Who operates this service
M Squared is operated by SurfBreak Digital, a Panama-based sole proprietorship. In this policy, “M Squared,” “we,” “us,” and “our” refer to that operator.
Privacy questions and requests may be sent to surfbreakdigital@gmail.com.
Information we collect
Depending on how you use the service, we may collect:
- Website information: the URL or domain you submit, publicly available pages and technical signals found during an analysis, scan findings, and generated reports.
- Contact information: your email address when you ask us to email your Website Visibility Report and, if you contact us, your name, message, requested help type, and related details. Report-recipient email addresses are stored in encrypted form with a separate one-way value used for deduplication.
- Security and usage information: browser or device information, timestamps, request activity, and security signals used to prevent abuse, enforce rate limits, and protect the service. Internet Protocol addresses may be processed and transformed into a one-way value for rate limiting and security. We may also use cookies or similar technologies for analytics and advertising measurement where permitted by applicable law.
- Temporary browser information: limited session storage used to preserve analysis progress and move you between scan and result steps.
How we use information
- Run the website analysis, produce a Website Visibility Score, and generate the report you request.
- Deliver the Website Visibility Report you request and respond to support or privacy requests.
- Send occasional website-improvement information from MSQ2I only when you affirmatively select the optional marketing checkbox. Requesting the report does not by itself opt you into recurring marketing email.
- Protect the service, investigate misuse, enforce limits, debug errors, and improve reliability and methodology.
- Meet legal, accounting, fraud-prevention, and regulatory obligations.
Service providers
We use service providers only where needed to operate the service. These currently include Cloudflare for hosting, storage, database, website rendering, security, and traffic measurement; Google Analytics for website usage measurement; Resend for requested report and support email; Meta for advertising measurement and attribution; and OpenAI for explanatory or recommendation language in internal technical analysis.
The Website Visibility Score is based on versioned, rules-based checks. AI may help explain verified evidence; it does not independently invent or change the score.
These providers may process information in countries other than yours under their own terms and safeguards. We may also disclose information when required by law, to protect rights or safety, or in connection with a legitimate business transfer.
Analytics and advertising measurement
We use Google Analytics to understand website usage and Meta Pixel to measure whether advertising leads to website visits, completed free analyses, and voluntary lead actions such as requesting an emailed report. These providers may receive browser, device, cookie, page-address, and event information under their own privacy terms. We do not intentionally send website-analysis findings, report-recipient email addresses, or other sensitive analysis content as analytics-event parameters. You can use browser and provider settings to control cookies and advertising preferences where available.
What we do not do
We do not sell personal information. We do not intentionally scan private areas of a website; the analyzer evaluates publicly accessible website content and signals.
Retention and security
We retain information only as long as reasonably needed to provide the service, maintain requested reports and consent records, resolve disputes, prevent abuse, comply with legal duties, and protect our systems. Retention may vary by record type and applicable law.
We use technical and organizational safeguards designed to protect information, including encrypted report-recipient email storage, purpose-separated hashes, rate limits, origin checks, private internal-access controls, and security screening. No online service can guarantee absolute security.
Your choices and rights
Subject to applicable law, you may ask to access, correct, update, or delete personal information associated with you, or object to or limit certain processing. Panama's Law 81 of March 26, 2019 recognizes rights concerning personal data, and Executive Decree 285 of May 28, 2021 regulates that framework.
Send a request to surfbreakdigital@gmail.com. We may need to verify your identity and may retain information where required for legal, security, or legitimate operational reasons.
If you opted into occasional MSQ2I marketing email, you may withdraw that permission at any time using the unsubscribe method provided in marketing messages or by contacting us. Browser storage can be cleared through your browser settings, although doing so may interrupt an unfinished analysis flow.
Children
The service is intended for businesses and adults and is not directed to children. We do not knowingly collect personal information from children through the service.
Changes to this policy
We may update this policy as the service, vendors, or legal requirements change. The effective date above will show when the current version took effect. Material changes may also be communicated through the website or by email when appropriate.
Contact
M Squared, operated by SurfBreak Digital, a Panama-based sole proprietorship
surfbreakdigital@gmail.com