How we handle your website and your data
A Visibility Mesh scan reads only the public pages of a website and changes nothing on it. This page lists every company that processes data for us, how long we keep each kind of file, and how you can have it deleted.
What a scan reads
A scan looks at the same public pages any visitor can open.
- A scan reads public pages only, so it needs no login and no access to your systems.
- Before we sample any page, we read your robots.txt file and respect its Disallow rules.
- The scanner refuses private network addresses, and that includes an address it would reach through a redirect.
What we change
A scan only reads your website, and on a service we change only what you approve.
- A scan changes nothing on the website it reads.
- When you buy a service, we change only what you approve.
- We record every change, keep a backup of it and can reverse it.
- On Shopify we work in a copy of your theme and never in the live one.
Who processes data for us
These are the companies that handle data on our behalf, with what each one receives.
- SupabaseSupabase runs our database and file storage, which hold scans, reports, uploads and your email address. Supabase states that it encrypts stored data at rest.
- RailwayRailway hosts the Visibility Mesh scan engine.
- AnthropicAnthropic reads the page content of a scanned website so we can score it and write the findings.
- ResendResend sends our emails, including your sign in link and your report links.
- ScraperAPIScraperAPI fetches a public page for us when a website does not answer our direct request.
- Google PageSpeed InsightsGoogle PageSpeed Insights receives your homepage address and measures how fast the page loads.
- OpenAI and PerplexityOpenAI and Perplexity receive the buyer questions that name your website when an AI Mentions check runs.
- ShopifyShopify runs our store checkout and the Visibility Mesh Shopify app, and it receives order details and the shop domain.
How long we keep files
We keep each kind of file for a different length of time.
- Visibility Mesh deletes raw scan files 90 days after the scan finishes.
- Product exports and themes you upload are deleted 30 days after their scan completes.
- We keep your reports and the files we deliver so you can download them again.
- Account records stay until you ask us to delete them.
How to have your data deleted
You can ask us to delete your data at any time.
- If you used Visibility Mesh on the web, email support@visibilitymesh.com and we will delete the scans, reports and files for that email address.
- When a merchant uninstalls the Visibility Mesh Shopify app, Shopify asks us to erase the store's data about 48 hours later.
- Our engine then deletes that store's scans, reports and files.
Who can open what
You sign in with an emailed link, and only our own operators can open customer records.
- The customer portal has no password, so we email you a single use sign in link that expires after 15 minutes.
- A signed in session lasts 30 days.
- Report files sit in private storage, and each one opens through a link on our own domain that carries a scan identifier nobody can guess.
- Our database denies access to every table by default through row level security.
- Only our own operators can open customer records, and they do it through a password protected console.
- Every connection uses HTTPS.
Security questions and our posture
Security questions and incident reports go to support@visibilitymesh.com.
- A person replies within 1 business day, Monday through Friday, Pacific time.
- Our founder holds the CISA and CISSP certifications.
- We do not hold a SOC 2 report or an ISO 27001 certificate.
- We publish our controls on this page instead, so you can check each one yourself.
This page was last reviewed on October 9, 2026.
Questions buyers ask
What data does a scan collect from my website?
A scan reads the public pages any visitor can open and respects the Disallow rules in your robots.txt file. We keep the raw scan files for 90 days after the scan finishes, and we keep your report so you can download it again.
Do you need a login or access to my store?
A scan needs no login and no access of any kind, and it changes nothing on your website. If you later buy a service, we change only what you approve, and on Shopify we work in a copy of your theme.
How do I have my data deleted?
Email support@visibilitymesh.com and we will delete the scans, reports and files for your email address. If you installed the Shopify app, uninstalling it is enough. Shopify asks us to erase the store's data about 48 hours later, and our engine deletes it.
Do you have SOC 2 or ISO 27001?
We do not hold a SOC 2 report or an ISO 27001 certificate. Our founder holds the CISA and CISSP certifications. We publish our controls on this page so you can read exactly how we work.