Privacy Policy

AI-Fluence is operated by Media House OÜ, registered in Estonia ("we", "us"). This policy explains what we collect when you use the AI-Fluence brand monitoring service at app.ai-fluence.io, why we collect it, and what rights you have over it.

We are the data controller for the information described here. For questions, or to exercise any of the rights below, contact privacy@ai-fluence.io.

What we collect

• Account details. Your email address and, optionally, your name. Passwords are stored only as a bcrypt hash — we cannot read them and cannot recover them, only reset them.
• Monitoring configuration. The brands you add, the industry and region you describe, and the questions you choose to monitor.
• Monitoring results. The answers AI providers return to those questions, together with derived scores such as sentiment and visibility.
• Google Analytics data, only if you connect it. See the dedicated section below.

How we use Google Analytics data

Connecting Google Analytics is optional. The service works without it, and you can disconnect at any time from the settings page.

If you connect it, we request a single scope, analytics.readonly, which grants read-only access. We cannot modify or delete anything in your Analytics account, and we do not attempt to.

We use this access for one purpose: to show you how visitors reach the pages you publish. Specifically, we read:

• Sessions and page views for the GA4 property you select
• The page paths those sessions landed on
• The traffic source of each session, so we can identify visits arriving from AI assistants and search engines
• Engagement time and key events (conversions), where your property records them

We store the resulting aggregate figures so we can chart them over time, along with the OAuth tokens needed to keep the connection working and the property ID you chose. We do not read or store individual visitor records, user identifiers, or any personal data of your website's visitors. Google Analytics data is never sent to AI providers.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third parties who process data for us

To answer your monitoring questions we send the question text to AI providers. Your brand name and the questions you configure are visible to them; your account details are not.

• OpenAI, Anthropic and Groq — to generate and analyse answers about your brand
• Google — read-only Analytics access, when you connect it
• Hetzner Online GmbH — hosting, on servers located in the European Union

We do not sell your data, and we do not use it to train any model of our own.

Where data is held, and for how long

All data is stored on servers in the European Union. Monitoring results are kept for as long as your account is active, because their value is the trend over time. Delete your account and we remove your brands, questions, stored responses and analytics connection along with it; backups are overwritten on a rolling basis and are fully replaced within 30 days.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you may object to processing. Write to privacy@ai-fluence.io and we will respond within 30 days. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Disconnecting Google Analytics deletes the stored tokens immediately. You can additionally revoke our access at any time from your Google account permissions page.

Security

Access is restricted to authenticated accounts, traffic is encrypted in transit with TLS, and passwords are stored only as hashes. No system is perfectly secure; if a breach affects your data we will notify you and the relevant supervisory authority as the law requires.

Changes

If we change how we handle data we will update this page and its date. When a change is significant we will tell account holders by email rather than rely on you noticing.