Privacy Policy

Information you provide directly:

• –Brand name, website URL, industry description, and location — entered when you run a scan. This is the core input used to generate your AI visibility report.
• –Email address — collected only if you voluntarily provide it for report delivery or purchase. Never required to run a free scan.
• –Payment information — processed entirely by Stripe. We never receive, store, or have access to your card number, CVV, or bank details. We only receive a tokenised confirmation of a successful payment.

Information collected automatically:

• –IP address — logged server-side for rate limiting (max 3 free scans per IP per day). Stored for 7 days, then automatically deleted.
• –Scan results — the AI responses and computed visibility score generated for your brand are stored in our database to power the shareable report URL.

We do not use cookies, advertising trackers, or third-party analytics scripts. The only browser storage we use is sessionStorage to pass scan results between pages — this data is cleared automatically when you close the tab.

• –To run your AI visibility scan and generate your personalised report.
• –To store your report so it remains accessible via its unique URL (including for people you share the link with).
• –To enforce the free-tier rate limit and prevent abuse.
• –To process payments and grant access to unlocked reports via Stripe.
• –To send your report to your email address, if you requested it.
• –To improve the accuracy and quality of our AI queries over time (aggregated, non-identifiable patterns only).

We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising, profiling, or automated decision-making that produces legal effects.

Generating your scan requires sending your brand name, industry description, and location to the following third-party AI API providers as data processors:

• –Anthropic (Claude) — anthropic.com/privacy
• –OpenAI (GPT-5) — openai.com/privacy
• –Google (Gemini) — policies.google.com/privacy
• –Perplexity AI — perplexity.ai/privacy
• –xAI (Grok) — x.ai/privacy

All of the above are routed through OpenRouter (openrouter.ai/privacy), which acts as an intermediary. These providers process your inputs solely to generate a response — they do not receive your email address or payment data.

We recommend avoiding entering personally identifiable information (names, addresses, phone numbers) in the brand name or industry fields.

Scan results and rate-limit records are stored in a Supabase-hosted PostgreSQL database located in the United States. All data is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256.

Access to our database is restricted to production server processes using a service-role key. No public read access is permitted beyond the shareable report URL (which requires knowing the unique UUID).

We retain scan records indefinitely so shareable report links remain valid. Rate-limit records (IP + date + count) are automatically deleted after 7 days.

Payment processing for unlocked reports is handled exclusively by Stripe, Inc. under their Privacy Policy. When you complete a payment, Stripe notifies us via a cryptographically signed webhook, and we mark your scan record as paid in our database. We store only:

• –The timestamp of payment (paid_at)
• –Your email address, if provided to Stripe during checkout

We do not store card numbers, bank account details, or any other financial information.

FurryESA, Inc. is based in the United States. If you are accessing AIQuoted from outside the United States, your information will be transferred to and processed in the United States. We rely on the following legal bases for such transfers:

• –Contractual necessity — processing is required to perform the scan service you requested.
• –Legitimate interests — fraud prevention and service security.

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under GDPR or equivalent legislation (see Section 8).

• –Scan records — retained indefinitely to preserve shareable links. You may request deletion at any time.
• –IP rate-limit records — deleted automatically after 7 days.
• –Email addresses — retained until you request deletion.
• –Payment confirmation metadata — retained for 7 years to comply with financial record-keeping requirements.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• –Access — request a copy of personal data we hold about you.
• –Rectification — request correction of inaccurate data.
• –Erasure — request deletion of your scan records and associated data.
• –Portability — request your data in a structured, machine-readable format.
• –Objection — object to processing based on legitimate interests.
• –Restriction — request that we restrict processing while a dispute is resolved.

To exercise any right, email privacy@aiquoted.net with the subject line matching your request. We will respond within 30 days. EEA/UK residents who feel their rights have not been respected may lodge a complaint with their local data protection authority.

AIQuoted is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child under 16 has provided us with personal data, contact us at privacy@aiquoted.net and we will delete the data promptly.

We may update this Privacy Policy as our practices evolve. Material changes will be communicated by updating the “Last updated” date at the top of this page. Continued use of AIQuoted after changes are posted constitutes your acceptance of the revised policy.

For privacy-related questions, requests, or complaints: