1. Overview
This Privacy Policy explains what information EvidentlyAEO collects, how it is used, and the choices available to you. It applies to the EvidentlyAEO platform and to the websites operated at evidentlyaeo.com.
2. Information We Collect
- Account information — email address, name, and business details provided during registration.
- Brand data — website URLs, brand keywords, and competitor lists you choose to track.
- Connected analytics — if you connect Google Analytics or another traffic source, we retrieve page-level metrics in order to calculate attribution for your account.
- Usage data — log data, device and browser information, and records of actions taken in the platform.
3. How We Use Data
We use the information described above to:
- Provide the platform and produce the analyses and reports in your account.
- Generate content recommendations based on the brand data you supply.
- Provide technical support, administer billing, and communicate about your account.
- Maintain security, prevent abuse, and meet legal obligations.
Where the GDPR applies, we process this data on the legal bases of contractual necessity (to deliver the service you have subscribed to), legitimate interest (to secure and improve the platform), and, where required, consent.
4. AI and Third-Party Model Providers
To measure how brands appear in AI answers, we send the prompts you track to the AI answer engines covered by your plan: OpenAI (ChatGPT), Perplexity, Google (Gemini and AI Overviews), Anthropic (Claude), Microsoft (Copilot) and xAI (Grok). These prompts may include your brand and competitor names. We do not send your account details, such as your name or email, to these engines.
To generate content and recommendations, we send relevant brand data and documents you upload to AI model providers selected for each task. EvidentlyAEO does not use your data to train AI models.
5. Data Security
Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest. We enforce role-based access controls, restrict production access to authorised personnel, and review our security controls on a regular basis. We do not sell brand data or personal information.
6. Sub-Processors
We use these service providers to run the platform. Each processes data only on our instructions and under a written contract.
| Provider | Purpose | Location |
|---|---|---|
| AI providers listed in Section 4 | Answer tracking and content generation | United States |
| Stripe | Payments and billing | United States |
| Google (Google Analytics) | Website analytics | United States |
| Calendly | Demo scheduling | United States |
| Infrastructure providers | Platform hosting, data storage and service email | United States |
We will update this list before adding a new sub-processor, and email paid customers at least 30 days in advance.
7. Third-Party Sharing
We do not sell, rent, or trade brand data or personal information to third parties for marketing purposes. We share information with the service providers listed in Section 6 only to the extent necessary to operate the platform, and each is contractually required to protect it. We may also disclose information where required by law or to protect our legal rights.
9. Data Retention
We retain account information and brand data for as long as your account is active or as needed to provide the service. If you delete your account, we remove your personal data and brand data from our active systems within 30 days, unless a longer retention period is required by law. Backups are purged on their normal rotation schedule.
10. Your Rights
You may access, correct, export, or delete your personal data by contacting tech.support@evidentlyaeo.com. We respond to verified requests within 30 days.
If you are in the EU or EEA, you additionally have the right to data portability, to object to or restrict processing, and to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know what personal information is collected, to request deletion, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined under the CCPA.
11. International Data Transfers
We store and process data in the United States. If you are in the European Economic Area or the United Kingdom, we transfer your data to the United States under the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), and require our sub-processors to do the same.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated to account holders before they take effect, and the effective date and version at the top of this page will be updated. Prior versions are available on request.
13. Contact Us
For privacy enquiries, including data rights requests and Data Processing Agreements:
Anvaya Labs d/b/a EvidentlyAEO, 7949 Champaign Dr., Mentor, OH 44060, United States.
Email: tech.support@evidentlyaeo.com