Privacy Policy · samurAI visibility

Short version: We use the information needed to provide and secure samurAI visibility, prepare AI-assisted scans, manage accounts and purchases, and send requested service messages. We do not sell personal information or use customer submissions to train our own AI models.

1. Who we are

samurAI visibility is an unincorporated service operated jointly by Omer Eshed and Matanel Rogovoy in Israel. We jointly determine how personal information is used for the service.

For privacy questions or requests, call +972 54-621-4411 or email hello@samuraivisibility.com.

2. What we collect

We collect information you provide, information created through use of the service, and public information from websites you ask us to analyze.

Account and acceptance details: email address, authentication records, and the date, source, and version of the Terms and Privacy Policy accepted.
Business and scan details: website URL, business name, category, market, location, prompts, scan inputs, results, reports, and suggested fixes.
Free-scan delivery details: the email address supplied for the requested scan and the random report identifier used in its capability link.
Billing details we receive: Paddle customer, transaction, subscription, price, discount, payment-status, refund, and dispute references needed for fulfilment and support.
Checkout details Paddle collects: contact and billing details, location, tax information, payment method details, purchase history, fraud-prevention signals, and other information described in Paddle's Privacy Notice. Paddle and its payment providers process full payment-card details; we do not receive or store them.
Technical and security information: IP-derived security identifiers, browser/device information, essential cookies, logs, and events needed to operate and protect the service.

3. How and why we use information

We process account, business, scan, and billing information when necessary to provide the service or take steps you request before entering a contract. We process security and abuse-prevention information for our legitimate interests in protecting users and the service. We retain records where required by law, and rely on consent only for genuinely optional activities such as future marketing.

Providing account and required scan information is voluntary, but we cannot create an account or produce and email the requested free scan without it. We use a free-scan email address for transactional delivery, not continuing marketing unless you separately opt in. Optional context fields may be left blank. We may use de-identified or aggregated information that no longer identifies a person to understand and improve product performance.

4. AI-assisted processing

Scans use automated systems to analyze public website content and generate reports and recommendations. Depending on the scan, relevant website content, submitted business information, and prompts may be sent to Google Gemini and OpenRouter; OpenRouter may route requests to models supplied by Google, OpenAI, or Anthropic.

AI-generated output can be incomplete, outdated, or inaccurate and must be reviewed before use. Do not submit passwords, private customer records, health information, confidential material, or other sensitive information that you lack permission to share.

We share information only as needed with providers supporting hosting and infrastructure (including Render), authentication and database storage (Supabase), web search and AI analysis (including Google and OpenRouter), transactional email delivery (including Resend), and fraud prevention. Each provider receives only the information reasonably required for its role.

Paddle is our Merchant of Record and authorised reseller. We send Paddle the account, product, and order information needed to create checkout and fulfil purchases. Paddle sends us customer, transaction, subscription, refund, and dispute information needed to provide access and support. Paddle and samurAI visibility each act as an independent controller for the personal information processed for their respective responsibilities. Paddle's processing is governed by its Privacy Notice.

We may also disclose information when legally required, to protect rights and safety, investigate abuse, or complete a business reorganization. We do not sell personal information.

6. International transfers

Our providers, including Paddle and its group companies and payment partners, may process information in Israel, the United Kingdom, the United States, the European Economic Area, and other locations where they operate. Where applicable, we rely on adequacy decisions, contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism.

7. Retention and security

Public free scans: the delivery email, submitted business details, scan results, and capability-link identifier currently have no automatic expiry. They remain stored until deleted or de-identified after a verified request, no longer needed to operate the service, or the service is discontinued, subject to stated exceptions.
Accounts and scans: kept while the account is active; after a verified closure or deletion request, personal information is deleted or de-identified within 30 days unless a stated exception applies.
Security and application logs: normally kept for up to 12 months.
Transaction and legal records: kept for the period required by tax, accounting, payment, dispute, or other applicable law.

We use reasonable administrative, technical, and organizational safeguards, including access controls and encryption in transit. No internet service can guarantee absolute security.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of your personal information, and may withdraw optional consent without affecting earlier lawful processing. You may also complain to the Israeli Privacy Protection Authority or, where applicable, your local data-protection authority.

Email hello@samuraivisibility.com. We may verify your identity before acting. We aim to respond within the period required by applicable law and ordinarily within 30 days for GDPR requests. Some records may be retained where required for law, security, fraud prevention, or legal claims.

9. Cookies

samurAI visibility uses essential cookies for authentication, security, session continuity, and checkout state. With your consent, we use PostHog Cloud EU for product analytics and session replay to understand page use, conversion funnels, and usability problems. Analytics may include page paths, clicks, device/browser details, coarse location derived by PostHog, referral and campaign information, and pseudonymous account or device identifiers. Form inputs and page text are masked, private account/report pages are excluded from replay, and we do not intentionally send scan content, passwords, payment details, or full form values. You can allow, decline, or later change this choice using the Privacy choices link in the site footer. When you open Paddle checkout or its customer portal, Paddle may use cookies and similar technologies under its Privacy Notice.

10. Children

samurAI visibility is a business service intended for adults. It is not directed to people under 18, and we do not knowingly create accounts for children.

11. Changes

We may update this Privacy Policy as the service changes. We will post the new version here and update the date above. Material changes may also be communicated through the service or by email.