Privacy Policy

Last Updated: August 3, 2026

Effective Date: August 3, 2026

Version: PP-US-V1.1

This Privacy Policy ("Policy") explains how Cognitic Labs LLC ("AIvsRank," "we," "our," or "us") collects, uses, discloses, and protects personal information when you access or use our GEO/AEO SaaS platform available at https://aivsrank.com (the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Policy.

If you do not agree with this Policy, please discontinue using the Services.

1. Scope of This Privacy Policy

This Policy applies to:

  • The AIvsRank website (https://aivsrank.com)
  • Our GEO/AEO AI SaaS platform
  • All interfaces and features that we provide

This Policy does not apply to:

  • Third-party websites or services linked from our platform
  • External AI model providers, cloud vendors, or analytics tools that have their own privacy practices

2. Notice at Collection (Required under CCPA/CPRA)

We may collect the following categories of personal information:

A. Identifiers

  • Email address
  • Account identifiers
  • IP address

B. Internet or network activity

  • Browsing activity on our site
  • Log data
  • Device information

C. Commercial information

  • Subscription tier
  • Transaction records

D. User Input Content

  • Queries, keywords, prompts, and output generated by the Services

E. Geolocation (approximate)

  • Region inferred from IP address

F. Inferences

  • User preference categories
  • Usage patterns for service optimization

We use this information for:

  • Providing and improving the Services
  • Security and fraud prevention
  • Analytics and product development
  • Compliance with legal obligations

We do not sell personal information as defined under CCPA, but we may "share" information for cross-context behavioral advertising if such tools are used (we will disclose this below).

3. Personal Information We Collect

We collect information in three ways:

(1) Information You Provide Directly

  • Email, password, account details
  • Support inquiries, uploaded screenshots
  • User-generated content such as queries, keywords, inputs

(2) Information Collected Automatically

  • IP address, browser, device type
  • Pages viewed, click events
  • Usage logs, error logs
  • Cookies and tracking technologies

(3) Information from Third-Party Tools

We may receive aggregated product analytics from:

  • Microsoft Clarity for heatmaps, session replay, click, scroll, browser, and device analytics
  • Cloud providers
  • Model providers
  • Authentication services (e.g., OAuth)

We configure analytics tools to avoid intentionally collecting sensitive form inputs or payment details.

We do not collect sensitive personal information unless explicitly provided by you (not recommended).

4. Google Search Console Integration

Connecting Google Search Console is optional and begins only when you choose to connect a Google account from a private AIvsRank project. We request openid, email, and the read-only https://www.googleapis.com/auth/webmasters.readonly scope. We do not request permission to modify Search Console data.

Google user data we access

  • Your Google account identifier and email address, used to identify the connected account
  • Search Console properties available to that account and their permission levels
  • Search performance data, including date, query, page, country, device, search appearance, clicks, impressions, click-through rate, and average position
  • URL Inspection results requested by you, including indexing verdict, coverage state, canonical URLs, robots state, indexing state, and last crawl time

How we use and store Google user data

  • We use the data only to provide user-facing property selection, demand analysis, SEO evidence, URL inspection, audit, and reporting features inside your private projects.
  • OAuth access and refresh tokens are encrypted at rest and are not displayed to users, shared with advertising platforms, or sold.
  • Synced Search Console evidence is isolated to the owning AIvsRank user and project. Service providers may process it only as necessary to host, secure, and operate the Services.
  • We do not use Google user data for advertising, data brokerage, credit decisions, or surveillance.

Retention, disconnection, and deletion

  • OAuth tokens are retained while a connected Google account remains available for use in AIvsRank or is used by a project. When the last project using a selected grant is disconnected through the Search Console connection control, AIvsRank revokes that Google grant and permanently deletes its stored access and refresh tokens.
  • Disconnecting stops future synchronization. Previously synced project evidence is retained so that existing diagnoses, audits, and reports remain reproducible until you permanently delete the project or account, or submit a valid deletion request.
  • You can also revoke AIvsRank access at any time from your Google Account third-party connection settings. A later connection requires a new authorization.

AIvsRank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Use Personal Information

We use personal information for the following business purposes:

  1. Account creation and authentication
  2. Providing GEO/AEO analytics services
  3. Model processing and AI output generation
  4. Monitoring and improving platform performance
  5. Detecting and preventing fraudulent or abusive activities
  6. Customer support and communication
  7. Compliance with applicable laws

We may create aggregated or de-identified data, which is no longer treated as personal information.

6. Cookies and Tracking Technologies

We use cookies, web beacons, and local storage to:

  • Maintain your login session
  • Improve performance
  • Analyze usage patterns
  • Personalize your experience

You may disable cookies through browser settings, but some features may not function properly.

7. How We Disclose Personal Information

We do not sell personal information.

We may disclose information to:

(1) Service Providers ("Processors")

Such as:

  • Hosting providers
  • Cloud model providers
  • Analytics vendors
  • Security vendors

These parties are contractually required to use information only to provide services to us.

(2) Legal and Regulatory Authorities

When required by:

  • Court orders
  • Subpoenas
  • Governmental investigations

(3) Business Transfers

If we undergo merger, acquisition, restructuring, or asset sale.

8. Data Retention

Under CPRA, we must disclose retention periods.

We retain personal information only for as long as reasonably necessary for:

  • Providing the Services
  • Complying with legal obligations
  • Resolving disputes

9. Your Privacy Rights (CCPA/CPRA + US State Laws)

Depending on your U.S. state of residence (e.g., CA, CO, VA, CT, UT), you may have the following rights:

Right to Know

Access the personal information we collected about you.

Right to Delete

Request deletion of personal information, subject to exceptions.

Right to Correct

Request correction of inaccurate information.

Right to Opt-Out of "Sharing"

If we use cross-context behavioral advertising tools.

Right to Restrict Sensitive Personal Information

(Not applicable unless you provide such info)

Right to Data Portability

Receive your information in a usable format.

Right to Non-Discrimination

We will not treat you adversely for exercising privacy rights.

How to Exercise These Rights

You may contact us at: [email protected]

We may need to verify your identity before processing requests.

10. Children's Privacy

Our Services are not intended for children under 16.

We do not knowingly collect information from minors.

If we discover such data, we will delete it promptly.

11. Data Security

We take reasonable administrative, technical, and physical measures to protect your information, including:

  • Encryption in transit
  • Access controls
  • Monitoring and alerting
  • Data segmentation
  • Restricted employee access

However, no method of transmission over the Internet is 100% secure.

12. International Data Transfers

As a global SaaS platform, we may transfer and store data in servers located outside your region, including:

  • The United States
  • The European Union
  • Singapore or other cloud regions

By using the Services, you consent to such transfers where permitted by applicable law.

13. Changes to This Privacy Policy

We may update this Policy periodically.

We will notify you by:

  • Updating the "Last Updated" date
  • Posting updates on our website

Your continued use of the Services constitutes acceptance of the updated Policy.

14. Contact Information

If you have questions or wish to exercise privacy rights, you may contact us at:

Cognitic Labs LLC

← Back to Home