Privacy Policy

We collect the minimum needed to run the product: your email if you give it to us, one strictly-necessary login cookie if you create an account, the scan data you ask us to produce, and privacy-conscious product analytics that tell us which parts of the product people actually use. No advertising trackers, no third-party tracking cookies, no selling data. Conversr AI is the data controller.

Waitlist & scans: the email address and website URL you submit, plus an optional source tag telling us which campaign brought you (from UTM parameters in the link you clicked). We use your email to deliver your report and product updates about it — one-click unsubscribe, no spam.

Accounts: email, optional name, and a securely hashed password (scrypt — we can't read it).

Payments: handled entirely by Dodo Payments, our Merchant of Record. We receive confirmation that a scan was paid for — never your card details.

Product analytics: pages viewed, features used, and funnel steps reached (for example: scan started, report unlocked), together with coarse technical context like browser, device type and country. Processed by PostHog on our behalf. If you have an account we link this to your user ID so we can support you and understand real usage; otherwise it stays pseudonymous. We mask form inputs, so what you type is not recorded. We never sell it or use it for advertising.

Scan results: the domain, scores, engine answers and structural findings for every scan. This dataset is the product: it persists, powers the public AI Visibility Index (domain + score), and feeds aggregate statistics. Scan results describe websites, not people.

One cookie: visitd_token, set only when you log in, used only to keep you logged in. It is strictly necessary for the account feature, which is why no cookie banner is required for it. We set no analytics, advertising or cross-site tracking cookies. Our analytics (PostHog) is configured to use no cookies at all — it keeps a random identifier in your browser's local storage so repeat visits aren't counted as new people. Clearing site data resets it.

Only the processors that make the product work: our hosting provider, Dodo Payments (checkout), our email delivery provider (your report), PostHog (product analytics), and the AI engine APIs we query — engine queries contain buyer questions about a website's category, not your personal data. We never sell personal data.

Account and waitlist data: kept until you ask us to delete it. Scan results: kept indefinitely — they power the public index and the longitudinal dataset. The auth cookie expires on its own (default 7 days).

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it (along with your account and waitlist entry). Email getvisitd@gmail.com from the address in question and we'll act on it within 30 days. If you believe we've mishandled your data, you can also complain to your local data protection authority.

Site owners: to remove your domain from the public index, use the same address.

Material changes to this policy will be posted here with a new date.