Privacy Policy

• Account data — your email address and a hashed password (we never store your password in plain text).
• Brand data you enter — brand and competitor names, domains, industry, location and the questions you track.
• Scan results — the answers AI engines return to your tracked questions, the sources they cite, and the scores we compute from them.
• Billing data — handled by Stripe. We receive your subscription status and a customer reference; we never see or store your full card details.
• Contact requests — the name, email, company, website and message you send through our contact form.
• Technical data — standard server logs (such as IP address and browser type) kept for security and debugging.

• To run the service: run scans, show your dashboard, generate action plans and reports.
• To send service emails: verification, weekly digests, alerts and billing notices. You can turn off digests from any digest email or your settings.
• To process payments and manage your subscription.
• To answer your enquiries and provide support.
• To keep the service secure and prevent abuse.

We process data to perform our contract with you (providing the service), for our legitimate interests (security, improving the product, and B2B communication about our service), to comply with legal obligations (e.g. tax records), and with your consent where required.

We use trusted providers to run the service. They process data only on our instructions:

• Vercel — hosting.
• Our database provider — encrypted data storage.
• Stripe — payments.
• Resend — transactional email.
• OpenAI, Google, Perplexity and Anthropic — we send your tracked questions (and, where relevant, your brand and competitor names) to these AI engines to collect their answers. We do not send your account details to them.

We do not sell your personal data.

Some providers process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep account and scan data while your account is active. When you ask us to delete your account, we delete your personal data within 30 days, except records we must keep by law (such as invoices).

You can ask to access, correct, export or delete your personal data, or object to certain processing. Reach us through our contact formand we'll respond within 30 days. EU/UK users may also complain to their local data protection authority.

We use only essential cookies — to keep you signed in, remember your theme and active brand, and attribute sign-ups from shared reports. We do not use advertising cookies.

Data is encrypted in transit (HTTPS), passwords are hashed, and access to production systems is restricted.

We'll post any changes on this page and update the date above. For material changes we'll notify account holders by email.