Template — have counsel review before relying on it
This Privacy Policy is a general template provided for convenience. It is not legal advice. Have a qualified attorney review and adapt it to your specific circumstances and applicable law before you rely on it.
Information we collect
Your email address. We use it for magic-link sign-in, to send you your free-scan report, and to reply if you contact us through our contact form.
Information you provide about the brand you want to scan. This includes the website domain or URL you submit, and optionally the brand name, industry, and competitor names you enter to focus the analysis.
The scan results we generate. When we run a scan we produce AI-engine responses, citations, and scores, and we store them so they are available in your account.
Optional analytics connection data. If you are on a paid plan and choose to connect Google Analytics 4, we access your analytics data on a read-only basis to enrich insight into AI-driven referrals. This connection is optional and you can disconnect it at any time.
Billing details. When you subscribe to a paid plan, payment information is collected and processed by our third-party payment processor. We do not store full payment card numbers on our systems.
Technical and log data. Like most online services, we automatically receive standard technical information such as your IP address, which we use for rate-limiting and to detect and prevent abuse.
How we use your information
We use the information above to run scans and deliver your reports, to operate and secure your account, to process payments for paid plans, to send you transactional and service-related email, to improve and maintain the service, and to prevent fraud and abuse.
We do not use your information to build advertising profiles, and we do not serve third-party advertising in the product.
Sharing and service providers
We do not sell your personal data. Your scan results are private to your account.
We rely on a small set of service providers (sometimes called sub-processors) to deliver the service, and we share only the information each one needs to do its job. These include: AI model providers that process the prompts used to run your scans; a web-retrieval provider that gathers citation evidence; an email delivery provider that sends your reports and service messages; and a payment processor that handles paid-plan billing.
If you choose to connect Google Analytics, we exchange the necessary data with Google Analytics to provide that feature. That connection exists only if you enable it.
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transfer such as a merger or acquisition.
Your choices and rights
You can access and correct the information in your account, and you can request deletion of your data. If you connected Google Analytics, you can disconnect it at any time from your account, which stops any further data exchange for that feature.
If a scan report was made publicly shareable, you can have it taken down through our "request removal" flow.
Depending on where you live, you may have additional rights over your personal data. To exercise any of these choices, contact us using the details below and we will respond within a reasonable time.
Cookies
We use a single essential cookie to keep you signed in (your authentication session). We do not use third-party advertising or cross-site tracking cookies. Because the authentication cookie is required for the service to function, it cannot be disabled while you are signed in.
Data retention
We keep your account information and scan results for as long as your account is active, so your history remains available to you. When you delete your account or request deletion, we remove or anonymize your personal data within a reasonable period, except where we need to retain limited information to meet legal, accounting, or security obligations.
Security
We take reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on the systems that hold your data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly if an issue arises.
Children
Our service is intended for businesses and professional users. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
International processing
We and our service providers may process and store information in countries other than the one where you are located. Wherever your data is processed, we take steps intended to ensure it receives an appropriate level of protection consistent with this policy.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.
Contact us
If you have questions about this policy or how we handle your data, or if you want to exercise any of your choices, please reach out through the contact form on our website and we will get back to you.
Last updated: July 2026.