Privacy Policy

Account data such as name, email address, job title and organisation details. Workspace data such as domains, prompts, competitors, crawl records and reports. Enquiry data submitted through demo, contact and services forms.

Usage data including feature events used to operate the service, enforce plan limits and improve the product. We do not build advertising profiles from product events.

To provide the platform, run crawls and analyses you request, enforce plan limits, deliver reports and notifications, provide support, and communicate about your account or trial.

To process and respond to enquiries submitted through the website, including routing them to the correct team within our organisation.

Where European data protection law applies, we rely on performance of the contract with your organisation, legitimate interests in operating and improving the service, and consent where we ask for it explicitly.

Consent can be withdrawn at any time through the controls described in this policy.

Organisation data is isolated at the database level using row level security. Members can only access records belonging to organisations where they are authorised.

Demonstration data is never mixed with your organisation's records, and every metric is labelled with its source so a report can never overstate what is connected.

We use infrastructure, payment and email providers to operate the service. Provider API keys and secrets are held server-side only and are never exposed to the browser.

We select processors that provide appropriate safeguards for the data they handle and we share only the minimum data each processor needs.

Data may be processed in regions where our infrastructure providers operate. Where required, transfers are made under appropriate safeguards, including standard contractual clauses.

Access is protected by authentication and server-side authorisation on every privileged action. Secrets never reach the browser, and organisation boundaries are enforced by database policies rather than interface logic.

Workspace data is retained while your organisation is active, including after a trial expires, so that it remains available if you subscribe.

You may request deletion of an organisation and its data from organisation settings, and we honour deletion requests within the period required by applicable law.

Depending on your jurisdiction you may request access, correction, export or deletion of personal data, object to or restrict processing, and lodge a complaint with a supervisory authority.

Contact us at privacy@authorityos.com and we will respond within the period required by applicable law.

The platform is intended for professional use by organisations. We do not knowingly collect personal data from children, and we will delete any such data brought to our attention.

We will update this policy as the product and legal requirements evolve. Material changes will be communicated through the platform or by email before they take effect.