Privacy Policy

1. Overview

AI Visibility Validator ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. By using the Service, you agree to the practices described here.

2. Data We Collect

We collect the following categories of information:

• Account information: Name, email address, and password (hashed, never stored in plain text) when you create an account.
• Business report data: Business name, industry, location, and website URL that you submit to generate reports. This data is used solely to run queries against AI platforms and generate your report.
• Billing information: Payment is processed by Stripe. We store only a Stripe customer ID and subscription reference — we never see or store your full card number, CVV, or billing address.
• Usage data: Report counts, timestamps, and feature usage to enforce plan limits and improve the Service.
• Technical data: IP address, browser type, and session information for security, rate limiting, and fraud prevention.
• API keys (BYOK): If you use Bring Your Own Keys, your API keys are encrypted with AES-256 before storage and are never logged or transmitted in plain text.

3. How We Use Your Data

• To provide, maintain, and improve the Service
• To process payments and manage your subscription
• To enforce plan limits and prevent abuse
• To send transactional emails (report completion, billing events, account alerts)
• To respond to support requests
• To comply with legal obligations

We do not sell your personal data. We do not use your business report data for advertising or train AI models with your data.

4. Third-Party Services

We use the following third-party services. Each has its own privacy policy:

Business data submitted in reports (name, industry, location) is sent to AI platform APIs to generate responses. This data is subject to each AI provider's data handling policies.

5. Data Retention

• Free tier reports: Automatically deleted after 24 hours
• Starter tier reports: Retained for 30 days
• Professional tier reports: Retained for 6 months
• Agency tier reports: Retained indefinitely while subscribed
• Account data: Retained while your account is active and for up to 30 days after closure
• Billing records: Retained for 7 years as required by law

6. Cookies and Tracking

We use session cookies for authentication (via NextAuth.js) and local storage for UI preferences. We do not use advertising cookies or third-party tracking pixels. We do not use Google Analytics or similar analytics services that profile individual users.

7. Security

We implement industry-standard security practices including HTTPS for all data transmission, bcrypt password hashing, AES-256 encryption for sensitive credentials, and strict access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable measures to protect your data.

8. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your account and associated data
• Portability of your report data
• Objection to certain processing activities

To exercise these rights, email us at privacy@visibilityvalidator.com. We will respond within 30 days.

9. Children's Privacy

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If we become aware that a child has provided us with personal information, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

Privacy questions or requests? Email privacy@visibilityvalidator.com or visit our contact page.