Skip to main content

Legal

Privacy Policy

Last updated: November 12, 2026

Who we are

VisibleAI is a service operated by EasyVault. This policy explains what we collect, why we collect it, and how we handle it. Questions? Email support@easyvault.ai.

What we collect

  • Account information: your name (optional), email address, and authentication method (email/password or Google sign-in).
  • Business details you enter for scans: business name, website, category, and location.
  • Scan results: the AI-assistant responses returned for your prompts, the derived scores, issues, and competitor mentions.
  • Usage data: basic product events (pages viewed, scans started/completed, errors) used to operate and improve the service.

How scans work

When you run a scan, we send prompts about your business to third-party AI providers — currently OpenAI (ChatGPT), Google (Gemini), and Perplexity — to measure whether and how those assistants recommend your business. Their responses are stored as scan results in your account so you can view them, re-run scans, and track changes over time.

GEO Action Sprint requests

If you send a request for our GEO Action Sprint service, we store what you enter in the request form: your business name, website, email address, business type, website platform, your goals and any buyer questions you add, together with the time you sent it and whether you ticked the optional marketing box. We do not store your IP address with it, and the form never asks for passwords.

  • How we use it: only to process and respond to your service request: to review it, reply to you and, if you ask, prepare a written scope.
  • Marketing only if you opt in: we may send you marketing emails only if you actively tick the optional marketing box, which is unticked by default. Sending a request never signs you up. You can withdraw that choice at any time by emailing support@easyvault.ai.
  • Our database: the request is stored in our database, where only our team's server-side tools can read it. It is deleted automatically 12 months after you send it.
  • Our mailboxes: a copy of your request is emailed to our team, and any emails we exchange with you are kept in our mailboxes, including support@easyvault.ai. We review these mailboxes every month and delete request emails older than 12 months, unless you have become a client.
  • Email delivery logs: our emails are sent through our email provider (see Sub-processors), which keeps its own delivery records, such as recipient, subject and delivery status, under its own retention policy.
  • If you become a client: records needed for your agreement are kept as that agreement and the law require.
  • Deletion: email support@easyvault.ai from the address you used and we will delete your request from our database and mailboxes within 30 days.

Payments

Payments are handled entirely by Lemon Squeezy, our merchant of record. We never see or store your card number, CVV, or full billing details. Lemon Squeezy shares back only what we need to fulfill your order (order ID, plan, status, refund events, and the email you checked out with).

Where your data is stored

Account data, business details, and scan results are stored in our Postgres database hosted on Supabase, with row-level access controls that limit each user's data to their own account.

Sub-processors

We rely on the following sub-processors to run the service:

  • Lemon Squeezy — payments and subscription billing.
  • OpenAI, Google, Perplexity — AI providers queried during scans.
  • Supabase — database and authentication hosting.
  • Lovable — transactional and account emails (report-ready notifications, account emails, service-request notifications), sent through Lovable's email service.

We do not sell personal data

We do not sell, rent, or trade your personal information. We do not use your scan results to train third-party models.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated records at any time by emailing support@easyvault.ai. We honor these requests within 30 days.

Cookies and local storage

We use a small number of cookies and browser storage entries to keep you signed in (your authentication session) and to remember basic preferences. We do not use third-party advertising cookies. If we add product analytics in the future, we will list the provider here.

International data transfers

Our sub-processors operate globally, so your data may be processed in countries other than yours (including the United States and the European Union) under those providers' standard data-transfer terms.

Contact

Questions or requests about your data: support@easyvault.ai.