Privacy Policy

1. What we collect

• Account data: name, email address, and authentication identifiers from Google sign-in or magic-link email.
• Monitoring data: the domains and prompts you register. To operate the service we crawl publicly available pages of those domains (and of competitor domains for diagnostics) and store the AI-engine answers returned for your prompts.
• Free-scan data: the website URL you scan and, if you choose to receive the report by email, the email address you provide.
• Billing data: subscription status and payment metadata processed by Razorpay. Card and banking details are collected by Razorpay directly — we never see or store card numbers.
• Support conversations: messages you send through the support chat widget, so our team can respond and keep context.
• Usage and diagnostics data: pages visited and feature usage (Google Analytics), anonymized interaction patterns such as scrolling and clicks (Microsoft Clarity), and error reports (Sentry) — used to improve the product.

2. How we use it

• To provide the service: crawl the sites you register, query AI engines, generate diagnostics and content, store your results, and send your reports.
• To process payments (Razorpay) and send transactional and product emails (Resend).
• To respond to support requests.
• To secure the service, enforce limits, and prevent abuse (including Cloudflare Turnstile bot protection on the free scanner).
• To understand aggregate usage and improve the product.
• We do not sell your personal data, and we do not use your data to train AI models.

3. Who we share it with

Only service providers strictly required to run Aeotrak, each bound by their own privacy commitments:

• Supabase — database, authentication, and storage.
• Hostinger — application hosting.
• Anthropic, OpenAI, Google, Perplexity (and SerpAPI for Google AI Overviews) — AI engine queries. Your monitoring prompts are sent as queries; your account data is not.
• Razorpay — payment processing.
• Resend — email delivery.
• Slack — internal routing of support conversations to our team.
• Google Analytics & Microsoft Clarity — usage analytics.
• Cloudflare — Turnstile bot protection.
• Sentry — error monitoring (we redact authentication tokens).

We may also disclose information where required by law, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your data).

4. Cookies

We use strictly necessary cookies for authentication (session tokens) and for remembering your workspace state, plus analytics cookies from Google Analytics and Microsoft Clarity to understand how the site is used. We do not use advertising or cross-site tracking cookies. You can block analytics cookies in your browser without affecting core functionality.

5. Data retention and deletion

• Account data and monitoring history are retained while your account is active.
• On account deletion request, we delete your profile, agents, and monitoring history within 30 days, except records we must keep by law (e.g., billing and tax records).
• Free-scan records are retained for a limited period to operate the report links, then removed or anonymized.

6. Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is limited to what operating the service requires. No system is perfectly secure — if we learn of a breach affecting your personal data, we will notify you as required by applicable law.

7. International transfers

Our service providers may process data on servers located outside your country (including the United States and the European Union). Where they do, transfers rely on those providers' standard safeguards and data-processing agreements.

8. Your rights

You can access, correct, export, or delete your personal data at any time — self-serve from your dashboard where available, or by emailing hello@aeotrak.com. We respond within 30 days. Depending on where you live, you may have additional rights under laws such as India's DPDP Act, the EU/UK GDPR, or the California CCPA — including the right to complain to your local supervisory authority.

9. Children

Aeotrak is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.

10. Changes to this policy

We will post updates on this page and bump the date above. For material changes we will notify account holders by email before they take effect.

11. Contact

BoltVine Private Limited (Aeotrak) · hello@aeotrak.com