Privacy Policy

1. Data we collect

• Account data: email address and password (stored only as a bcrypt hash).
• Project data: monitored domains, brand names, aliases, keywords and competitors you configure.
• Free health checks: the email, domain and keywords you submit, plus the generated report.
• Operational data: IP address (rate limiting), AI sampling logs (prompts, answers, cost) and billing metadata from our payment provider.

2. How we use data

• To provide monitoring reports, email notifications and your dashboard.
• To prevent abuse (rate limits, budget guard) and to bill subscriptions.
• Aggregated, non-identifying usage statistics to improve the Service.

We do not sell personal data and we do not use your content to train AI models.

3. AI providers

To measure visibility we send your keywords as prompts to third-party model APIs (e.g. DeepSeek, Google Gemini, Perplexity). Those providers process the prompts under their own terms; prompts contain keywords and brand names, not your account credentials.

4. Retention

• Free health-check reports (including email) are deleted 30 days after creation.
• Account and project data are kept until you delete them or close your account.
• Billing records are retained as long as required by tax and accounting rules.

5. Your rights

You can access, correct or delete your data from the dashboard, or request export/erasure at privacy@example.com. EU/UK users may also lodge a complaint with their supervisory authority.

6. Processors & security

We use vetted processors for hosting (EU/HK data center), payments (Stripe/Paddle) and transactional email (Brevo). Data is encrypted in transit (TLS) and API keys are encrypted at rest (AES-GCM). No method of transmission is 100% secure, but we minimize what we collect in the first place.

7. Contact

Questions: privacy@example.com.