Privacy Policy

1. Who we are

AIExposureTool ("we", "us", "our") is a web service that helps website owners audit their AI visibility and check for security vulnerabilities. Our website is aiexposuretool.com.

2. What data we collect

• Email address — when you enter it to unlock a report or create an account.
• Website URLs — the URLs you submit for scanning.
• Scan results — AI visibility scores and security findings for submitted URLs.
• Payment information — handled entirely by Stripe. We never store card numbers or bank details.
• Usage data — number of audits and scans used per month, linked to your email.

3. How we use your data

• To run AI visibility audits and security scans on submitted URLs.
• To send you your scan results and magic login links via email.
• To manage your subscription and enforce plan usage limits.
• To improve the quality and accuracy of our scanning tools.
• We do not sell your data to third parties.
• We do not use your data for advertising.

4. Scanning & passive analysis

Our security scanner performs passive, read-only HTTP checks on publicly accessible URLs you submit. We do not perform any intrusive, destructive, or unauthorized testing. Scan results are stored to allow re-scan comparisons and are accessible only to you via your account.

5. Third-party services

• Stripe — processes all payments. Subject to Stripe's Privacy Policy.
• Supabase — stores your data in a PostgreSQL database hosted on AWS.
• Resend — sends transactional emails (login links, scan results).
• Vercel — hosts our web application.

6. Cookies & sessions

We use a single HTTP-only session cookie (aiet_session) to keep you logged in. This cookie contains a secure token, not personal data. It expires after 7 days. We do not use third-party tracking or advertising cookies.

7. Data retention

We retain your scan results and account data for as long as your account is active. You may request deletion of your data at any time by emailing us at privacy@aiexposuretool.com. We will delete your data within 30 days.

8. Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, email us at privacy@aiexposuretool.com. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

9. Security

We use HTTPS for all data transmission, HTTP-only cookies for session management, and industry-standard database security. Payment processing is entirely delegated to Stripe with no card data touching our servers.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of AIExposureTool after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, email us at privacy@aiexposuretool.com.