Privacy Policy

Account & identity

• Email address, name (if provided), password hash (we never store plain passwords)
• Google account identifiers if you sign in with Google (subject, verified email)
• Authentication session data (tokens / cookies needed to keep you signed in)

Business & audit data

• Website URLs and business profile fields you confirm (name, category, location, description, etc.)
• Crawl snapshots, extracted content, and audit reports generated for those URLs
• Measurements derived from third-party AI platform responses (scores, citations, gaps)

Technical & usage

• IP address, browser type, device info, approximate location from IP
• Log data, rate-limit and quota counters, error diagnostics
• Cookies and similar technologies (see our Cookie Policy)

• Provide, secure, and improve the Service (crawl, extract, measure, dashboards, support)
• Create and authenticate accounts; reset passwords; prevent abuse and fraud
• Enforce quotas and protect against API cost abuse
• Communicate about the Service (security notices, product updates you opt into)
• Comply with law and enforce our Terms of Service

Running an audit sends prompts and relevant business context to third-party AI and infrastructure providers (for example OpenAI, Perplexity, Google, Fireworks, Anthropic, email delivery, hosting, and databases). Those providers process data under their own terms and privacy policies to return model outputs we store as part of your report.

We do not sell your personal information. We share data only with processors who help us operate the Service, when you direct us to, or when required by law.

We use essential cookies for authentication (including HttpOnly refresh cookies) and may use limited analytics cookies. Details: Cookie Policy.

Account data is kept while your account is active. Audit and crawl data are retained so you can view history and comparisons, and may be deleted or anonymized after account closure or upon verified request, subject to legal retention needs and backups.

We use industry-standard measures such as password hashing, TLS in transit where configured, access controls, and rate limiting. No method of transmission or storage is 100% secure.

• Access or update profile details in Settings (when available)
• Request deletion of your account or certain audit data via Contact
• Opt out of non-essential marketing emails (transactional/security mail may continue)

Depending on your location (e.g. EEA/UK/India), you may have additional rights under applicable privacy law. Contact us to exercise them.

The Service is not directed to children under 16. We do not knowingly collect their data.

Data may be processed in India and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Policy and will revise the "Last updated" date. Material changes may also be notified in-product or by email when appropriate.

Privacy requests: Contact.