Privacy Policy
This Privacy Policy describes how Generative Metrics — operated by Infiquik, registered in Sharjah, United Arab Emirates — ("we", "us", "our") collects, uses, and handles information when you use our website and AI crawler access audit services. It is part of our Terms of Service.
Information We Collect
Information You Provide
- Account information (your email address and sign-in method) when you register
- URLs you submit for audit analysis
- Client share-link settings (which reports you share, and with whom), if you use client share links
- Payment information — payments are processed by our payment provider, Stripe; we receive billing status and identifiers, not your full card details
- Messages you send us, for example through the contact form or support email
Information Collected Automatically
- Technical data from website audits (page content of the URLs you submit and are authorized to have audited — including protected pages accessed through access you configure). Our scanner fetches only the URLs you submit for audit: requests it makes for itself carry a Generative Metrics user-agent string, probes measuring a specific AI actor carry that actor's published user agent, and the rendered-page capture uses a standard browser identity — each by design.
- Standard server logs and analytics (for example, IP address, request timestamps, and user agent)
- Essential cookies and similar technologies, such as sign-in session cookies, needed to operate the Service
How We Use Information
We use collected information to:
- Provide AI crawler access and machine-readability audit, diagnosis, and remediation services
- Operate accounts, subscriptions, billing, monitoring, client share links, and the API
- Process payments and manage accounts
- Improve our audit algorithms and product quality — for example, from aggregated, de-identified usage patterns. This use does not include training on or publishing the page content you submit
- Send service and security notices, and respond to your requests
Where privacy law requires a lawful basis for this processing, we rely on: the performance of our contract with you; our legitimate interests in operating and securing the Service; and our legal obligations.
We do not sell your personal information, and we do not use the page content you submit to advertise to anyone.
How We Share Information
We share information only with:
- Service providers that operate parts of the Service for us: Stripe (payments), Resend (email delivery), Supabase (database and authentication), Vercel (hosting), Cloudflare (edge and DNS), Sentry (error monitoring), a Playwright-based browser-rendering service (rendered page captures for audits; hosting provider identified in DPA Annex III), and Upstash Redis (queues, admin audit logs, and rate limiting keyed by hashed IP addresses)
- Professional advisers, or authorities and courts, where the law requires it or to protect rights, property, safety, or security
- A successor entity in a merger, acquisition, or sale of assets, under this Policy
Data Retention
Audit results are retained according to our current retention policy. Raw fetched page content is kept only as long as needed to produce, verify, and support your audit; raw fetched page content is purged automatically thirty (30) days after the scan that fetched it. Audit results, sealed evidence bundles, and letters on record are retained until you delete your account. When you close your account, we delete your account and audit data within 30 days — except (i) minimal tombstone records that keep previously issued evidence seals verifiable, (ii) billing and transaction records kept as long as tax, accounting, or other law requires, and (iii) data under legal hold: where a dispute, investigation, or legal claim is ongoing or reasonably anticipated, deletion of the data needed to establish, exercise, or defend it is suspended until the matter closes. Signed-in users can download a JSON copy of their account data or permanently delete their account and its associated audit data from Settings → Privacy & data. That export covers account, scan, and finding data; it does not include raw page captures or the full sealed evidence bundles, which remain viewable and downloadable through the product. You can also request deletion of your data by contacting us.
Deletion is never silent: when something is removed, a tombstone record of the removal may be kept — a minimal record that data was removed, not the data itself — so that previously sealed evidence stays verifiable.
When a Paid Plan Ends
When a paid subscription ends, weekly monitoring, new audits, and client share links stop. A reactivation window then begins — currently 60 days. Everything is preserved during the reactivation window: sealed evidence bundles stay downloadable and verifiable, your scan history and letters on record remain the audit trail, and past classifications stay attached to their scans. Resuming the plan during the window restores everything, including client folders and share links. When the window ends, your account is deactivated, but your data is retained as sealed records — nothing is deleted at that point. Raw fetched page content continues to purge automatically at 30 days as described above, and you can delete everything at any time from Settings → Privacy & data.
International Transfers
We and our service providers may process personal data in countries other than your own, including the United States. Where data protection law requires a transfer mechanism for such transfers, we rely on safeguards such as standard contractual clauses or the equivalent safeguards offered by those providers, together with technical measures.
Children's Data
The Service is not directed to children. You must be at least 18 years old to use it (see our Terms), and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.
Security
We use technical and organizational measures appropriate to the Service, such as encryption in transit and provider access controls, to protect personal data. No method of storage or transmission over the Internet is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
Depending on where you live, you may have rights over your personal data, such as the rights to access, correct, export, or delete it, and to object to or restrict certain uses. The Service gives you self-serve tools for the most common of these: you can download a JSON copy of your account data or permanently delete your account and its associated audit data from Settings → Privacy & data at any time. For anything else, or if you cannot use the self-serve tools, contact us (see Contact below) and we will respond as the law requires. You can opt out of non-essential email (for example, product updates) at any time through unsubscribe links or your account settings; we still send essential service and security notices.
Changes to This Policy
We may update this Privacy Policy as the Service changes. We will post the updated version on this page and update the date at the top; material changes will also be announced on the site and by email.
Contact
For privacy-related questions, contact us through our website or at [email protected].