privacy

Privacy

Last updated October 23, 2026Effective date: to be confirmed by the owner

This describes what this product actually stores and sends today, not what a larger company’s policy would cover.

Who is responsible for your data

What we hold about you

• Your account: your email address and a password, or your Google sign-in. Passwords are handled by our authentication provider (Supabase) and never reach our own storage in readable form.
• Your credit history: credits added and used, so you can see how your balance changed.
• Your saved brands: each website address you save and its basic read (logo, colors, type, homepage images and linked profiles).
• Your reports: the address, the plan and price you approved, and everything the run collected from your selected sources. This can include page text, screenshots, saved images, sitemap URLs, public posts, SEO data for your own website, AI review, and usage costs. A report is a sample, not a complete archive or a promise of current search rankings.
• Client review: the report sections and rounds you share, link expiry and revocation, reviewer names and comments, approvals and edit requests, owner notes and decisions, and any AI suggestions. Sharing sends no email; you copy the link.
• Earlier reports: older reports may contain other sources, monitoring history or email delivery records. Automatic monitoring and email digests are outside this launch.
• Assistant connections: which assistants you connected, when, and whether each connection is still active.

Card checkout is disabled for this launch. We hold no card details. Do not send card details through report, support or account fields.

Who can read a report

Reports require access through their owning account. Authorized operators can read reports for support. An explicitly published example is readable without an account; that public read does not grant editing rights or reveal the owner’s other reports.

If you create a client-review link, anyone holding it can read the included sections and submit feedback without an account until it expires or you revoke it. Recipients can forward the link. It does not give access to your other reports or allow changes to collected evidence. Changes you choose to apply stay labeled as owner decisions.

Who else sees your website address

The free read reads the site directly and does not call the commercial sources below. A full report sends the website address, the brand name and the targets you confirmed to the sources that answer the sections you selected:

• DataForSEO: search rankings, pages and links for your own website, or technical site checks, when you select those sources.
• ScrapeCreators: public profiles and post samples for social accounts you confirm.
• Page and screenshot services, including Firecrawl: the page addresses you select. Reads and captures have size and time limits; the report explains any missing content.
• Public websites: your website supplies the free read. An AI review may also check a small number of public source links when the plan you approve includes those checks.
• AI services: when selected, tone analysis and section review receive samples of saved text and, where included, saved images. An AI suggestion for client feedback receives that report item’s saved evidence and the client’s message. The model provider receives these inputs. API keys are not included in report content.

AI visibility, ad research and competitor comparisons are outside this launch. We do not sell your data, and we do not use your reports to advertise to you.

Assistant and API access

An assistant you connect can read your saved brands and reports: it cannot buy reports, spend credits or change your account. Disconnect it at any time in Connected assistants; from then on it can no longer read your reports. Anything it already read stays with that assistant under its own terms.

Owner-created API keys are separate. You choose their permissions. A key allowed to run reports still follows the same plan approval, credit and access limits. Neither these keys nor connected assistants can start card checkout. Revoke a key to stop future access.

How long we keep it

Saved reports, brand reads and monitoring history are kept so you can reopen and compare them over time. The hosted alpha has no automatic deletion schedule. You can remove a saved basic read from your brand library yourself. To remove reports or your whole account, ask for deletion; the operator checks the database, media storage and any retention obligations before confirming the request is complete. There is no self-service account erasure yet.

Third-party material inside a report

A report contains material published by other people: reviews, posts, images. It is shown to you as research. Republishing it is your decision and your responsibility, and nothing in the product treats a saved report as published.