Back to Home

Privacy Policy

Last updated: January 2, 2026

Quick Summary

What We Collect

Business info, AI responses, usage data

How We Use It

Tracking, reports, product improvement

We Don't Sell

Your data is never sold to third parties

Data Security

Encryption in transit and at rest

1. Information We Collect

Information You Provide

  • Business name, URL, industry, location
  • Contact information (name, email)
  • Account credentials (password is hashed, never stored in plain text)
  • Services and competitors you want to track

Information We Generate

  • AI visibility scores and metrics
  • Query responses from AI platforms (ChatGPT, Claude, Gemini, Perplexity)
  • Tracking history and trends
  • Usage analytics

Information from Third Parties

  • Payment data (via Stripe - we never see or store your card number)
  • OAuth data (if you sign in with Google)

2. How We Use Your Information

PurposeData Used
Provide the serviceBusiness info, AI responses
Send reportsEmail, preferences
Improve productAnonymized usage data
SecurityLogin attempts, IP addresses
Industry benchmarksAggregated, anonymized data only

3. Information Sharing

We Share With:

  • Service providers: Stripe (payments), Resend (email), Vercel (hosting), Supabase (database)
  • AI platforms: We send your business info in queries (necessary for tracking)
  • Legal authorities: Only when legally required

We Never Share:

  • Individual business data with your competitors
  • Your data with marketing companies
  • Your data with data brokers

🔒 We do NOT sell your data. Period.

4. Data Retention

Data TypeRetention
Account infoActive account + 1 year
AI query responses90 days
Analytics2 years
Support tickets3 years

After cancellation: Data deleted within 30 days (unless legally required to retain).

5. Your Rights

You have the right to:

  • Access: Request a copy of your data
  • Correct: Fix inaccurate information
  • Delete: Request deletion of your data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing emails

For California Residents (CCPA)

You have the right to know what data we collect and to opt-out of data sales. We don't sell data, so there's nothing to opt out of. To exercise other rights, email privacy@bidigest.com.

For EU Residents (GDPR)

You have additional rights including data portability and erasure. Email privacy@bidigest.com to exercise these rights.

6. Cookies

TypePurposeOpt-Out
EssentialLogin, securityCannot (required)
AnalyticsProduct improvementYes (browser settings)

7. Data Security

  • TLS 1.3 encryption in transit
  • AES-256 encryption at rest
  • Access controls and audit logs
  • Regular security assessments
  • No passwords stored in plain text (bcrypt hashing)

8. Children's Privacy

BIDigest is not for anyone under 13. We do not knowingly collect personal information from children.

9. International Transfers

Data may be processed in the United States. By using the service, you consent to this transfer.

10. Changes to This Policy

We'll notify you 30 days before material changes via email and update the "Last updated" date.

11. Contact Us

Privacy questions? Contact us:

Related Documents