Privacy Policy

Account Information: When you register, we collect your email address and any name you provide. We use magic-link authentication — no passwords are stored on our servers.

Scan Data: When you submit a brand for scanning, we store the company name, website URL, industry, country, and product description you provide. This data is used to perform the scan and generate your AEO report.

Usage Data: We automatically collect information about how you interact with BrandAEO, including pages visited, features used, and time spent. This helps us improve the product.

Cookies: We use essential cookies for authentication and session management. We do not use tracking cookies for advertising purposes.

To provide and maintain the BrandAEO service, including processing scans, generating reports, and displaying your dashboard.

To improve our scanning algorithms, scoring methodology, and user experience based on aggregated usage patterns.

To communicate with you about your account, scans, and important product updates. We'll never spam you.

To create public brand profile pages from scan results (you can opt-out of public indexing in your dashboard settings).

To prevent fraud, abuse, and ensure the security of our platform.

AI Engine Providers: When performing a scan, we send your brand's website URL, company name, industry, and product description to third-party AI providers (OpenAI, Google, Perplexity, DeepSeek, Qwen) via OpenRouter. These providers process the data to generate responses. No personal user data is shared with them.

Service Providers: We use trusted third-party services for infrastructure (Vercel/Cloud hosting), email delivery (Resend), and database hosting. These providers have access only to the data necessary to perform their functions.

We never sell your personal data. We never share your email address or account information with third parties for their own marketing purposes.

Your account data is retained as long as your account remains active.

Scan results and reports are retained indefinitely unless you delete them or your account is deleted.

You can request deletion of your account and all associated data at any time by contacting us at [email protected]. We will process deletion requests within 30 days.

Aggregated, anonymized data derived from scans may be retained for analytics and product improvement even after account deletion.

Access: You can request a copy of all personal data we hold about you.

Correction: You can update your account information through your dashboard settings.

Deletion: You can request deletion of your account and data as described above.

Portability: You can export your scan data at any time.

Objection: You can opt-out of public brand indexing via your dashboard settings.

To exercise any of these rights, email us at [email protected].

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

We use magic-link authentication, which means we never store passwords. Each login generates a unique, time-limited link sent to your email.

While we take security seriously, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.