Privacy Policy

The following document (“Privacy Policy”) contains information about all use of personal data on the tryhoverify.com website and in the Hoverify app. Both tryhoverify.com (“Website”) and the Hoverify app (“Hoverify”) are services (“Services”) of UnveelWorks Private Limited present in 203, Sahjeevan nagar, Skim no. 97, Indore, MP, India, 452009, who is the controller responsible for the processing of personal data through the Services (“we”). By using any of the Services, you agree to this Privacy Policy.

How personal data is obtained

  • Personal data means any information relating to an identified or identifiable natural person. We collect and receive personal data through the Website and through Hoverify.
  • We collect personal data that you choose to voluntarily provide to us for your use of the service or by automatically receiving data from your Hoverify, after you activate your license (only the computer ID, computer name, OS name, and version of Hoverify - after you activate your License Key, each time you run Hoverify on your device);

The types of personal data we may obtain

  • We may collect and receive the following personal data- Your name, email address, computer ID, computer name, OS name, and version of Hoverify (after you activate your License Key, each time you run Hoverify on your device).
  • We may collect other types of personal data if required under applicable law or if necessary for the purposes listed below. We will then inform you and ensure that there is a valid legal basis for doing so.

How we may use personal data

We may use the personal data we collect and receive for the following purposes:

  • To conclude and perform our purchase and license agreement, under the applicable Terms and Conditions.
  • To verify compliance with applicable legal requirements and our Terms and Conditions.
  • To contact you, such as by sending personalized emails, about our products and services, or to send you our newsletter.

Page content and AI content analysis in Hoverify

Hoverify reads the page you have open, and almost all of that reading happens inside your browser. Two tools look things up elsewhere: the SEO tool sends the page's address to Google's PageSpeed Insights and Chrome UX Report APIs for performance scores, and Site Stack sends the site's domain name to DNS, hosting and WordPress.org lookups. The third exception is an optional feature in the GEO tool, which can send page content to an AI model you choose.

  • The GEO tool's AI content analysis is off by default. It stays off until you enter your own OpenRouter API key in Hoverify's settings and choose a model to use.
  • Once you have turned it on, running a GEO audit sends four kinds of data to the model you chose, by way of OpenRouter. The first is the address of the page, with any query string and fragment removed. The second is the page text: its title, meta description and up to 40,000 characters of its main text. The third is context about the page: the type Hoverify detected, the date, the language attribute, a word count and up to 60 headings. The fourth is image and schema data: how many images it has, how many lack alt text, how many are marked decorative, up to 10 samples of that alt text, and the Schema.org types in its markup.
  • The Compare and Batch tabs run the same audit on other pages, so with the feature on, the same data from those pages goes to the model as well, including pages that are not yours.
  • OpenRouter and the provider of the model you chose both receive that data, and their own privacy policies govern what they do with it. Hoverify asks OpenRouter, through its data collection setting, to route the request only to providers that do not retain it or train on it. It does not reach us and it does not pass through our servers.
  • Hoverify stores your OpenRouter API key on the device where you entered it. Hoverify does not sync that key between browsers and does not send it to us.
  • Leave the feature off and a GEO audit runs entirely in your browser. Its only network requests go to the origin of the page being audited. It asks for robots.txt, llms.txt, llms-full.txt and the sitemap, then for the MCP and A2A agent card files, an Agent Skills index, an IndexNow key file and an RSL license file. It also fetches the page itself twice, once as a browser would and once asking for a Markdown version. Those requests are made from the page, so they carry the same cookies your browser already holds for that site, the way a reload would. If the site refuses a request, the extension's background process retries it, again with your cookies for that site.
  • Hoverify also keeps your past GEO scores, and the addresses they were taken on, in the browser's local storage on your own device. That history is never sent to us.

AI agent connection in Hoverify

Hoverify can work with a coding agent on your computer, such as Claude Code, through a small program called hoverify-mcp. The connection is off until you switch it on from Hoverify's AI agent page.

  • The extension and hoverify-mcp talk to each other on your own computer, over 127.0.0.1. Web pages can't connect to hoverify-mcp, and it makes no network requests of its own.
  • The first time an agent connects, Hoverify asks you to allow it. hoverify-mcp keeps a random key in a file in your home folder (~/.hoverify/agent.key) that only your user account can read, and Hoverify keeps a copy once you allow it. Forget on the AI agent page deletes Hoverify's copy, and Hoverify asks again the next time an agent connects.
  • An agent can use the tab you are viewing and the tabs it opened itself. What a tool returns, such as an audit, an element's HTML and CSS or a screenshot, goes to the agent, and from there to the agent's model provider under that provider's terms. None of it is sent to us.
  • A few tools contact outside services when the agent runs them, the same way they do when you use them yourself. Site Stack looks up the site's hostname for hosting (check-host.net, or our own server when that lookup fails), DNS (Google Public DNS) and SSL (decoder.link). The SEO audit can request every link on the page or send its address to Google's PageSpeed Insights, and the GEO audit can run the AI content analysis described above, but only when the agent asks for them. If the agent adds a picture to a screenshot by its web address, the extension downloads it without your cookies. Text on a designed screenshot can use a Google font, which loads from Google Fonts.
  • Screenshots the agent takes are saved in your computer's temporary folder, usually as PNG. Very large captures are saved as JPEG, and a designed screenshot can be JPEG or WebP if the agent asks. With Hide sensitive content switched on in Hoverify's capture settings, emails, phone numbers, card numbers, keys and filled-in form fields are pixelated before the image leaves the browser. The agent can skip that setting for one screenshot when it needs the exact pixels, for example to check a form field it just changed in your code. It doesn't ask you first.
  • The AI agent page lists the agent's recent calls. That list is held in memory only, and is never saved or sent anywhere. The connection switches itself off after 30 minutes without a call, and when you sign out of Hoverify.

Third-party services on the Website

tryhoverify.com loads scripts from a few outside services, each with its own privacy policy: Paddle handles payments, Tolt attributes purchases to affiliates, Plausible counts page views without cookies, Microsoft Clarity records how pages are used, and Google Ads and the Meta Pixel measure whether our advertising led to a purchase. None of these run inside the Hoverify extension.

How we protect personal data

We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us or the personal information stored is absolutely secure. We will notify you of any data breach that is likely to have unfavorable consequences for your privacy in accordance with applicable law.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes to this Privacy Policy on the Website or through other appropriate communication channels. All changes shall be effective from the date of publication, unless otherwise provided in the notification.

How to Contact Us

If you have any comments or inquiries concerning this Privacy Policy, if you would like us to update your personal data, or to exercise your rights, please email us at hello@tryhoverify.com.