Legal
Privacy policy
What we collect, why we collect it, and the control you keep over your brand and prompt data.
Last updated · 8 October 2026
1. What we collect
We collect three kinds of information:
- Account data: name, work email, organisation, role and billing details for your plan
- Workspace data: brand profiles, prompts, answer records, citations, briefs, drafts and published URLs you add
- Technical data: log data such as IP address, browser, device and the pages or endpoints you use
2. How we use it
Account data runs the service: authentication, seat management, invoices and support. Workspace data produces your dashboards, scores and reports, and powers the content loop you run.
Technical data keeps the platform secure and reliable, and tells us which features are used and which fail.
3. Brand and prompt data
Your prompts are sent to the AI systems needed to generate the answers you asked for. We do not sell your brand profiles, prompts or answer records, and we do not use them to advertise to you.
Answers we record are stored against the brand so you can trend visibility over time. You can delete a brand and its records from the workspace at any time.
4. AI processing and sub-processors
We use model providers and infrastructure processors to generate answers, store records and send email. These providers act on our instructions under contract and process only what the feature requires.
Payments are processed by Stripe and PayPal; we store identifiers and status, never full card numbers.
5. Cookies and analytics
We use strictly necessary cookies for sign-in and session security, and privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising cookies.
6. Retention
Account records are kept while your subscription is active and for the period required by tax and accounting law. Answer records and workspace content are kept until you delete them or close the account.
After a deletion request, residual copies are removed from backups within 30 days.
7. Your rights
Depending on where you live, you may request access to, correction of, export of, or deletion of your personal data, and you may object to certain processing. Contact us and we will respond within the period the applicable law allows.
8. International transfers
We operate from the United Arab Emirates and use processors in other jurisdictions. Where personal data leaves your region, we rely on contractual safeguards with those processors.
9. Security
Access is role-based, data is encrypted in transit, and workspace records are isolated per account. No system is perfectly secure, so please use a strong, unique password and report anything suspicious to us.
10. Children
The platform is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.
11. Changes and contact
We will announce material changes to this policy by email or in the workspace. Privacy questions and requests go to privacy@universal.orbitrankgeo.com.