Privacy Policy

Last updated: November 10, 2026

1. Introduction

Everyday AEO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website analysis service.

2. Information We Collect

Information You Provide to Us

• Contact Information: Email address, name, company name
• Website Information: URLs you submit for analysis
• Communication Data: Messages you send us, survey responses, feedback
• Lead Information: Company size, challenges, and other business information you voluntarily provide

Information Automatically Collected

• Technical Data: your browser's user agent string (browser type, device and operating system as your browser reports them), which we store with audits, URL submissions and lead forms. Your IP address is used temporarily in memory to limit how many requests can be made from one network and is not saved in our database; our hosting providers may record IP addresses in their own server logs.
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Analysis Data: Website performance metrics and technical analysis results

3. How We Use Your Information

We use collected information for the following purposes:

• Provide website analysis reports and AEO recommendations
• Communicate with you about our services (with your consent)
• Improve our analysis algorithms and service quality
• Respond to customer service requests and support needs
• Send marketing communications (opt-in only)
• Comply with legal obligations and protect our rights

4. Legal Basis for Processing (GDPR)

Our legal bases for processing your personal data include:

• Consent: When you opt-in to receive communications
• Legitimate Interests: To provide and improve our services
• Contract Performance: To deliver the analysis services you requested
• Legal Compliance: To meet our legal obligations

5. Information Sharing and Disclosure

Service Providers

We may share information with trusted third-party service providers including:

• Database Hosting: Supabase (data processing and storage)
• Analytics Services: Google PageSpeed Insights API
• Email Services: For delivering reports and communications
• Cloud Infrastructure: For secure data storage and processing

Legal Requirements

We may disclose your information when required by law or to protect our rights, users, or others from harm.

We do not sell, rent, or trade your personal information to third parties.

6. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Detailed audit findings: The rule-by-rule findings and category details of an audit are cleared after 12 months. The audit's address, score, grade, and the email address and user agent stored with it are kept until you ask us to delete them.
• URL submission records: Records of submitted web addresses (with the email address and user agent) are deleted after 24 months.
• Contact Information: Lead form and signup details are kept until you opt out or request deletion
• Server logs: Our application logs record a request identifier, method, path, status, duration and error code, and do not record email addresses or form contents. How long our hosting providers keep their own logs is set by those providers.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection practices

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request limitation of processing activities
• Opt-out: Unsubscribe from marketing communications at any time

9. Cookies and Tracking Technologies

We use only essential cookies necessary for site functionality. We do not use tracking cookies for advertising purposes. You can control cookie settings through your browser preferences.

10. International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes and codes of conduct

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information, including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending you an email notification (if you have provided your email address)
• Providing notice on our website

How the analyzer works with your data

This section explains in plain language what happens when you run an audit. It adds detail to the sections above and does not replace them.

What we store when you run an audit

• The audit: the web address you submitted, the scores and findings, and when it was run. Each audit has a random identifier; anyone who has that identifier can open the audit's results page. The results page does not show your email address.
• Your email address and browser details: we store the email address you enter and your browser's user agent string (the text your browser sends to identify itself) alongside the audit, and in a separate record of the submitted web address. We use the email address to limit how many audits can be run per hour and to follow up on your request. We do not store your IP address in our database; it is used temporarily, in memory only, to limit how many audits can be run from one network. Our hosting providers may record IP addresses in their own server logs.
• Forms: if you complete a lead form or a checklist, playbook or whitepaper signup, we store the details you enter there (such as name, email, company, company size and any message), and for lead forms the audit it relates to.

What we fetch from the website you submit

Our servers (not your browser) request the page you submit, its robots.txt and sitemap, and a few other public files that help us check AI readiness. These requests identify themselves as EverydayAEO-Analyzer/2.0 (+https://everydayaeo.com/methodology), so the owner of that site may see them in their logs. We only fetch public web addresses, and we do not send cookies. Please only submit sites you are entitled to analyze.

Information stored in your browser

After you give consent through our consent banner, the site may save a short list of recent audit identifiers for each domain in your browser's local storage so that you can compare a new audit with an earlier one, and a note that you dismissed the "what changed" notice. This information stays on your device; you can clear it at any time in your browser settings. If you do not give consent, we do not save it.

Who processes this data

• Vercel hosts this website.
• Railway runs the analysis service.
• Supabase stores the data described above.
• Google PageSpeed Insights receives the web address being audited, to measure page speed. It does not receive your email address.
• Ketch provides our consent banner and records your consent choices.
• Google Fonts serves the fonts used on our pages, which means your browser contacts Google when a page loads.

Keeping and deleting audit data

See Section 6 for how long we keep information. To ask us to access or delete audits, form submissions or signups associated with your email address, contact us using the details in Section 14.