1. Overview
This Privacy Policy explains what information EvidentlyAEO collects, how it is used, and the choices available to you. It applies to the EvidentlyAEO platform and to the websites operated at evidentlyaeo.com.
2. Information We Collect
- Account information — email address, name, and business details provided during registration.
- Brand data — website URLs, brand keywords, and competitor lists you choose to track.
- Connected analytics — if you connect Google Analytics or another traffic source, we retrieve page-level metrics in order to calculate attribution for your account.
- Usage data — log data, device and browser information, and records of actions taken in the platform.
3. How We Use Data
We use the information described above to:
- Provide the platform and produce the analyses and reports in your account.
- Generate content recommendations based on the brand data you supply.
- Provide technical support, administer billing, and communicate about your account.
- Maintain security, prevent abuse, and meet legal obligations.
Where the GDPR applies, we process this data on the legal bases of contractual necessity (to deliver the service you have subscribed to), legitimate interest (to secure and improve the platform), and, where required, consent.
4. AI and Third-Party Model Providers
Delivering the service requires submitting queries to third-party AI and search providers in order to measure how brands appear in their responses.
[TO BE COMPLETED] — this section must name the AI providers used, describe what is sent to each, state whether that data is used to train their models, and state their retention periods.
5. Data Security
Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest. We enforce role-based access controls, restrict production access to authorised personnel, and review our security controls on a regular basis. We do not sell brand data or personal information.
6. Sub-Processors
[TO BE COMPLETED] — this section must list each sub-processor by name, the purpose it serves, and where it processes data, together with how customers are notified of changes.
7. Third-Party Sharing
We do not sell, rent, or trade brand data or personal information to third parties for marketing purposes. We share information with the service providers listed in Section 6 only to the extent necessary to operate the platform, and each is contractually required to protect it. We may also disclose information where required by law or to protect our legal rights.
9. Data Retention
We retain account information and brand data for as long as your account is active or as needed to provide the service. If you delete your account, we remove your personal data and brand data from our active systems within 30 days, unless a longer retention period is required by law. Backups are purged on their normal rotation schedule.
10. Your Rights
You may access, correct, export, or delete your personal data by contacting tech.support@evidentlyaeo.com. We respond to verified requests within 30 days.
If you are in the EU or EEA, you additionally have the right to data portability, to object to or restrict processing, and to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know what personal information is collected, to request deletion, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined under the CCPA.
11. International Data Transfers
[TO BE COMPLETED] — this section must state where data is processed and the safeguards relied on for any transfer out of the EEA or UK.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated to account holders before they take effect, and the effective date and version at the top of this page will be updated. Prior versions are available on request.
13. Contact Us
For privacy enquiries, including data rights requests and Data Processing Agreements:
Email: tech.support@evidentlyaeo.com
[LEGAL ENTITY NAME AND FULL REGISTERED ADDRESS TO BE COMPLETED]