Privacy Policy

AI Visibility Tool is an online service that shows how brands appear in AI assistants and AI search, and helps improve that visibility with an AI agent, content tools and website checks (the “Services”). The Services are provided by SEOptimer Pte. Ltd. (UEN 201923402C), a company registered in Singapore (“we”, “us” or “our”), which controls the personal data described in this policy.

We take the privacy of our users and customers seriously. This policy explains what data we collect, how we use it, who we share it with and the choices you have. It applies to our website, the AI Visibility Tool app and our free tools.

The data we collect

Data you give us

Account information: your name, email address and password (stored only as a secure hash), and two-factor authentication settings if you turn them on.
Workspace information: workspace names, the people you invite and their roles.
Billing information: your plan, billing name, address and tax details. Card payments are handled by our payment provider, Stripe; we never see or store your full card number.
Brand and project information: the websites, brands, competitors, markets and prompts you track, and the brand notes you write.
Content: articles you write or generate in the AI Writer, and your conversations with the AI Agent.
Connections: credentials for the websites you publish to (such as WordPress, Ghost, HubSpot or a webhook) and authorization to your Google account (see Google user data). Credentials and tokens are encrypted when stored.
Free tool searches: the searches, domains and countries you enter into our free tools.
Support: messages you send us and the details you include.

Data we collect automatically

Usage: the pages and features you use, and when you log in.
Device and connection: browser and device type, operating system, IP address and approximate location derived from it.
Referral: how you arrived at our website, such as the referring site or search terms.

For free tools we keep a one-way, keyed hash of your IP address rather than the address itself, to enforce daily usage limits.

Public data we analyze

To provide the Services we collect publicly available information about the brands, websites and topics you ask us to analyze: answers from AI platforms, search engine results, and the content of public web pages. This is information about businesses and websites, not about you.

How we use the data

To provide the Services: running AI visibility analyses, tracking prompts, reporting AI traffic and search performance, answering your questions with the AI Agent, writing and publishing content and running website checks.
To keep accounts secure: login, authentication, verification and preventing abuse of the Services and our free tools.
To bill you, record transactions and issue invoices.
To provide support, including resolving billing issues and investigating problems.
To send service messages about your account, your analyses, incidents and important changes.
To send product news and offers by email, which you can opt out of at any time (see Your rights and choices).
To measure and improve the Services.
To comply with the law and enforce our Terms of Service.

Where the GDPR or UK GDPR applies, we rely on these legal bases: performance of our contract with you (providing the Services and billing), our legitimate interests (security, support, improving the Services and marketing to customers, balanced against your rights), your consent (where we ask for it, for example for optional cookies or connecting your Google account) and legal obligations (such as keeping tax records).

Google user data

If you choose to connect a Google account, we ask for read-only access to the Google services you connect. We never change anything in your Google account.

Google Analytics (analytics.readonly): we read the Analytics properties you can access and report data for the property you choose, such as sessions and conversions by referral source and landing page. We use it to show how much traffic AI platforms send to your website, and to answer your questions about that traffic in the AI Agent.
Google Search Console (webmasters.readonly): we read the sites in your Search Console and their search performance data, such as queries, pages, clicks, impressions and positions. We use it to show your Google search performance alongside your AI visibility, and to answer your questions about it in the AI Agent.
Basic profile (openid, email): we read the email address of the Google account you connect, to show you which account is connected.

How we store it. Access tokens are encrypted when stored. Report data fetched from Google is kept in a temporary cache for up to 12 hours so that pages and follow-up questions load quickly, and is not otherwise stored, except where it appears in an AI Agent answer you asked for, which is saved in that conversation until you delete it.

How we share it. We do not sell Google user data or use it for advertising. We only transfer it to provide the features above: when you ask the AI Agent a question that needs your Analytics or Search Console data, the relevant data is sent to the AI model provider that generates the answer (see Who we share data with). It is used only to answer your question. We do not use Google user data to develop, improve or train AI or machine learning models.

Who can see it. Our staff do not read your Google user data, except with your permission (for example, when you ask for support), for security purposes, or where required by law.

Removing access. You can disconnect Google at any time from the app, which deletes the stored tokens and revokes our access at Google. You can also remove our access from your Google account permissions. Deleting your workspace deletes its Google connection.

AI Visibility Tool's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

The Services use AI models to analyze answers, write content and answer your questions. Your prompts, brand notes, the content you write and the data needed to answer an AI Agent question are sent to AI model providers through our AI gateway (OpenRouter) for that purpose only. We do not use your content to train our own AI models. These providers process the data under their own terms and privacy policies.

To measure your AI visibility, we send the prompts you track to AI platforms such as ChatGPT, Claude, Gemini and Perplexity through their APIs. These prompts are questions about your market, not personal data, and we recommend you keep them that way.

We never sell your personal data or share it with third parties for their own marketing. We share it only with service providers that help us run the Services, only to the extent they need to do their job, and under contracts that prohibit any other use:

Payments: Stripe.
AI models: OpenRouter and the AI model providers it routes requests to.
Search and SEO data: providers of search results and keyword data, which receive the keywords and domains being analyzed.
Hosting and infrastructure: our hosting provider, content delivery and security network, and email delivery provider.
Support and analytics: tools we use to answer support chats and measure how our website is used, where enabled.

We may also disclose data if required by law, to protect our rights, users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data. Data you publish through the Services (for example, articles sent to your website) is shared with the destination you choose.

Our service providers may be located outside your country, including in the United States. Where data protection law requires it, we protect international transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep data

Account, workspace and project data: for as long as your account is open. When you delete your account or workspace, we delete the related data, except as below.
Billing records: as long as tax and accounting law requires.
Google report data: up to 12 hours in a temporary cache, as described above.
Free tool results: kept so repeat searches can be answered quickly; result pages are not listed in search engines but can be viewed by anyone with the link.
Backups: deleted data may remain in encrypted backups for a limited period until they are overwritten.

Security

We protect data with encryption in transit (HTTPS), encryption of stored credentials and tokens, hashed passwords, optional two-factor authentication and access limited to the people who need it. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you think your account has been compromised.

Your rights and choices

Depending on where you live, you may have the right to:

access the personal data we hold about you and get a copy of it;
correct inaccurate data;
delete your data;
object to or restrict how we use it, including for direct marketing;
receive your data in a portable format;
withdraw consent at any time, where we rely on consent.

You can update your profile in your account settings, and delete your account there too, which permanently deletes your data and the workspaces you own. You can disconnect Google and other connections in the app, and unsubscribe from marketing emails with the link in each email. For any other request, email us at [email protected].

If you are in the EU, UK or another region with a data protection authority, you can also complain to your local authority, though we would appreciate the chance to resolve your concern first.

Cookies

We use cookies that are necessary for the website and app to work: to keep you logged in, protect forms against forgery and remember settings such as your theme. Where enabled, we also use analytics cookies to understand how our website is used, and the support chat widget sets cookies to keep your conversation. You can block or delete cookies in your browser settings, though the app will not work without the necessary ones. We do not currently respond to “Do Not Track” browser signals.

Changes to this policy

We may update this policy as our Services or the law change. We will post the new version here with a new date, and tell you by email or in the app before any material change takes effect.

Contact us

Questions or requests about this policy or your data: email [email protected].

Data Protection Officer: you can contact our Data Protection Officer at [email protected].