Last updated: July 10, 2026.
Overview
This Privacy Policy explains how ai-visibility.best collects, uses, stores, and shares information when you visit the website, run an AI visibility check, create an account, purchase a plan, or contact support.
By using the service, you acknowledge the practices described below. If you do not agree, do not submit information or use account and scan features.
At a glance
- Product: ai-visibility.best, an AI visibility monitoring and AEO/GEO diagnostic service for SaaS teams.
- Data handled: account and authentication data, scan inputs, AI answer evidence, public website signals, payment records, device and usage data, and support messages.
- Main purposes: provide scans and reports, maintain accounts and entitlements, process payments, prevent abuse, support users, and improve reliability.
- Sale of data: we do not sell personal information or private scan data.
- Requests: access, correction, export, objection, or deletion requests can be sent to support@ai-visibility.best.
Information we collect
We may collect:
- Account information: name or display name, email address, authentication identifiers, profile settings, account status, locale, sign-in provider, IP address, and permissions.
- Scan inputs: website URL, product name, category, competitors, buyer prompts, and scan settings.
- Scan results: generated prompts, AI answer evidence, timestamps, detected brands, cited or observed sources, classifications, scores, and recommended fixes.
- Payment information: plan, transaction status, billing identifiers, subscription status, refunds, and entitlement records. Full card details are processed by the selected payment provider and are not stored directly by ai-visibility.best.
- Usage and device data: browser type, pages viewed, product interactions, error logs, referral URLs, UTM source, and security or rate-limit signals.
- Support communications: messages and files you send to support.
Do not submit confidential customer records, private credentials, health information, children's information, or data you are not authorized to process.
How we collect information
We collect information:
- Directly from you when you submit a domain, configure a project, create or access an account, complete checkout, change settings, or contact support.
- Automatically through server logs, security controls, cookies, local storage, referral parameters, and optional analytics.
- From service providers when authentication, payment, analytics, email, hosting, crawling, or AI providers return a status, identifier, response, or event needed to provide the service.
- From public sources when an authorized scan retrieves public websites, metadata, structured data, robots directives, citations, search results, or other public web signals.
How we use information
We use information to:
- Run requested AI visibility scans and generate reports.
- Save projects, prompt evidence, fixes, and scan history for account users.
- Process purchases, renewals, cancellations, refunds, and account entitlements.
- Detect abuse, enforce free-scan limits, protect the service, and investigate errors.
- Improve prompt quality, classification rules, product usability, and reliability.
- Respond to support, privacy, and lawful government requests.
- Send operational messages and, where permitted, product updates that can be unsubscribed from.
We do not sell personal information or private scan data.
Legal bases for processing
Where the GDPR, UK GDPR, or similar laws apply, we generally rely on:
- Contract to create accounts, run scans, provide reports, manage subscriptions, and deliver support.
- Legitimate interests to secure the service, prevent abuse, improve reliability, and communicate with business users, balanced against their rights.
- Consent where required for non-essential cookies, analytics, promotional email, or another optional use.
- Legal obligations for tax, accounting, payment, fraud-prevention, regulatory, and lawful disclosure duties.
Where consent is the legal basis, you may withdraw it for future processing. Withdrawal does not affect processing already completed lawfully.
AI providers and other recipients
Submitted prompts and public website information may be sent to AI model providers, search or crawling services, hosting providers, databases, authentication providers, analytics services, email services, and payment processors.
Depending on deployment configuration, providers may support:
- AI model inference and answer collection.
- Public website retrieval, search, and crawling.
- Cloud hosting, databases, storage, logging, and security.
- Passwordless, email/password, Google, or GitHub authentication.
- Transactional email and account notifications.
- Payment processing and subscription management.
- Google Analytics, Microsoft Clarity, Plausible, OpenPanel, or Vercel Analytics when enabled.
- Affiliate attribution when a partnership program is enabled.
Providers process information under their own terms and privacy policies. We limit shared information to what is reasonably necessary and do not intentionally send passwords or full payment-card details to AI providers.
We may disclose information to professional advisers, a buyer or successor in a business transaction, or public authorities when permitted or required by law. We do not knowingly share personal information for cross-context behavioral advertising.
Public website data
The service analyzes publicly accessible pages, metadata, robots directives, structured data, and other public web signals. A scan does not establish ownership of the scanned website. You are responsible for ensuring you have a lawful reason to submit a URL and use the resulting analysis.
Cookies and local storage
Functional browser storage supports authentication sessions, language preferences, sign-in verification state, campaign attribution, rate limiting, and interface state. Authentication sessions may remain active for up to 30 days and refresh while the account is used. Single-use magic and verification links expire much sooner.
Optional analytics or affiliate tools may set additional cookies or use similar technologies when configured. Browser controls can limit cookies, but disabling functional storage may prevent sign-in, billing, language, or dashboard features from working correctly.
Data retention and deletion
We retain information only for as long as reasonably needed:
| Category | General retention approach |
|---|---|
| Account and project records | While the account is active and for a limited period after closure to complete deletion, recover from errors, resolve disputes, or meet legal duties. |
| Scan inputs, AI evidence, reports, and fixes | While needed for project history, comparisons, retesting, and purchased access, or until deletion is requested, subject to backup and legal exceptions. |
| Authentication records | According to session, verification, security, and account-lifecycle needs. Active sessions may last up to 30 days; magic and verification links expire sooner. |
| Payment and transaction records | For the period required by payment, tax, accounting, chargeback, fraud-prevention, and legal obligations. |
| Security and abuse records | For a limited period needed to enforce limits, investigate incidents, and prevent repeated misuse. |
| Support communications | Until resolved and for a reasonable follow-up and dispute period. |
Request account or scan-data deletion at support@ai-visibility.best. Some records may be retained for tax, payment, fraud-prevention, security, backup, or legal purposes.
Security
We use reasonable technical and organizational measures, which may include encrypted transport, restricted administrative access, hashed or single-use authentication tokens, provider access controls, logging, rate limits, backups, and incident investigation.
No online service can guarantee absolute security. You are responsible for protecting sign-in links, connected accounts, devices, and exported reports.
International processing
Service providers may process information in countries other than your own. Where required, we use appropriate contractual or legal transfer mechanisms.
Your choices and rights
Depending on your location, you may have rights to:
- Access personal information and learn how it is used.
- Correct inaccurate or incomplete information.
- Delete information, subject to legal and operational exceptions.
- Restrict or object to certain processing.
- Receive portable information in a commonly used format where required.
- Withdraw consent and unsubscribe from non-essential email.
- Appeal or complain to an applicable privacy authority.
- Receive equal service without unlawful discrimination for exercising a privacy right.
Send requests to support@ai-visibility.best. We may verify your identity and will respond within the time required by applicable law. Authorized agents may submit requests where permitted, subject to proof of authorization.
Children's privacy
ai-visibility.best is intended for business users and is not directed to children under 13, or the higher minimum age required by local law. We do not knowingly collect children's personal information. Contact us if you believe a child submitted information so we can review and delete it where appropriate.
Changes to this policy
We may update this policy as the product, providers, or legal requirements change. The date at the top indicates the latest revision. Material changes may also be communicated in the product or by email.
Contact and operator details
Questions and privacy requests can be sent to support@ai-visibility.best.
The project materials currently identify the operator publicly under the ai-visibility.best brand. They do not identify a verified registered legal entity, postal address, representative, or Data Protection Officer, and this policy does not invent those details.