Legal

Privacy Policy

Last updated: September 10, 2026

Overview

  • AI Search Visibility Metrics (“AISVM”, “we”, “us”, “the service”) is operated by Authority LLC and is an analytics tool that helps website owners understand their SEO performance and how visible their brand is inside AI search engines. This policy explains exactly what data we collect, why we collect it, where it is stored, who can see it, how long we keep it, and what rights you have. We designed the service to collect as little personal data as possible while still functioning.

Data we collect

  • Account data: your email address, display name and a securely hashed password when you create an account with email/password sign-up.
  • Google account data: if you sign in with Google, we receive your Google account email address and display name only.
  • Google Search Console data: with your explicit, revocable permission, we read Search Console performance data for the properties YOU choose to connect. Exactly what is accessed, how it is used, shared, protected and deleted is disclosed in full in the “Google User Data” section below.
  • AI visibility data: the brand name and the tracking prompts you configure, plus the AI-generated answers and mention results we record for your site.
  • Billing data: payments are processed by Polar Software Inc. We never see or store your full card details — only the payment status and the amount.
  • Technical logs: standard server logs (IP address, timestamps, request paths) retained briefly for security and abuse prevention.

Google User Data

  • This section discloses, in the categories Google requires, exactly how AISVM accesses, uses, stores, shares, protects, retains and deletes Google user data obtained through the Google OAuth flow and the Google Search Console API.
  • Exact Google user data accessed. When you connect Google Search Console, AISVM may access: (1) your Google account email address and display name, when you sign in with Google; and (2) Google Search Console performance data for the properties you explicitly choose to connect, specifically: Search Console clicks, impressions, search queries, pages, average position, devices, and countries.
  • OAuth scope. AISVM requests only the https://www.googleapis.com/auth/webmasters.readonly scope, which is read-only access to Google Search Console.
  • Read-only guarantee. AISVM cannot modify, delete, or change your Google Search Console properties, settings, or data in any way, and it never accesses any Google service or property you have not explicitly connected.
  • How Google user data is used. Google user data is used only to: provide the AISVM dashboard and the SEO analytics you request; display Search Console performance data for your connected properties; generate reports, analytics, opportunities and other user-facing features based on that data; maintain and improve the functionality of AISVM's user-facing features; and allow you to monitor and understand your own website's SEO and search visibility.
  • How Google user data is NOT used. AISVM does not use Google user data for: advertising; targeted or personalized advertising; retargeting; selling data; data brokerage; creditworthiness or lending decisions; creating unrelated databases; or training generalized or non-personalized AI or machine-learning models.
  • Google user data is not used to develop, improve, or train generalized or non-personalized AI or machine-learning models. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
  • Sharing of Google user data. AISVM does not sell, rent, or disclose Google user data to third parties except where necessary to provide the user-facing functionality described in this Privacy Policy, comply with applicable law, or protect the security of the service.
  • AI providers. Your Search Console data is NOT sent to AI model providers such as OpenAI, Google Gemini, Perplexity, or Anthropic for AI generation. AI visibility checks use only the tracking prompt and brand information configured by the user; they do not use or transmit your Google Search Console performance data.
  • Security. Google OAuth tokens are encrypted at rest and transmitted using TLS. Access to production systems is restricted to the operator of the service, and Google Search Console data is protected using appropriate technical and organizational security measures.
  • Retention and deletion. Search Console data is retained only while necessary to provide the analytics functionality you requested. When you disconnect Google Search Console from AISVM, all synced Search Console data is deleted. When you delete your AISVM account, associated Google user data is deleted within 30 days, except where retention is required by law.
  • User control. You can disconnect Google Search Console at any time from the Settings page in AISVM, and you can revoke AISVM's access at any time through your Google account permissions (Google Account → Security → “Third-party apps and services”, or myaccount.google.com/permissions).

Where your data is stored and how it is protected

  • Your data is stored in a managed cloud database (Cloudflare D1) and encrypted in transit with TLS. Passwords are stored only as salted hashes; Google OAuth tokens are stored encrypted at rest and used solely to fetch the Search Console data you authorized.
  • Access to production systems is restricted to the operator of the service. We do not sell, rent or share your personal data with third parties, and we do not use it for advertising. We run zero third-party advertising or tracking scripts.

How we use your data

  • To show you your own SEO and AI-visibility analytics inside the dashboard.
  • To generate opportunities, reports and AI-visibility checks for the sites you connect.
  • To operate and secure your account (authentication, preventing abuse, enforcing rate limits).
  • To send service emails (payment receipts, account security notices) — never marketing you did not opt into.
  • Google user data is used only to provide or improve user-facing functionality of AISearchVisibilityMetrics.com. We do not sell Google user data, use it for advertising, targeted advertising, personalized advertising, retargeting, creditworthiness or lending decisions, create databases from Google user data, or provide Google user data to information resellers or data brokers. We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence (AI) or machine-learning (ML) models. We do not feed Google Search Console data into AI model providers.

Third-party processors

  • Google (Search Console API): source of the performance data you authorize; see the Google User Data section above for the full disclosure.
  • AI model providers (e.g. OpenAI, Google, Perplexity): when you run an AI visibility check or a Boost, ONLY the tracking prompt text and your brand name are sent to these providers to generate answers. Google Search Console data is never sent to AI model providers and is never used to develop, improve, or train generalized or non-personalized AI or ML models.
  • Polar Software Inc (payments): processes subscriptions and one-time purchases. Polar receives your payment details directly; we receive only a payment status.
  • Cloudflare (hosting, database, CDN): infrastructure provider that stores and serves the application and its data.

Data retention

  • Search Console performance data is retained while your account is active and for as long as your analytics need it. Disconnecting Search Console in Settings immediately deletes all synced Google data for your account.
  • Deleted accounts have all personal data removed within 30 days, except records we must keep for accounting/tax compliance on completed payments.

Your rights

  • You have the right to access, correct, export and delete your personal data, and to object to or restrict its processing (GDPR, and equivalent rights under CCPA and other laws).
  • You can disconnect Google access yourself at any time — both in our Settings page and from Google's own “Third-party apps and services” page in your Google account permissions.
  • To exercise any right, email us (see Contact) and we will respond within 30 days.

Children's privacy

  • The service is intended for website owners and marketing professionals. It is not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

  • If we change this policy materially — in particular if we change how we access, use, store or share Google user data — we will update the date below and notify active users by email before the change takes effect.

Contact

  • For any privacy question, data request or complaint, contact: vesa.ivanovic.seo@gmail.com.