Legal
Privacy
Last updated 20 September 2026. What is stored, why, and how to get rid of it.
Your account
An account holds an email address, a display name, the identifier from your sign-in provider, your plan, and — once billing exists — a payment-provider customer reference. Sign-in is handled by Firebase; we never see your password.
Sites you scan
A scan fetches public pages from the site you nominate and keeps what it derived from them: headings, prices, forms, structured data, the rendering difference between a plain fetch and a browser, the scores, and the files generated from those findings. Page content is processed to produce those artifacts rather than archived as a copy of your site.
The beacon on your site
If you install agent.js, each page view records the user agent, the path, the referrer and a timestamp, against your site. It does not store an IP address, set a cookie, or attempt to identify a visitor. The request is only accepted when it comes from your own domain.
Browser visits are marked as such and excluded from every agent count, because a person is not an AI crawler.
Accounts you connect
Search Console, Bing Webmaster and Google Analytics tokens are encrypted before they are stored, using a key derived from the server secret, and are used only to pull the rank, referral and crawl figures shown in your dashboard. Disconnecting a source deletes its token here, and asks Google to withdraw the grant as well; when that request fails we say so rather than implying it succeeded, and the grant can be removed from your Google Account’s permissions directly.
API keys you create are shown once and stored only as a hash, so a copy of the database does not yield a usable key.
Measurement and cost records
Citation sampling stores each run’s engine, prompt version, result and token counts, and a usage ledger records what serving your account cost. Non-brand prompts are cached across tenants: the cached item is the engine’s answer to a generic question, never anything about you.
Who else sees it
The answer engines receive the prompts we sample with, which name a brand and a category. Hosting, database and error-reporting providers process data on our behalf. Nothing here is sold, and nothing is shared for advertising.
Deleting it
Deleting a site removes its scans, artifacts, visits and measurements. Ask us to close your account and the account row goes with them. Backups age out on their own schedule.
Contact
Requests go to the address on your account until a published contact address exists. See also the terms.