Who is responsible
AI Visibility is operated by the business operating AI Visibility ("we"). We decide what personal data this site collects and why, which makes us the controller of it. Use the contact details at the bottom of your report for anything in this policy.
What we collect, and when
Three moments on this site involve personal data. Nothing else asks for any.
When you run a check
The website address you enter and the region you pick. We also record which advert or link you arrived from (the campaign name in the URL, and the page that referred you), and a one-way hash of your network address. The hash lets us count checks per visitor for rate limiting; the address itself is never stored and the hash cannot be turned back into it.
When you open the PDF
Your work email address and your agreement that we may contact you about the report. We record the time you gave it. If you click a plan afterwards, we record which one.
When you use a free tool
The domain or URL you enter. It is fetched, checked and shown to you; it is not stored beyond the server log.
What we do not collect
No account, no password, no payment details, no cookies of our own. The site uses your browser's local storage to remember your check so you can come back to it; that stays on your device.
What we use it for
- To run the check: we read the public pages of the website you entered, write questions a buyer in that category would ask, and put them to AI answer engines.
- To hand the report back: the finished report is kept so you, and anyone who checks the same website again inside the rescan window, get it without a second run.
- To follow up: your email is used to contact you about your report and what could be done about it. Reply to any message to be removed, and we stop.
- To know what works: the campaign name on your check tells us which advert brought you, so we can spend on the ones that do.
- To keep the site up: the hashed address and request counts stop one person or script running thousands of checks.
Our legal basis
Where a legal basis is required, we rely on consent for the email follow-up (you tick a box to give it and can withdraw it by replying), on our legitimate interest in running and protecting the service for the check itself and the rate limiting, and on our legitimate interest in measuring advertising for the campaign name, with consent where local law requires it for advertising cookies.
Who else sees it
We do not sell personal data. These parties process some of it on our behalf or receive it to provide their service:
- AI answer engines: OpenAI, Perplexity and Google. They receive the website address you entered and the buyer questions we wrote. They do not receive your email.
- Hosting: the server, the reports and the lead list are held by our hosting provider in the region shown in your report footer or available on request.
- Email: alerts to us and any follow-up to you go through an email service provider.
- Advertising and analytics: when configured, this site loads Google Analytics, Google Ads and Meta tags. They set their own cookies, see the pages you visit here and the events on them (a check started, a report opened, a plan clicked), and are governed by their own privacy policies. They do not receive your email address from us.
How long we keep it
- Reports: until you ask for them to go, so the same website is not scanned twice for nothing and so you can come back to yours.
- Your email and check record: until you ask, or until we have not heard from you for two years, whichever comes first.
- Request counts and the hashed address: rolling, and only for the windows the rate limits use (an hour, a day).
- Server logs: thirty days.
What you can ask for
To see what we hold about you, to have it corrected, to have it deleted, to stop the follow-up, or to have your data handed over in a usable form. Use the contact details at the bottom of your report, naming the website you checked, and we act within thirty days. If you are in a jurisdiction with a data protection authority you may also complain to it.
Deleting your record removes your email, your check record and the report for that website. It does not remove the aggregate figures a report may already have contributed to a published data page, which do not identify you.
Children
This is a business service. We do not knowingly collect data from anyone under 16, and we delete it on request if we have.
Changes to this policy
The date at the top is the date this version took effect. If we change what we collect or why, the date changes and, where we hold your email, we tell you.