URLs, timestamps, scores, issues, interface locale, and detected website language so the private diagnosis can be displayed and validated. Scores and findings are deterministic. A verified Free user may explicitly send bounded public website evidence and catalog identifiers to OpenRouter to prioritize up to three saved actions. Provider failure consumes no allowance.
Optional Pro technical crawl
When an active Pro or internal user explicitly selects the deep technical crawl, Bismion may read up to 100 same-origin public HTML pages. Additional page metadata, bounded excerpts, link-graph data, response signals, and content hashes are stored as private internal technical evidence. They do not affect readiness scoring or findings and are excluded from public evidence APIs, shares, PDFs, and LLM inputs.
Optional Pro technical crawl
When an active Pro or internal user explicitly selects the deep technical crawl, Bismion may read up to 100 same-origin public HTML pages. Additional page metadata, bounded excerpts, link-graph data, response signals, and content hashes are stored as private internal technical evidence. They do not affect readiness scoring or findings and are excluded from public evidence APIs, shares, PDFs, and LLM inputs.
Implementation requests
When you request implementation, Bismion stores your contact details, selected issue keys, submission locale, and an immutable snapshot of the relevant audit evidence. We use it to validate scope, prepare a quote, deliver requested work, and maintain necessary business records.
Legal basis and marketing
We process audit requests to provide the requested service and contact details to respond and take pre-contract steps. Submitting a request does not give marketing consent and does not add you to promotional email by default.
Analytics and minimization
Privacy-safe funnel analytics record events such as scan completion, issue selection, quote request, acceptance, and verified rescan, segmented by interface locale and website language. Bismion does not store IP addresses or user-agent strings in funnel analytics.
Google Search Console
For an authenticated Bismion-verified property, you may authorize Google's read-only Search Console scope. Bismion encrypts the refresh token and bounded query, page, sitemap, and indexed-version evidence. This private data is excluded from public previews, shares, PDFs, LLM prompts, and analytics payloads, and local tokens and snapshots are deleted when you disconnect.
Local profile checklist
Google Business Profile checklist answers are private, owner-reported, and non-scoring. Bismion does not verify them through Google's API and excludes them from public results, report shares, PDFs, LLM prompts, and analytics payloads.
Private AI observations, cited sources, and experiments
Active Pro users may save exact prompts, plain-text answers, citations, product labels, locale, market, observation time, reviewed business aliases, and owner-confirmed competitors. Manual consumer captures and official OpenAI API web-search observations are separate evidence classes. Bismion derives exact-basis cited-source maps without fetching cited pages. When you create an experiment, Bismion also stores immutable baseline links, the selected finding or cited source, observed target, a completed implementation record or owner-attested external change, paired follow-up rounds, timestamps, and deterministic evaluation snapshots. These records describe what was observed after a change and do not prove causation. This private evidence is excluded from audit scoring, action-plan prompts, public reports, shares, PDFs, exports, and product analytics. Superseded observations and activated experiment evidence remain immutable; contact Bismion to request deletion subject to legal retention duties.
Private aggregate business outcomes
Active Pro users may define private aggregate sources and manually enter or import daily sessions, conversions, qualified leads, and revenue. Bismion stores normalized rows and immutable import history, but never stores the raw CSV. Labels and definitions that appear to contain email addresses or phone numbers are rejected. Outcome comparisons use fixed complete calendar windows around a recorded experiment change, exclude the change date, and do not prove causation. Outcome sources, rows, imports, and comparisons are excluded from public reports, shares, PDFs, exports, LLM prompts, provider logs, product analytics, audit scores, and findings.
Google account access
You may use Google to create, access, or link a Bismion account. Bismion verifies Google's signed identity credential and stores the stable Google subject and email recorded at linking time. Bismion does not retain Google access tokens, refresh tokens, ID tokens, profile pictures, or Google API data for this sign-in feature. Disconnecting removes the local identity link after a Bismion password is available.
Retention and international access
Records are retained only as long as needed to handle the request, deliver work, meet legal obligations, and resolve disputes. Authorized staff and providers may process data outside your country under appropriate safeguards.
Billing infrastructure
Self-serve billing is disabled and Bismion is not collecting subscription payments. Dormant payment records and integrations are retained securely for a possible future launch.
Legal operator
Solvrz, operator of Bismion, is responsible for processing personal data, contracting for implementation work, and delivering approved implementation services.
Your choices
Depending on your location, you may ask to access, correct, delete, restrict, or export personal data, or object to certain processing. Email hello@bismion.com. We may retain limited records where required by law.