AI-Primed
Sign in

Privacy Policy

What we collect when you use AI-Primed, what we deliberately never collect, and what you can do about it.

Last updated: October 19, 2026

1. Who we are

AI-Primed is operated by AI-Primed LLC, 82 WENDELL AVE, STE 100, PITTSFIELD, MA 01201, USA. For anything about your personal data, email info@ai-primed.com.

2. What we collect

  • Account data: your email address, a hashed version of your password (we never store it in readable form) or your Google sign-in identity if you use it, and your plan.
  • Profile details you choose to add: such as name, company, profile photo and alert preferences (including any Slack webhook you enter).
  • Sites you audit: the domains you submit are stored, together with what we observed on them: robots.txt content, HTTP status, structured data, headings and the other public signals described in our methodology.
  • Reports and findings generated from those audits.
  • Billing: payments are handled by Stripe. We store no card details. We keep a record of your subscription or purchase and its status.
  • AI agent visit data: if you paste access logs or install our snippet, we store only the agent name, the page path without its query string, and the timestamp. We never store IP addresses, cookies, query strings, referrers, form data, or anything about human visitors.
  • Optional product analytics: only after acceptance, we count page views and audit, sign-up and checkout steps using fixed categories. Events are anonymous, not account-linked, and exclude IP addresses, user agents, emails, audited domains and free text. Events become eligible for deletion after 90 days and are removed by the next daily cleanup. Consent proof is kept separately for one year and includes a random visitor ID, decision, policy version, timestamp and user agent. Scrubbed error reporting is a separate necessary security operation.
  • Calculator email: if you request your estimate by email, your email address and the figures you entered; nothing is sent beyond the confirmation email until you confirm.
  • Support correspondence you send us, and domain concern requests (domain, your relationship to it, email, reason and any details you add).

3. What we do not collect

  • No card numbers or bank details — Stripe handles those.
  • No IP addresses, cookies, query strings, referrers or form data from your site's visitors.
  • Nothing at all about human visitors to the sites you audit or monitor.
  • No readable passwords.
  • No advertising or cross-site tracking cookies.

4. Why we use it

To run audits and show you results; to provide your account, plan features, monitoring and alerts; to take payment; to answer support requests; to keep the service secure and working; and to publish aggregate statistics about audited domains (never your account details).

If GDPR or UK GDPR applies, our legal bases are: contract (providing the service you signed up for), legitimate interests (security, improving the service, aggregate statistics), consent (optional analytics and calculator emails, which you can withdraw at any time) and legal obligation (tax and accounting records).

5. Who we share it with

We do not sell personal data. We use these service providers (subprocessors):

  • Hosting: Lovable (Lovable Cloud)
  • Database: Lovable Cloud
  • Email delivery: Lovable Cloud email (sender domain notify.ai-primed.com)
  • Payments: Stripe
  • Error monitoring: None — errors are recorded in our own database, with web addresses, emails and quoted text stripped first
  • Analytics: No new processor — consent-based anonymous product events and consent proof stay in our existing Lovable Cloud database
  • Optional alert destinations: Slack (Salesforce), Discord, and customer-selected webhook recipients — only when the customer connects a destination; project names, dates, scores and observed drift evidence leave AI-Primed. Customer-selected recipients operate under their own terms and processing agreements.

If you create a share link, the report is visible to anyone with that link until you revoke it.

6. International transfers

Standard Contractual Clauses (SCCs) and EU-U.S. Data Privacy Framework

7. How long we keep it

  • Account data: Duration of active account plus 30-day deletion grace period
  • Audits and reports in your account: Retained for the duration of the active account unless manually deleted
  • Audits of prospect sites (for example, audits run before signing up or on behalf of prospects): 31 days from execution. This is shorter than account data.
  • AI agent visit data: 90 days from the recorded request time; import coverage metadata is retained for 90 days. Daily deletion removes expired records. Only recognized agent names/classes, sanitized page paths, timestamps, status codes and response sizes are stored. No IP addresses, full log lines, full User-Agents or query strings are retained.
  • AI Agent Test questions and AI answers: 90 days from when the test ran, then deleted. This covers the question, the assistant's full answer text, the model used and the fetch receipt. The question is sent to the AI provider (through Lovable's AI service) to get the answer.
  • Billing records: 8 years as required by tax and accounting regulations
  • Support correspondence: 3 years from inquiry closure
  • Domain concern requests: 180 days
  • Calculator emails: 90 days
  • Deletion records: 4 years for compliance audit trail

8. Your rights

You can ask to access, correct, delete or export (portability) your personal data, and object to processing based on legitimate interests. Email info@ai-primed.com. If you are in the EU or UK, you also have the right to complain to your local data protection supervisory authority.

We aim to respond to data requests within 31 days, or sooner where applicable law requires.

9. Cookies and browser storage

We ask everyone before optional first-party analytics. Necessary authentication, security and payment storage works whether you accept or reject. We remember your decision for one year with a policy version; changes re-prompt. Withdraw at any time through Privacy preferences in the footer or Privacy in Settings. Every item and its duration is listed on our Cookies page.

10. Security

Data is sent over encrypted connections, passwords are hashed, and access to stored data is restricted by account. No system is perfectly secure, and we cannot guarantee that a breach will never happen. If one affects your data, we will tell you as the law requires.

11. Children

AI-Primed is not directed at anyone under 16, and we do not knowingly collect their data.

12. Changes

We will update the "Last updated" date above and, for material changes, email account holders before the change takes effect.

Version 1.0 — effective October 19, 2026.