Privacy Policy

Effective 9 August 2026 · This is the complete list of what we collect and why. No hidden trackers, no ad networks, no selling data. Ever.

What we collect, and why

Data	When	Why we need it
Email address	Signup, report email-gate, lead forms	Your login, receipts, renewal reminders, rank alerts and password reset. Marketing email only if you asked for it; every email has an unsubscribe path.
Password	Signup	Stored only as a salted hash. We cannot read it and never send it anywhere.
Google / Facebook profile	Only if you use social sign-in	We receive your name and verified email from the provider - nothing else. No posting rights, no friend lists, no tokens kept after sign-in.
Domains, keywords, competitors	When you run tools	To run the scans and tracking you asked for, and to keep your history and measured-outcome proof.
Scan results	Audits, rank checks, AI checks	Crawl data of the sites you submit (public pages only, robots.txt respected), rankings, PageSpeed and AI-visibility results.
IP address, browser type, pages used	Every visit	Security (rate limits, abuse prevention) and understanding which tools matter. Kept as raw logs briefly, then only as counts.
Payment reference and status	When you pay	To activate your plan or report. Card numbers are handled entirely by the bank-connected processor and never reach our servers.
Cookies	Session	Only functional cookies: your login session, a visitor id and short-lived security tokens. No third-party advertising or tracking cookies.

Data

When

Why we need it

Email address

Signup, report email-gate, lead forms

Your login, receipts, renewal reminders, rank alerts and password reset. Marketing email only if you asked for it; every email has an unsubscribe path.

Password

Signup

Stored only as a salted hash. We cannot read it and never send it anywhere.

Google / Facebook profile

Only if you use social sign-in

We receive your name and verified email from the provider - nothing else. No posting rights, no friend lists, no tokens kept after sign-in.

Domains, keywords, competitors

When you run tools

To run the scans and tracking you asked for, and to keep your history and measured-outcome proof.

Scan results

Audits, rank checks, AI checks

Crawl data of the sites you submit (public pages only, robots.txt respected), rankings, PageSpeed and AI-visibility results.

IP address, browser type, pages used

Every visit

Security (rate limits, abuse prevention) and understanding which tools matter. Kept as raw logs briefly, then only as counts.

Payment reference and status

When you pay

To activate your plan or report. Card numbers are handled entirely by the bank-connected processor and never reach our servers.

Cookies

Session

Only functional cookies: your login session, a visitor id and short-lived security tokens. No third-party advertising or tracking cookies.

Who processes data for us

We are self-hosted: your account, scans and reports live on our own server, not a big SaaS cloud. A feature only talks to an external processor when it has to:

Card processor (bank-connected) - payment processing. Sees payment details; we only see paid or not paid.
DataForSEO - keyword volumes, search results, backlink data. Sees the keyword or domain queried, never who asked.
Google PageSpeed - performance scores for URLs you scan.
AI model providers - AI-visibility checks and content suggestions send the queried topic or public page text, never your account details.
Email delivery (SMTP) - sends the emails described above.
Google / Facebook - only if you choose social sign-in.

No analytics networks, no ad pixels, no data brokers.

How long we keep it

Account and scan history: while your account exists, so your trends and proof-of-outcome keep working.
Raw visit logs: rotated within weeks; only aggregate counts survive.
Payment references: kept as long as bookkeeping law requires.
Deleted accounts: removed from the live database on deletion; gone from rolling backups within 30 days.

Your rights

Email iivva1616@gmail.com from your account address and we will, same week:

Show you everything we hold about your account (export).
Correct anything wrong.
Delete your account and its data (except payment records the law makes us keep).

We never sell personal data, and aggregated public statistics (like the AI Visibility Index) are anonymized so neither you nor your clients can be identified.

Changes and contact

If this policy changes in a way that matters, we post it here with a new date and email account holders about material changes. Data controller: Aerosoft, Cayman Islands · iivva1616@gmail.com.

See also the Terms of Service and Support.