Privacy Policy

Last updated: May 2026

1. Introduction

This Privacy Policy describes how Greg Harrison's AI Visibility Agency ("we," "us," "our," or the "Agency") collects, uses, processes, and shares data through our platform and services. Our platform helps businesses optimize their visibility in AI-powered answer engines by managing their digital profiles, products, services, and content.

We take data privacy and security seriously. This policy is transparent about our data practices, especially regarding how we process and share client data with AI models and external services.

2. Data We Collect

Agency Staff and Admin Users:

  • Name, email address, and account credentials
  • IP address and device information for security and audit purposes
  • Activity logs including login times, actions taken, and data accessed

Client Users:

  • Name, email, and contact information
  • Limited access to their own client's data only
  • Activity logs for their own client profile

Client Business Data (collected and managed by Agency Staff):

  • Company name, industry, location, and website URL
  • Business description, services, products, and pricing
  • Company leadership names and roles (publicly available information)
  • Social media profiles (LinkedIn, Twitter/X, Facebook, Instagram, YouTube)
  • Google Business and Google Search Console profiles
  • Competitor information and market positioning data
  • FAQs, case studies, testimonials, and trust signals
  • Content assets including blog posts, landing pages, and marketing copy

Note: Client business data is deliberately comprehensive because it is designed to be shared with AI models. Clients authorize us to collect and process this data for AI visibility optimization.

3. How We Use Data

Internal Operations:

  • User authentication and account management
  • Security monitoring and fraud prevention
  • Audit logging and compliance tracking
  • Service improvement and feature development

AI Visibility Optimization (Core Service):

  • Building structured data profiles (entity data) for clients
  • Running AI visibility tests to measure client appearance in AI-generated responses
  • Generating AI-optimized content (FAQs, descriptions, JSON-LD markup)
  • Creating and managing the Public AI Index for client data
  • Conducting Answer Engine Optimization (AEO) audits

Reporting and Analytics:

  • Generating audit reports and performance analytics
  • Tracking AI visibility metrics and trends over time
  • Providing clients with visibility dashboards and insights
4. Sharing Data with AI Models (Critical to Our Service)

This is the core of our service. We deliberately share client business data with AI models.

What We Share:

  • Company profiles, products, services, and FAQs
  • Case studies and testimonials (where approved)
  • Generated content and marketing copy
  • Structured data (JSON-LD, schema markup)
  • AI readiness assessments and visibility scores

How We Share:

  • Direct API Calls: We send client data to language models (e.g., OpenAI's GPT models, Google's Gemini) to generate content, run visibility tests, and produce audit reports.
  • Public AI Index: We maintain a curated, structured index of approved client data that can be accessed via our public API and Model Context Protocol (MCP) servers.
  • MCP Integration: We expose client data via MCP so AI assistants and tools can query it directly in real time.
  • AI Testing: We run simulated prompts through AI models to test whether clients are mentioned in AI-generated responses, using client data to benchmark visibility.

Client Control:

  • Clients can choose which data to approve for "AI Visibility"
  • Only approved items are included in the Public AI Index
  • Clients can toggle "Approved for Public API" on individual index items
  • Clients can anonymise case studies to protect confidentiality
  • Clients receive clear approval workflows before data is shared widely

Important: By using our platform, you and your clients understand and consent to data being shared with AI models as part of the AI visibility optimization service. This is not a side effect—it is the intended purpose.

5. External Services and Data Processors

To provide our service, we use third-party services that may process client data:

OpenAI (GPT Models)

Used for content generation, visibility testing, and audit reports. Client data is sent via API to generate AI-optimized content and measure visibility in AI responses.

Google (Gemini, other APIs)

Used for alternative content generation and AI visibility testing. Data is processed according to Google's privacy terms.

Base44 (Platform Infrastructure)

Our platform runs on Base44's backend-as-a-service infrastructure. User accounts, client data, and audit logs are stored and processed by Base44.

OpenStreetMap (Address Autocomplete)

Used for location and address suggestions. Query data is processed according to OpenStreetMap's privacy policy.

Each of these services has its own privacy policy. By using our platform, you acknowledge that data will be sent to these external services as part of normal operations.

6. Data Retention
  • Active Client Data: Retained for the duration of the client relationship and for 90 days after termination, unless the client requests deletion.
  • Audit Logs and Activity Logs: Retained for 12 months for security and compliance purposes, then automatically deleted.
  • User Accounts: Retained as long as the account is active. Inactive accounts may be deactivated after 24 months of no login.
  • AI-Generated Content: Stored indefinitely as part of client records unless explicitly deleted by the agency admin.
  • Historical Audits and Reports: Retained for the lifetime of the client relationship for trend analysis and reporting.

Note: Once data is shared with AI models or included in the Public AI Index, we cannot guarantee removal from AI systems' training data or indexes beyond our direct control.

7. User Rights and Data Access

Right to Access:

Users can view their own data and their linked client's data through the platform dashboard.

Right to Correct:

Users can update and edit their own information and their linked client's business data within the platform.

Right to Delete:

Clients can request deletion of their data. However, deletion does not remove data already shared with AI models or integrated into third-party systems. Agency admins can permanently delete inactive client records.

Right to Export:

Clients can export their data in standard formats (CSV, JSON) for migration to other platforms.

To exercise these rights, contact the agency admin through your dashboard or email the primary account administrator.

8. Security
  • User authentication via secure token-based sessions
  • Role-based access control (RBAC) to restrict data visibility by user type
  • HTTPS encryption for all data in transit
  • Encrypted storage for sensitive credentials (API keys, session tokens)
  • Regular security audits and vulnerability assessments
  • Audit logging of all administrative actions and data access

While we take security seriously, no system is 100% secure. We cannot guarantee absolute protection against unauthorized access or breaches.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated to users via email or dashboard notification. Continued use of the platform after policy changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact the primary agency administrator through your dashboard.