Privacy Policy

Aug 9, 2026

Effective date: August 9, 2026

1. Overview

AI Search Vitals ("AI Search Vitals", "we", "us", or "the Service") provides tools for monitoring how configured AI models answer saved prompts, mention brands and competitors, and cite online sources. This policy explains what data we process when you use the Service.

Do not submit passwords, private keys, health records, financial account details, or other sensitive information in a prompt.

2. Data We Collect

We may collect and process:

Account data: name, email address, profile image, authentication records, locale, and account settings.
Workspace and project data: brand names, public domains, competitor names, countries, languages, tags, and project configuration.
Prompt and monitoring data: saved prompts, run schedules, model and provider identifiers, raw AI answers, extracted brand or competitor mentions, citations, source URLs, timestamps, errors, token usage, and estimated cost.
Usage and device data: pages and features used, IP address, browser and device information, referrer, diagnostic logs, and security events.
Billing data: plan, subscription status, transaction identifiers, invoices, and limited billing metadata. Payment card or account credentials are normally collected directly by the payment processor rather than by us.
Support communications: messages and files you send when requesting support.

3. How We Use Data

We use data to:

provide accounts, monitoring runs, dashboards, exports, and support;
send prompts to the AI provider and return or analyze its response;
calculate mention, citation, usage, and trend metrics;
process subscriptions and enforce plan limits;
secure, debug, maintain, and improve the Service;
communicate service, billing, security, and policy updates; and
comply with law and protect users, the Service, and third parties.

Where applicable, we process data to perform our contract with you, based on legitimate interests in operating and securing the Service, with consent, or to meet legal obligations.

We do not sell personal information. We may share data only as needed with service providers and for legal or safety reasons.

The Service may use:

Cloudflare for hosting, networking, storage, queues, and security;
OpenRouter and the model providers selected through it to process monitoring prompts and return AI answers;
authentication, email, analytics, error monitoring, and customer-support providers configured for the deployment; and
payment processors such as Stripe, PayPal, or Creem when enabled.

A monitoring request may be processed under the relevant provider's own terms and privacy policy. We may also disclose information in response to lawful requests, to investigate abuse, or as part of a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.

5. Cookies and Local Storage

We use cookies or similar storage for authentication, security, language and interface preferences, and essential product functionality. Optional analytics or marketing technologies, when enabled, are subject to any consent controls required by applicable law.

6. Retention

We retain account and monitoring data while your account is active and as needed to provide the Service. We may retain billing, security, backup, and legal records for longer periods where required. When data is deleted, residual copies may remain temporarily in backups or logs until their normal expiration.

7. Security

We use reasonable technical and organizational safeguards, including access controls and encrypted transport where supported. No online service can guarantee absolute security. You are responsible for protecting your credentials and for promptly reporting suspected unauthorized access.

8. International Processing

Our providers may process data in countries other than your own. Where required, we use available contractual or legal safeguards for cross-border transfers.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export certain personal data, or withdraw consent. You may update some information in account settings or contact us. We may need to verify your identity before completing a request.