Privacy Policy

What you give us: your name, email and phone number, the domains you ask us to measure, business details such as name, industry and service area, facts about your business you confirm on your fact sheet, any message you send, and, when you pay by card, the cardholder name, email, phone and billing address we keep as the record of your authorisation. Card numbers go directly to the card processor and are never stored by us.

What the Service generates: audit scores, citation records, competitor and directory findings, tracked questions, content and video plans, suggested replies, and the reports tied to your account.

What we collect automatically: usage and device data, and your IP address, used for rate limiting, abuse prevention and security. The optional AI-traffic pixel a business installs on its own site is cookieless and session-scoped; it records that a visit came from an AI assistant and whether it led to a contact, never who the visitor is.

About your website: to build your fact sheet and measure you, we read the public pages of the site you give us and the public answers AI assistants give about it.

To run and deliver your audits, scans, reports and plans; to email you results, account notices and billing messages; to operate, secure and improve the Service; to prevent abuse; and to meet legal obligations.

If you run a free audit, we may also send you a short series of emails about your results and our plans. Every one of them carries a one-click unsubscribe, and unsubscribing stops the series at once. Account and billing notices are not marketing and continue while you have an account.

When you run a free audit or apply to work with us, your contact details and the report are also recorded in our customer relationship system so we can follow up.

We may call the phone number you give us about your audit. We text it only if you ticked the box on the form agreeing to text messages, and we keep a record of when you agreed and the words you agreed to. Reply STOP to any message to stop them. We do not sell your phone number or your agreement to be texted, and we do not share them with anyone for their own marketing.

Our own website runs analytics, an advertising pixel and a visitor-identification service; none of them run on a partner's address or inside client dashboards. The identification service may recognise a business visitor from information that visitor has previously shared with the service's data sources and match the visit to a business contact record. We use that only for our own marketing follow-up. We do not sell it, and we do not share it for cross-context behavioural advertising.

We do not sell your personal information.

If you, or an administrator of your account, connect an AI agent or tool to the Service, that agent can read the data your login can read. We record every request an agent makes, with the identity that authorised it, so you can see who read what and when, and access can be revoked at any time. What a connected agent does with the data it reads is governed by that agent's provider, not by this policy.

Some businesses use the Service through an agency or reseller that operates under its own brand. In that case the agency is the business you deal with and decides why your data is processed, and we process it on the agency's behalf to deliver the Service. The agency can see your dashboards and reports, is responsible for the emails it sends you, and answers your questions about the service. Your data is never shared with any other agency or business on the platform.

We share limited data with vendors that process it on our behalf, under contract, only to provide the Service: hosting (Vercel), database and authentication (Supabase), email delivery (Resend), bot and abuse protection (Cloudflare Turnstile), card payment processing (Easy Pay Direct, on the merchant account of 10XSearch Inc.), our customer relationship system (GoHighLevel), product and marketing analytics (PostHog, Google Analytics, Meta), and the AI and search data providers used to run audits and scans. These providers act under their own security and privacy commitments.

We keep your information for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where we must keep it for legal, security or accounting reasons. Scan results are kept so your history stays readable; a deleted account removes them.

You can update your details in your account, unsubscribe from marketing email with the link in any message, and ask for your account and personal data to be paused or permanently deleted. Depending on where you live you may have further rights, such as access, correction, deletion or portability. To exercise them, contact us.

To opt out of visitor identification on our website, email hello@dataforaisearch.com with 'opt out' in the subject. We will stop within 15 business days and confirm when it is done, and we will not use what was matched before then for any further marketing. A content blocker also stops the pixel; nothing on the site depends on it.

We use technical and organisational measures to protect your information, including access controls, encryption in transit, and row-level isolation between accounts. No method of transmission or storage is perfectly secure, but we work to protect your data.

The Service is not directed to children under 18, and we do not knowingly collect their personal information.

We may update this policy. The date above changes when we do, and for material changes we give notice where appropriate.

10XSearch Inc., doing business as Data for AI Search, 7548 S Willow Circle, Centennial, CO 80112, United States. Email hello@dataforaisearch.com.