Privacy Policy

1. Overview

This policy explains what data AEO Audit Tracker collects, why, and with whom it is shared. We collect the minimum needed to run scheduled checks and generate llms.txt files, and we do not sell personal data.

2. Data we collect

• Account data: your email address and any billing details you provide — billing details are collected and held by Creem, our merchant of record, not by us.
• Configuration data: the site URLs and phrases you register for checks.
• Site content: when you use the llms.txt generator, we crawl the pages of your site to build the files.
• Check results: the answers AI assistants return for your phrases, including whether and where your brand was mentioned.
• Usage data: job status and cost-ledger records (tokens used, provider charges), so we can bill and reconcile costs.

3. How we use it

All of the above is used to provide the service: running scheduled checks, storing and showing result timelines, generating llms.txt files, and reconciling provider costs. Configuration data and site content are also sent to third-party AI model providers (Anthropic; OpenAI when configured) as part of performing checks — see section 4.

4. Who we share it with

• Neon (Postgres hosting): stores account, configuration, check-result and ledger data.
• Anthropic / OpenAI: your phrases, site URLs and site content are sent to their APIs so the AI assistants we query can answer with web search. Their own privacy policies apply to that processing.
• Vercel: hosts the service and its scheduled jobs.
• Creem (merchant of record): processes payments and holds billing data; Creem's terms and privacy policy apply to purchases.

5. Retention

Data is kept while your account is active so timelines remain useful. On request we delete your account data, configuration and results. Cost-ledger records may be kept in aggregated form for financial reconciliation.

6. Cookies and tracking

The website sets no tracking cookies and uses no analytics or advertising pixels. Payment processing by Creem may set its own session cookies.

7. Security

Data is transmitted over HTTPS and access to the data API is authenticated. Third-party providers are used under their own security terms.

8. Your rights

You may request access to, correction of, or deletion of your data at any time by writing to support@grasswoods.app. We respond within 30 days.

9. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

10. Changes and contact

Changes to this policy will be posted on this page with a new effective date. Questions: support@grasswoods.app.