Privacy

1. What we collect

When you run a free scan we collect the business details you enter (name, city, state, website, industry). To create an account we collect your name, business name, and email, and Supabase (our auth provider) stores your login credentials. If you upgrade, Stripe processes your payment; we never see or store your full card number.

To produce your report we read publicly available information about your business: your Google Business Profile and reviews (via the Google Places API), your website, and public directory listings, and we ask public AI assistants (ChatGPT, Perplexity, Gemini) what they say about your business.

To read the AI answers and write drafts (fixes, answer pages and review replies), we send the AI answers, the public facts about your business and review text to Anthropic. If Anthropic is unavailable we send them to Google (Gemini) or OpenAI instead. When we estimate your website’s search traffic or check Google’s AI Overviews, we send your website’s domain and the search phrases we test to DataForSEO.

If you use review requests, we store the names and email addresses or mobile numbers of the customers you enter, only to send or prepare those requests, and we never share or sell them. Each customer gets one email per request, with an unsubscribe link, and we never ask the same customer again within 30 days. We never contact an address that has unsubscribed. With “Text from your phone”, you send the text yourself from your own phone; we only write it, so a customer who wants no more texts tells you. Do not enter health details or anything beyond a name and an email or number. We do not currently sign business associate agreements (BAAs).

If you connect your Google account, you give Prominence permission to manage your Google Business Profile. We store the access tokens Google issues, and we use that access only to do what you see in the product: read your listing details, categories and reviews, and, when you approve it, update your listing, post replies to reviews and publish posts. Review text may be sent to our AI providers to draft a reply for you to approve. We do not use Google account data for advertising, we do not sell it, and we do not use it to train AI models. You can disconnect at any time in Settings, which deletes the stored tokens, and you can also remove access from your Google account’s security settings. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We also record how the site and the product are used, such as pages viewed, buttons clicked and steps completed, with PostHog. It stores a cookie and similar data in your browser to tell visits apart. We use this to find and fix problems in the product. We do not use it for advertising and we do not sell it.

If a business adds our website snippet to its own site, the snippet tells us when a visit arrives from an AI assistant such as ChatGPT or Perplexity, so the business can see that number. We store the assistant's name, the date and a one-way code made from the visitor's connection that changes every day. We set no cookie and cannot tell who the visitor is.

2. What is public

A free scan report can be read by anyone who has its link. It is not listed by search engines. On Pro, the facts page we host for your business is public, so AI assistants and search engines can read it.

3. Why we use it

To run your scan and build your report, to send or prepare the review requests you ask for, by email or text, to send account notices, to operate and improve the product, and to bill you if you subscribe. We do not sell your personal information.

4. Who we share it with

Only the service providers that run the product: Supabase (database and auth), Vercel (hosting), Stripe (payments), Resend (email delivery), PostHog (product analytics), Anthropic, Google and OpenAI (AI answers and drafts), DataForSEO (search data), and the Google and AI APIs named above. Each processes data only to provide their service to us. We share your information when the law requires it.

5. Your choices

You can access, correct, or delete your account data, or export your report, by emailing us. Deleting your account removes your organization and its data from our systems. You can unsubscribe from any non-essential email at any time.

6. Data retention & security

We keep your data while your account is active and for a reasonable period after, then delete it. We use industry-standard encryption in transit and at rest through our providers. No system is perfectly secure, but we design to minimize what we hold.

7. Changes

If we make a material change we will update this page and the date above. Continued use after a change means you accept the updated policy.