Privacy Policy · samurAI visibility

Short version: We use the information needed to provide and secure samurAI visibility, prepare AI-assisted scans, manage accounts and purchases, and send requested service messages. We do not sell personal information or use customer submissions to train our own AI models. If you connect Google Analytics or Search Console, we only read that data to show your results and choose what to write, under Google's Limited Use rules.

1. Who we are

samurAI visibility is an unincorporated service operated jointly by Omer Eshed and Matanel Rogovoy in Israel. We jointly determine how personal information is used for the service.

For privacy questions or requests, call +972 54-621-4411 or email hello@samuraivisibility.com.

2. What we collect

We collect information you provide, information created through use of the service, and public information from websites you ask us to analyze.

Account and acceptance details: email address, authentication records, and the date, source, and version of the Terms and Privacy Policy accepted.
Business and scan details: website URL, business name, category, market, location, prompts, scan inputs, results, reports, and suggested fixes.
Free-scan delivery details: the email address supplied for the requested scan and the random report identifier used in its capability link.
Billing details we receive: Paddle customer, transaction, subscription, price, discount, payment-status, refund, and dispute references needed for fulfilment and support.
Checkout details Paddle collects: contact and billing details, location, tax information, payment method details, purchase history, fraud-prevention signals, and other information described in Paddle's Privacy Notice. Paddle and its payment providers process full payment-card details; we do not receive or store them.
Connected account data (optional): if you connect Google Analytics, Google Search Console or a WordPress site, the access credentials for that connection and the data described in section 5.
Technical and security information: IP-derived security identifiers, browser/device information, essential cookies, logs, and events needed to operate and protect the service.

3. How and why we use information

We process account, business, scan, and billing information when necessary to provide the service or take steps you request before entering a contract. We process security and abuse-prevention information for our legitimate interests in protecting users and the service. We retain records where required by law, and rely on consent only for genuinely optional activities such as future marketing.

Providing account and required scan information is voluntary, but we cannot create an account or produce and email the requested free scan without it. We use a free-scan email address for transactional delivery, not continuing marketing unless you separately opt in. Optional context fields may be left blank. We may use de-identified or aggregated information that no longer identifies a person to understand and improve product performance.

4. AI-assisted processing

Scans use automated systems to analyze public website content and generate reports and recommendations. Depending on the scan, relevant website content, submitted business information, and prompts may be sent to OpenRouter and DataForSEO; OpenRouter may route requests to models supplied by OpenAI, Anthropic, or Google.

AI-generated output can be incomplete, outdated, or inaccurate and must be reviewed before use. Do not submit passwords, private customer records, health information, confidential material, or other sensitive information that you lack permission to share.

5. Connected accounts and Google user data

Connecting accounts is optional. You can disconnect at any time in your samurAI visibility settings, or remove our access to your Google account at myaccount.google.com/permissions.

Google Analytics (read-only): we read traffic reports for the website you connect, such as daily visits by source (for example Google search or AI assistants such as ChatGPT) and by page, to show you where visitors come from and how the articles we write for you perform. We never change your Analytics settings.
Google Search Console (read-only): we read search performance for the website you connect, such as search phrases, pages, clicks, impressions and average position, to choose which topics to write about and which articles to update. We never change your Search Console settings.
WordPress: if you connect a WordPress site with an application password, we use it only to publish and update the articles you approve (or choose to publish automatically) and to add links between articles we wrote.

Access tokens and passwords for connected accounts are stored encrypted and used only by our servers. We use Google user data only to provide these features to you. We do not sell it, use it for advertising, or use it to train AI models. We do not transfer it to others except the hosting and database providers that store it on our behalf, as required by law, or with your permission, and our team does not read it except with your permission, for security or abuse investigations, or where required by law.

samurAI visibility's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you disconnect an account, we stop accessing it and delete its stored access credentials. Data collected from that connection is deleted within 30 days of disconnecting or closing your account.

We share information only as needed with providers supporting hosting and infrastructure (including Render), authentication and database storage (Supabase), web search and AI analysis (including Google and OpenRouter), transactional email delivery (including Resend), and fraud prevention. Each provider receives only the information reasonably required for its role.

Paddle is our Merchant of Record and authorised reseller. We send Paddle the account, product, and order information needed to create checkout and fulfil purchases. Paddle sends us customer, transaction, subscription, refund, and dispute information needed to provide access and support. Paddle and samurAI visibility each act as an independent controller for the personal information processed for their respective responsibilities. Paddle's processing is governed by its Privacy Notice.

We may also disclose information when legally required, to protect rights and safety, investigate abuse, or complete a business reorganization. We do not sell personal information.

7. International transfers

Our providers, including Paddle and its group companies and payment partners, may process information in Israel, the United Kingdom, the United States, the European Economic Area, and other locations where they operate. Where applicable, we rely on adequacy decisions, contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism.

8. Retention and security

Public free scans: the delivery email, submitted business details, scan results, and capability-link identifier currently have no automatic expiry. They remain stored until deleted or de-identified after a verified request, no longer needed to operate the service, or the service is discontinued, subject to stated exceptions.
Accounts and scans: kept while the account is active; after a verified closure or deletion request, personal information is deleted or de-identified within 30 days unless a stated exception applies.
Security and application logs: normally kept for up to 12 months.
Transaction and legal records: kept for the period required by tax, accounting, payment, dispute, or other applicable law.

We use reasonable administrative, technical, and organizational safeguards, including access controls and encryption in transit. No internet service can guarantee absolute security.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of your personal information, and may withdraw optional consent without affecting earlier lawful processing. You may also complain to the Israeli Privacy Protection Authority or, where applicable, your local data-protection authority.

Email hello@samuraivisibility.com. We may verify your identity before acting. We aim to respond within the period required by applicable law and ordinarily within 30 days for GDPR requests. Some records may be retained where required for law, security, fraud prevention, or legal claims.

10. Cookies

samurAI visibility uses essential cookies for authentication, security, session continuity, and checkout state. With your consent, we use PostHog Cloud EU for product analytics and session replay to understand page use, conversion funnels, and usability problems. Analytics may include page paths, clicks, device/browser details, coarse location derived by PostHog, referral and campaign information, and pseudonymous account or device identifiers. Form inputs and page text are masked, private account/report pages are excluded from replay, and we do not intentionally send scan content, passwords, payment details, or full form values. You can allow, decline, or later change this choice using the Cookie settings link in the site footer. When you open Paddle checkout or its customer portal, Paddle may use cookies and similar technologies under its Privacy Notice.

11. Children

samurAI visibility is a business service intended for adults. It is not directed to people under 18, and we do not knowingly create accounts for children.

12. Changes

We may update this Privacy Policy as the service changes. We will post the new version here and update the date above. Material changes may also be communicated through the service or by email.