FAT Agent HQPrivacy policy
What FAT HQ collects, why, and what happens to it. FAT HQ is run by Spruik Co Pty Ltd (ABN 61 695 444 645) in Australia, and we handle personal information under the Australian Privacy Principles.
What we collect about you
Your email address, a hashed password, your plan and billing records from Stripe, and the plugin keys you create (stored only as hashes). We never see or store card numbers; Stripe handles payment.
What we collect about your sites
What you send or ask us to check: FAT Agent audit results (scores, findings, the pages checked), the pages you list for scheduled checks, and, if the plugin sends it, daily Search Console clicks and impressions. We do not receive your Google login or any query-level Search Console data.
Checks we run for you
Scheduled and "Check now" audits fetch the public pages you list, the same way a browser would, identifying as FAT Agent. The tracking check opens your homepage and any thank-you pages you list in a real browser to see which analytics and ad tags fire; their tracking requests are recorded and then blocked, so our checks never add visits or conversions to your analytics or ad accounts. We never submit forms. Only list sites you own or have permission to test.
Why we use it
To show you your audits, run the checks you schedule, send the alerts you switch on, bill you, and contact you about your account. We do not sell data or use it for advertising.
Client report links
If you switch on a client report link for a site, anyone with that link can see that site’s latest report. Switch it off in the site’s settings and the link stops working.
Where it is stored
On our servers in Germany (Hetzner), with nightly backups kept for 14 days.
This website
We use Google Analytics 4 to count visits to these pages and to see which ones people read: pages viewed, rough location, device and browser, and how you arrived. GA4 does not store IP addresses. In the EU, UK and Switzerland analytics stays off until you accept; everywhere else it is on until you decline, and you can change your mind any time by clearing this site’s storage. No advertising or remarketing. Fonts load from Google Fonts, so Google sees your IP address when the page loads them.
The plugin
FAT Agent itself runs inside your own Claude Code session and sends nothing to us unless you connect it to an account here with a plugin key.
Who we share it with
Stripe, for billing; Send16 (our own email service), to deliver account emails and alerts. Otherwise only if the law requires it.
How long we keep it
While your account is open. Delete your account from Settings and we remove your sites, audits and traffic data straight away (backups roll off within 14 days), apart from billing records we must keep for tax.
Your rights
Ask to see, correct or delete your information at any time at hello@spruik.co. If you are unhappy with our response you can contact the Office of the Australian Information Commissioner.
Last updated 30 October 2026.