Privacy Policy

1. Introduction

SeeLLM (“SeeLLM,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our AI search visibility analytics and related services.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided via OAuth)
• Profile picture (if provided via OAuth)
• Organization name and details

Marketing Website Analytics

On seellm.com, our first-party product analytics creates a persistent random visitor identifier in localStorage and a random session identifier in sessionStorage. Event records can include the page path, referrer host, UTM campaign parameters, product-interaction events, CTA identifiers, scan score or tier, page counts, and a submitted domain or its shortened hash when you use a public scan or request a snapshot.

When our API receives one of these events, it stores the source IP address only as a SHA-256 hash rather than the raw IP address, together with the request user agent and a timestamp. We use these records for product and acquisition analytics, funnel measurement, abuse prevention, and to improve the public scan and handoff experience.

Microsoft Clarity Behavior Analytics

On seellm.com, we use Microsoft Clarity for heatmaps and reconstructed session replay. This is a reconstruction from page structure and browser events, not video captured from your camera or screen. Clarity data can include pages visited and navigation, referrer and session timing, mouse movements, clicks or taps, scroll depth, selected page elements, viewport details, device type, browser and operating system, approximate location such as country, region, state, or city, and pseudonymous browser and session identifiers. Our current analytics tag supplies pseudonymous analytics client and session identifiers to connect related interactions.

We use this behavioral data to understand engagement, diagnose usability problems, and improve page layout, navigation, and conversion paths. Microsoft is the provider and behavioral analytics processor for Clarity data and can use first- and third-party cookies or similar technologies, subject to applicable consent and regional controls. Learn more in the Microsoft Privacy Statement.

Site Agent Server-Side Request Metadata

For sites you monitor through SeeLLM, the Site Agent records request metadata used to detect and classify AI crawler requests, including:

• Requested path, request method, and timestamp
• User agent and accepted-content headers
• Referrer information when present
• Network and geographic signals available from the edge provider
• Response status, content type, and content length
• Bot classification data (AI platform identification)

The Cloudflare Worker and Vercel middleware may transmit the source IP when the platform makes it available as part of the authenticated ingestion request. The ingestion service immediately creates an organization-scoped hash and does not publish or store the raw IP. Only the hash is included in the stored analytics event. Hosting and network providers may separately process connection metadata for security and service operations.

Browser Evidence and Quoted-Text Matching

When browser evidence or quoted-text matching is enabled, the Site Agent can inject a browser beacon into monitored HTML pages. The beacon sends matched text fragments, selector and hash details, the page URL, referrer, browser language, viewport dimensions, and user agent. The Site Agent adds a capture timestamp when it receives and forwards the beacon data.

Public Scans and Sampled Checks

Separately, depending on the features you use, SeeLLM performs public scans of important pages for crawler access and readability, runs sampled answer checks and sampled citation checks to see whether pages appear as sources, and reports AI referrals when a detectable referrer is present. These checks may process submitted URLs, publicly available page content, sampled answers, citations, and matched passages.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. We receive only the last four digits and expiration date for display purposes.

3. How We Use Your Information

We use collected information to:

• Provide and maintain our services
• Process your transactions
• Send service-related communications
• Detect and classify AI crawler requests
• Run public access, readability, and sampled source checks
• Generate analytics, AI referral reporting, and reports
• Improve our AI detection algorithms
• Prevent fraud and abuse
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

• Firebase (Google) - Authentication and database
• Stripe - Payment processing and tax calculation
• Google Cloud Platform - Infrastructure hosting
• Google Tag Manager and Google Analytics - Consent-controlled marketing analytics
• Microsoft Clarity - Behavioral analytics processor for heatmaps and reconstructed session replay
• Cloudflare - CDN and edge computing
• Tinybird - Analytics data processing
• Cookiebot (Usercentrics) - Consent management and cookie declaration
• Resend - Transactional email delivery
• Sentry - Error monitoring and diagnostics

Each service has its own privacy policy governing their use of data.

5. Data Retention

Raw Site Agent analytics events are subject to an automated retention limit of two years. We do not currently apply different fixed retention periods to Starter and Team. Enterprise customers may agree custom retention terms in their contract.

Marketing-site event records do not currently have a plan-specific automatic deletion schedule. We retain those records, derived analytics, reports, and operational records for as long as needed to provide and improve the service, understand acquisition, prevent abuse, and meet legal or security obligations. We delete or de-identify them when they are no longer needed or in response to a valid deletion request, subject to legal requirements and limited backup retention.

Account information is retained while the account is active and until an account-termination or deletion request is completed, subject to records we must keep for billing, fraud prevention, dispute resolution, or other legal obligations.

6. Your Rights (GDPR/CCPA)

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Object to data processing
• Opt out of data sales (we do not sell data)

To exercise these rights, contact us at [email protected]

7. Cookies

We use essential cookies for authentication and session management, and the SeeLLM dashboard uses functional cookies to remember preferences. Our first-party landing analytics also uses localStorage and sessionStorage as described above; those identifiers are not cookies. Where consent is required, Cookiebot controls analytics storage and cookies used through Google Tag Manager and Google Analytics. Microsoft Clarity can also use first- and third-party cookies or similar technologies, with available controls depending on consent and location. You can change or withdraw consent through the consent banner and review the current list on our Cookie Declaration.

8. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and audit logging

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

11. Contact Us

For questions about this Privacy Policy or our data practices, please contact us at: