Privacy Policy

1. Who we are and how to contact us

AI Search Console is operated by App Creators Pty Ltd (ABN 12 703 047 803), Australia. This notice describes how we handle personal information when you visit the service, create an account, connect an integration or use a workspace.

For privacy questions, access, correction, export or deletion requests, or complaints, open a ticket through our Contact or Support page. We may need to verify your identity and authority over the account before acting.

2. Information we collect

Account and workspace information includes names, email addresses, authentication identifiers, invitations, roles, business and client details, website URLs and uploaded branding. We process prompts, scanned website content, AI responses, audit results, recommendations, tasks and report history that you create or request.

If you connect Google Analytics, we process connection credentials, property identifiers and the analytics reports you authorise us to retrieve. These can include traffic, acquisition and linked Search Console metrics. Do not include sensitive personal information or confidential client material in prompts or website submissions unless you are authorised and it is necessary.

Billing records include Stripe customer and subscription identifiers, plan, payment status and usage counts. Stripe collects payment details and billing information through its checkout and portal. Our application does not receive or store your full card number.

We and our service providers may process technical information such as IP addresses, browser/device details, request logs, errors, session identifiers and usage information. Support messages contain the information you choose to send us.

3. Why we use information

We use information to provide accounts and workspaces, run requested analyses, retrieve connected reports, manage subscriptions and usage limits, support customers, prevent misuse, maintain security and meet legal obligations.

Where European or UK data protection law applies, our legal bases, as applicable, are performing our contract, legitimate interests in running and securing the service, complying with legal obligations, and consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal.

4. Providers, integrations and public sources

Replit provides application hosting and infrastructure used to process and store application data and may route AI requests. Clerk manages authentication and receives account and session information. Stripe processes payments, subscriptions, billing addresses and transaction information.

OpenAI (ChatGPT) processes prompts and relevant business, website or report content for AI analysis. Depending on the feature used, other AI and search services can include Google (Gemini and AI Overview), Perplexity and Anthropic (Claude). Only providers involved in a particular feature receive that feature’s requests; a provider being listed here does not mean every request is sent to it or that every integration is currently available.

Google Analytics supplies reports from properties you connect. Google Search Console metrics are currently accessed through a linked GA4 property, rather than a direct Search Console connection. Google also processes connection authorisations and associated account/property information.

Reddit and Wikipedia are sources used for opportunity research. Requests may include search terms, business names, website URLs or topic context. Public source content may also be included in an AI analysis. These sources are not necessarily contracted data processors, and visiting their links is governed by their own privacy practices.

Workspace owners and authorised collaborators can access information shared within their workspaces. We may also disclose information when required by law, to protect rights and security, or as part of a business transfer subject to applicable safeguards.

Third-party services have their own privacy and retention practices. This notice does not promise that all providers have identical storage, training or deletion policies. Contact us before submitting material that requires specific contractual processing restrictions.

5. Cookies and analytics

Authentication and related browser storage help keep you signed in and maintain essential service functions. Blocking essential cookies can prevent sign-in or other features from working.

Connecting your Google Analytics property lets this application read your website’s reports; it is distinct from installing visitor tracking on AI Search Console. Any non-essential visitor tracking must be disclosed and, where required, enabled only after consent. This notice itself is not a request for consent to tracking.

6. International processing and security

We serve businesses worldwide. Hosting, authentication, AI and other service providers may process information outside Australia and outside your country, including in the United States and other locations where they operate. Applicable transfer safeguards must be addressed where required by law; we do not promise Australian-only storage.

We use access controls and other technical and organisational measures to protect information. No online service is completely secure. Please protect your account and only invite people authorised to see your client information.

7. Retention, cancellation and deletion

Cancelling a subscription or downgrading does not automatically delete saved workspace data. A plan’s history visibility window is an access restriction, not a promise to delete records after that window.

We retain information for service delivery, security, resolving disputes and applicable accounting or legal obligations. Retention depends on the type of information and these purposes; there is no single automatic deletion period for all records.

To request account or workspace deletion, open a support ticket. We will explain the scope and any information that must be retained. Copies in backups and provider systems may remain until their applicable retention cycles expire. Revoking a Google connection stops future authorised access but does not by itself delete reports already saved.

8. Your rights and complaints

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict or object to processing, and withdraw consent. We assess requests under the laws that apply and explain any lawful limitations. An agency or employer may control workspace data; we may direct a request to that organisation.

Please submit privacy complaints through our Support page so we can investigate and respond. You may also complain to the relevant supervisory authority, including the Office of the Australian Information Commissioner where applicable, or your local European/UK data protection authority.

9. Age and changes to this notice

Account holders must be at least 18. The service is for business use and is not directed at children. Contact us if you believe a child has supplied personal information.

We will update the revision date when this notice changes and provide appropriate notice of material changes. Where law requires consent for a new use, we will seek it separately.