Privacy Policy
Effective 13 October 2026
VisibleBrand.ai measures whether your brand appears in answers from AI assistants, explains why or why not, and helps you fix it. To do that it needs your account details and, if you choose to connect them, data from your Google Search Console, Google Analytics and Google Ads accounts. This page explains exactly what we collect, what we do with it, who else processes it, and how to have it deleted. We do not sell personal data and we do not use it for advertising.
Who we are
VisibleBrand.ai (“VisibleBrand”, “we”, “us”) is a product of Mawdoo3 Group. This policy covers the website at visiblebrand.ai, the application at app.visiblebrand.ai and its API. Questions about privacy go to support@visiblebrand.ai.
What we collect
Information you give us
- Account details: your email address, your name, your language, and your password. We never store the password itself, only a salted Argon2id hash of it.
- Workspace content: what you and your team enter or approve in the app: your brand and its website, competitors, topics and questions, tasks, comments, chat messages and approvals.
- Messages to us: what you write when you contact support or sales, and the address to reply to.
- Billing: payments are handled by Stripe. We receive your email address and confirmation of the plan you bought. We never see or store your card number.
Information from services you connect
When you connect a service, we read data from it with your permission. Google services are described in detail in Data from your Google account. Other services you can connect (for example your website platform, Cloudflare, GitHub, LinkedIn or Slack) are read only for the feature you connected them for.
Information collected automatically
- Server logs: for each request to the app, the time, the address requested, the result, and identifiers for your workspace and account. These keep the service secure and working.
- Security records: sign-ins, approvals and other sensitive actions are recorded with the time, the person and the IP address, so they can be audited.
- Cookies: only the ones the app needs to work, listed in Cookies. We use no advertising or third-party analytics trackers.
Data from your Google account
You can sign in with Google, and you can connect Google Search Console, Google Analytics and Google Ads. Each connection is a separate permission you grant on Google’s own screen, and you can withdraw it at any time. We only ask for read-only access where Google offers it.
Sign in with Google
Permissions: openid, email, profile. What we read: your email address, whether Google has confirmed it, and your name. We use them to create your account and sign you in. We do not keep any Google token from sign-in.
Google Search Console
Permission: https://www.googleapis.com/auth/webmasters.readonly (read-only).
- The list of Search Console properties your account can see, so we can find the one for your website.
- Search performance for that property: the search queries, pages and countries that brought visitors, with clicks, impressions, click-through rate and average position.
- Google’s index status for your website’s pages (URL Inspection).
Google Analytics
Permission: https://www.googleapis.com/auth/analytics.readonly (read-only).
- The Analytics accounts, properties and web data streams your account can see, so we can find the property for your website.
- Aggregated reports for that property: sessions, engaged sessions, engagement rate, average session duration, engagement time, page views, active users, new users and key events, by date, traffic source, channel, landing page and referring page. We do not request data about individual visitors.
Google Ads
Permission: https://www.googleapis.com/auth/adwords. Google offers no read-only permission for Google Ads; VisibleBrand only reads. It has no function that creates, changes or deletes anything in your Google Ads account.
- The Google Ads accounts you can access, and the name, currency and time zone of the one you choose.
- For that account, the last 30 days of keyword and search-term performance: the keyword or search term, match type, status, campaign and ad group names, impressions, clicks, cost and conversions.
- Historical search volume for keywords, requested through your account.
How we use Google data
We use Google data only to provide and improve features you can see in VisibleBrand:
- your Analytics, search performance and paid-search views, and the reports and digests about them;
- the questions we ask AI assistants to measure your brand’s visibility, which are based on what people actually search for;
- keyword research, content plans, recommendations and fixes that our AI agents prepare for you to approve.
We do not sell Google data, use it for advertising or to decide creditworthiness, show it to other customers, or use it to develop, improve or train generalized artificial-intelligence or machine-learning models.
Who processes Google data on our behalf
- Anthropic provides the AI models behind our agents. To prepare your reports, recommendations and measurement questions, the agents send it the Google data needed for that task, such as search queries and their figures, or Analytics totals.
- The AI assistants we measure (OpenAI, Google Gemini, Perplexity and Anthropic, some reached through OpenRouter) receive the measurement questions we write. A question may be based on a search term from your Search Console or Google Ads account. It does not include your figures.
- DataForSEO receives keywords, which may come from your Search Console or Google Ads search terms, to look up their public search volume.
People at VisibleBrand do not read your Google data except when you ask us to (for example in a support request), when it is necessary for security, or when the law requires it.
Limited Use
VisibleBrand’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storing, disconnecting and deleting
- Google access tokens are stored encrypted (AES-256-GCM) with a key kept apart from the database. Each workspace’s data is isolated from every other workspace.
- When you disconnect a Google service in Settings, we stop reading it at once, ask Google to cancel our access, and delete the tokens we held. Data we already collected stays in your workspace’s history until you ask us to delete it (see How long we keep it, and deleting it).
- You can also remove VisibleBrand’s access from your Google account at any time at myaccount.google.com/permissions.
How we use information
- To provide the service: measure, explain and improve your brand’s presence in AI answers.
- To run your account: sign-in, security, billing and support.
- To tell you about your workspace: notifications, digests and service messages.
- To keep the service safe: preventing abuse, investigating problems and keeping audit records.
- To meet legal obligations.
How long we keep it, and deleting it
- We keep your account and workspace data while your account is open.
- You can ask us to delete your account, a workspace, or the data we collected from a connected service by writing to support@visiblebrand.ai from the address on the account. We confirm the request and delete the data within 30 days, except records we must keep by law, such as invoices.
- Server logs and security records are kept for as long as needed for security and troubleshooting.
Security
All traffic to VisibleBrand is encrypted with HTTPS. Passwords are stored as Argon2id hashes, access tokens for connected services are encrypted, and each workspace’s data is isolated by the database itself. Changes our agents propose to your website are never made without an approval from your team. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you.
Your choices and rights
- Disconnect any service in Settings → Integrations, or remove our access in your Google account.
- Change your name, language and password in Settings, and sign out of every other device.
- Ask us for a copy of your data, to correct it, or to delete it, by writing to support@visiblebrand.ai. Depending on where you live you may have further rights, including to object to or restrict processing and to complain to your data-protection authority.
Where data is processed
VisibleBrand runs on servers we operate. Our service providers, including the AI providers, may process data in other countries, including the United States. We use providers that protect data under their own security and privacy commitments.
Children
VisibleBrand is a business service and is not meant for anyone under 16. We do not knowingly collect their data.
Changes to this policy
We will update this page when how we handle personal data changes, and change the date at the top. If a change affects how we use data from your Google account, we will tell you in the app and ask for your permission before the new use begins.
Contact
Write to support@visiblebrand.ai for anything about this policy or your data.