Privacy Policy

GeniSights(“we”, “us”) provides a software service that tracks how AI assistants such as ChatGPT, Gemini, Claude, Perplexity, Exa AI and Copilot mention and describe a brand, and helps customers act on what it finds. This policy explains what personal data we handle when you visit our website or use the service, and the choices you have.

For privacy questions or requests, contact us at info@genisights.io.

Account information. Name, email address, job title, company name, website, business type, region, city, language and a password. Passwords are stored only as a salted hash. You may optionally upload a profile picture.

Workspace content you provide. Brand details, competitors, tracked prompts, alert rules, webhook destinations, agent configurations and the schedules you set.

Results we generate for you. The responses returned by AI models to your tracked prompts, the brand mentions, citations, scores and recommendations derived from them, results of website checks you enable (such as uptime and page audits), and agent run logs.

Connected-account data. If you connect a third-party account, we store the access credentials needed to operate the connection and, for Google, the connected email address and the GA4 property and Search Console site you select. See the sections on Google user data and other connected services.

AI-crawler analytics (optional). If you send us your server’s requests or upload an access log, we keep only the visits made by known AI crawlers, as daily counts per page and crawler. We do not store visitor IP addresses, full user agents or query strings, and requests from ordinary visitors are discarded on arrival.

Usage and technical data. Records of AI usage per workspace (used to enforce plan allowances), audit and security logs, and standard request data such as IP address and browser type that our servers receive.

Team members. If you invite colleagues, we process their email address and the access you grant them.

We do not intentionally collect sensitive categories of personal data, and the service is not directed to children under 16.

• To provide, operate, secure and support the service, including running your prompts and agents and displaying results.
• To authenticate you, manage workspaces and teams, and enforce plan limits.
• To send service emails such as invitations, verification, alerts you configured and important account notices.
• To detect abuse, debug problems and improve reliability.
• To comply with legal obligations and enforce our Terms of Service.

Connecting Google is optional. When you choose to connect, we ask only for these read-only permissions:

• Google Analytics (analytics.readonly) to read traffic reports for the GA4 property you select.
• Search Console (webmasters.readonly) to read search performance for the site you select.
• Email address (userinfo.email) to show which Google account is connected.

How we use it. Google data is used only to show you traffic and search reports inside your own GeniSights dashboard. We cannot modify your Analytics or Search Console data.

What we store. Encrypted access and refresh tokens, the connected email, and your selected GA4 property and Search Console site. Report data is requested from Google when you view the page and is not otherwise retained by us.

What we do not do. We do not sell Google user data, use it for advertising, share it with third parties other than the service providers needed to run GeniSights, or use it to train generalized AI models. No human reads your Google data except where you ask us for support and consent, where needed for security, or to comply with law.

Google Sheets (optional, separate). If you also connect Google Sheets for an agent, we ask for the Google Sheets permission (spreadsheets), which lets an agent add rows to, update, and read the spreadsheet you point it at. It is used only to carry out what you configure in that agent, we store its access and refresh tokens encrypted, and it is disconnected from Agent connections. The same restrictions apply: no sale, no advertising, and no model training on this data.

Disconnecting. You can disconnect at any time from the Traffic page, which deletes the stored tokens and selections. You can also revoke access at myaccount.google.com/permissions.

GeniSights’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can connect services you already use, such as WordPress, X, Facebook, Reddit, Slack, Notion, Asana, Webflow and other content or workflow tools, so that agents and publishing features can act on your behalf. Credentials are encrypted at rest and used only to perform the actions you configure. Connecting is optional, and disconnecting removes the stored credentials. Each service’s own privacy policy governs data it holds.

To run your tracked prompts and agents, we send the prompt text and related brand context to AI model providers, which may include OpenAI, Google (Gemini), Anthropic, Perplexity, Exa and Microsoft (Copilot, through Azure OpenAI), and other providers for the engines you enable. Please do not put personal data of your customers in prompts. Providers process this data under their own terms.

We also rely on infrastructure, database, email delivery and similar providers who process data on our behalf only to deliver the service. We do not sell personal data. We may disclose information if required by law, to protect rights and safety, or in a merger or sale of the business, with notice where required.

We protect data with measures including hashed passwords, encryption of stored integration credentials and webhook URLs, tenant-level isolation of workspace data in our database, and short-lived access tokens with httpOnly refresh cookies. No system is completely secure, so we cannot guarantee absolute security. If you believe your account is compromised, contact us immediately.

We use a strictly necessary httpOnly cookie to keep you signed in. We do not use advertising cookies or sell data to advertisers.

We keep account and workspace data while your account is active, and for a limited period afterwards where needed for security, legal or accounting reasons. You can disconnect integrations yourself at any time. You can also delete your account yourself under Dashboard → Settings → Delete Account. Deleting an owner account permanently erases its workspaces, tracked prompts, AI answers, connected-account credentials and the logins of invited team members; deleting a team member’s account removes only their own login. Deletion cannot be undone. Limited records may remain in routine backups for a short period, and we may keep minimal records where the law requires. For any other request about data we hold, email info@genisights.io.

Depending on where you live (for example the EEA, UK or California), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to lodge a complaint with your data-protection authority. Email info@genisights.io to exercise these rights. We will not discriminate against you for doing so.

Where we process data you put into your workspace, you are the controller and we process it on your instructions.

Our providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy. We will change the “Last updated” date above and, for material changes, notify account holders by email or in the product.

Questions about this policy: info@genisights.io.