Privacy Policy

Introduction

SiteAgent AI (“SiteAgent AI”, “we”, “us”) helps businesses see and improve how AI assistants such as ChatGPT, Perplexity, Gemini, Claude, Google AI Overviews and Microsoft Copilot describe and recommend them. This policy explains what data we collect when you use our website (siteagentai.com) and our app (app.siteagentai.com), how we use it, who we share it with, and the choices you have. Questions: support@siteagentai.com.

1. Data we collect

• Account data: your name, email address and password (stored only as a secure hash), and, if you turn on two-factor sign-in, an encrypted two-factor secret.
• Workspace data you enter: organizations, team members you invite, projects, website addresses, competitors, the questions (prompts) you track, brand facts, claim reviews, report schedules, branding (name, colour, logo) and notification settings.
• Data the service produces for you: answers we collect from AI assistants for your prompts, the brands, claims and sources found in them, crawls and audits of your website's public pages, scores, recommendations, alerts and reports, and usage metering (tokens and estimated cost per AI call). Our crawler fetches only publicly accessible pages, identifies itself in its user agent, and respects robots.txt.
• Google data you choose to connect: see section 3, Google user data.
• Free website check: the address you enter, the result, your email address if you ask for the full report, and a one-way hashed identifier of your network address used only to limit abuse.
• Billing: when you subscribe, Stripe processes your payment details. We receive your plan and billing status, never your card number.
• Technical data: IP address, browser and device information, and security logs (for example sign-ins), used to run, secure and troubleshoot the service.
• Cookies and local storage: a sign-in cookie that keeps you logged in, and local storage for preferences such as theme and the selected organization. Our website uses Vercel Web Analytics, which counts page views without cookies. We don't use advertising cookies or trackers.

2. How we use data

• To provide the service: run your prompts on AI assistants, analyze the answers, audit your website, and show dashboards, alerts, reports and recommendations.
• To send the emails you ask for (report emails, alerts, invitations) and essential account emails (verification, password reset, security notices).
• To secure the service, prevent abuse, enforce plan limits and fix problems.
• To bill you for paid plans.
• To improve the product using aggregated usage information.

We don't sell personal data, and we don't use your data for advertising.

3. Google user data

On the AI Traffic page, a project member can connect a Google account to show the visits AI assistants send to their website, next to their Google Search results. Connecting is optional, and it is always started by you.

What we access

We request only these read-only permissions (scopes):

• openid and email: the email address of the Google account you connect, so the app can show which account is connected.
• https://www.googleapis.com/auth/analytics.readonly (Google Analytics): the names and IDs of the Analytics accounts and properties you can access, so you can pick one. For the property you choose, we read aggregated reports: daily sessions, engaged sessions and key events by traffic source, and landing pages visited from AI assistants.
• https://www.googleapis.com/auth/webmasters.readonly (Google Search Console): the list of sites you can access, so you can pick one. For the site you choose, we read aggregated Search performance: daily clicks, impressions and average position, and your top search queries.

These reports are aggregated by Google. We don't receive data about individual visitors. SiteAgent AI can't change anything in your Google account.

How we use it

Only to show you, and the members of your organization, your AI and Google Search traffic in the app; in the PDF reports and report emails you create; and in CSV exports you download. We don't use Google user data for advertising. We don't sell it. We don't use it to develop, improve or train generalized or non-personalized AI or machine-learning models. We don't send it to AI providers.

How we share it

We don't share Google user data with third parties, except: with the members of your organization; with the people you send reports to or share report links with; with our infrastructure providers that host and process the data on our behalf (listed in section 4); when required by law; or as part of a merger or acquisition, with notice to you.

How we store and protect it

The Google authorization (refresh) token is encrypted before it is stored. Synced numbers are stored as daily totals in our database, encrypted in transit and at rest by our hosting provider. Access is limited to the service itself. People at SiteAgent AI don't read your Google data except with your permission (for example to help with a support request), when needed for security, or to comply with the law.

Retention and deletion

We keep the last 90 days of synced numbers while the connection is active. When you click Disconnect Google, we revoke our access with Google and immediately delete the stored token and all synced Analytics and Search Console data for that project. Deleting a project, an organization or your account also deletes its Google data immediately. You can also remove our access at any time from your Google Account permissions; syncing then stops, and you can disconnect in the app to delete the stored data.

Limited Use

SiteAgent AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Service providers

We use these providers to run the service. They process data only on our instructions:

• Railway: application hosting and databases.
• Vercel: website hosting and privacy-friendly page analytics.
• Resend: sending email.
• Stripe: payments.
• Sentry: error monitoring.
• AI providers (OpenAI, Anthropic, Google Gemini, Perplexity, and SerpApi for Google AI Overviews, AI Mode and Microsoft Copilot): we send them the prompts you track to collect AI answers. If you use the AI claim check, we also send the claims and the brand facts you entered. We don't send them your account details or your Google data.

5. Other sharing

Data in an organization is visible to its members according to their role. Report links and report emails share what you choose with the people you choose. We may disclose data if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, with notice to you.

6. Retention

We keep your data while your account is active. Some records are pruned automatically, for example crawl details after 90 days and security logs after one year. Deleting a project permanently deletes its data. When you delete your account or an organization, it disappears from the service immediately, and we permanently erase the remaining data within 30 days of a request to support@siteagentai.com. Google data is always deleted immediately (section 3). Security log entries are kept for their retention period with the reference to your account removed.

7. Security

We use encryption in transit (HTTPS), hashed passwords, encrypted secrets and tokens, role-based access, optional two-factor sign-in, and audit logs. No system is perfectly secure, but we work to protect your data and will notify you of a breach that affects it as required by law.

8. Your choices and rights

• Access and export your data with the CSV exports and reports in the app.
• Correct your account and workspace data in the app.
• Delete your account in Settings → Danger zone, or ask us to.
• Disconnect Google at any time (section 3).
• Turn report emails, alerts and the weekly digest on or off in the app.

Depending on where you live (for example California, the EU or the UK), you may have further rights, such as to object to or restrict processing. To exercise any right, write to support@siteagentai.com. We answer within 30 days.

9. Children

SiteAgent AI is a business service and is not meant for anyone under 16. We don't knowingly collect their data.

10. Where data is processed

SiteAgent AI is based in the United States, and our providers may process data in the United States and other countries, with appropriate safeguards where the law requires them.

11. Changes and contact

If we change this policy in a meaningful way, we'll update the date above and tell account owners by email or in the app before the change takes effect. Contact: support@siteagentai.com. See also our Terms of Use.