Privacy Policy

AI Search Ready (“we”, “us”) is operated by Ed Jenkinson, sole trader, registered in the United Kingdom. The service is hosted at aisearchready.io.

We are the data controller for any personal data described below. For data-protection questions, email ed@aisearchready.io.

• Account data — your email address, account type (Free / Watcher / Studio), and the timestamp you signed up. We use Better Auth (open-source) for authentication; no password is collected because sign-in is via magic link.
• Payment data — handled entirely by Stripe. We receive the Stripe customer id, subscription state, and invoice metadata. We never see your card number.
• Audit data — the public URLs you submit to be scanned. We fetch and analyse the HTML of those URLs as a normal web browser would. We retain the resulting scan report so you can return to it.
• Citation Probe data — the AI-engine queries we run on your behalf, and the responses those engines return. Used to compute citation rates per engine + per prompt. Retained per probe run.
• Google Search Console data (when you connect it) — your site's top search queries, click, impression, and ranking data, fetched read-only via the Search Console API. Only queries from sites you have verified ownership of in Google Search Console. Retained for the 28-day rolling window the API provides; never shared with third parties; never used for advertising or model training.
• Operational data — server logs (IP address, user-agent, request path) retained for 30 days for security and abuse prevention.
• Cookies — a session cookie (Better Auth) to keep you signed in, a workspace cookie remembering which domain you're focused on, and a theme cookie remembering your dark/light preference. No analytics or advertising cookies.

• We do not use Google Analytics, Mixpanel, or any third-party analytics SDK.
• We do not use advertising trackers, retargeting pixels, or cross-site tracking.
• We do not sell, rent, or share your data with marketers or data brokers.
• We do not use your Search Console data, scan data, or probe data to train any AI model.

• Contract — account, payment, scan, and probe data are necessary to provide the service you subscribed to.
• Legitimate interest — operational logs (retained 30 days) are kept to detect abuse and maintain service security.
• Consent — Google Search Console data is only collected after you explicitly authorise the connection via Google's OAuth flow. You can revoke consent at any time from your Google account or our dashboard.

We use the following sub-processors. Each handles only the data necessary for the service they provide:

• Stripe, Inc. — payment processing
• Vercel Inc. — application hosting
• Supabase Inc. — database hosting (Postgres)
• Resend (Postmark.com) — transactional email delivery
• Anthropic PBC — Claude API (Citation Probe queries)
• OpenAI OpCo, LLC — ChatGPT API (Citation Probe queries)
• Perplexity AI, Inc. — Perplexity API (Citation Probe queries)
• Google LLC — Search Console API (when you connect GSC)

We do not share Search Console data, scan reports, or probe results with any party not listed above. We have not, and will not, sell your data.

• Account data — kept while your account is active; deleted 30 days after you cancel and request deletion.
• Scan reports — kept while your account is active so you can return to them; deleted with your account.
• Citation Probe results — kept per probe run for diff/comparison; deleted with your account.
• Google Search Console data — 28-day rolling window (we don't store beyond what the API returns).
• Server logs — 30 days, then automatically purged.

You have the right to access, rectify, port, restrict, or erase the personal data we hold about you. You can also object to processing or withdraw consent at any time.

To exercise any of these, email ed@aisearchready.io. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Our sub-processors (Stripe, Vercel, Anthropic, OpenAI, Perplexity, Google) are based in the United States. Transfers of your data to the US are covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, depending on the processor.

AI Search Ready is not intended for users under 18. We do not knowingly collect personal data from children.

If we change this policy materially, we will email registered users at least 30 days before the change takes effect. Minor edits (clarifications, typos) are made silently with the “last updated” date above bumped.

For any privacy question or data-subject request, email ed@aisearchready.io.