Privacy Policy

Who we are

Noetio helps businesses measure and improve how AI search engines cite them. This policy explains the personal data we handle through this website and its scan, report, and scheduling features, and the choices you have over it.

What we collect

Free visibility check: the domain you submit, the AI-engine responses about that domain, and standard technical logs (IP address, user agent) from our hosting provider.

Email (optional): if you ask us to send the scan snapshot, we store your email address solely to send that snapshot and related follow-up about it.

In the language of US privacy law, the categories we collect are identifiers (email, IP address), the domain you submit, internet and network activity (technical logs), and commercial information (what you buy from us). We collect no sensitive categories.

How we use it

To run the scan you requested and show you the result.

To deliver reports you purchased and provide support.

To send the snapshot you asked for by entering your email. Any further marketing happens only if you opt in.

To operate and secure the service, including hosting logs and abuse prevention.

Cookies and analytics

We do not use advertising or cross-site tracking cookies, and we do not build advertising profiles about you.

For usage measurement we use Vercel Web Analytics and Vercel Speed Insights. They set no cookies and do not identify you.

We also use Google Analytics 4, provided by Google Ireland Limited, to see how visitors find and use this site. In the EU, the EEA, the UK and Switzerland it only runs after you click Accept in the cookie banner. It sets the cookies _ga and _ga_<id> to recognise a returning browser. Google Analytics 4 does not store IP addresses, advertising features are switched off, and the data is kept for 14 months. Data may be processed by Google in the United States under the EU US Data Privacy Framework.

You can change or withdraw your choice at any time with the Cookie settings link in the footer. Withdrawing deletes the Google Analytics cookies. Noetio is operated by Auraqu, Inc., which is based in the United States.

The booking page embeds Cal.com's scheduler, and Cal.com sets its own functional cookies as soon as that page loads: a Cloudflare bot-management cookie and its session cookies. They are what makes the calendar work, they are set by Cal.com and not by us, and they are not used to advertise to you or to follow you across other sites.

Who we share it with

We share data only with the processors that run the service, listed in Security and subprocessors below.

We do not sell, rent, or trade your personal information, and we do not use it for cross-context behavioral advertising.

How long we keep it

Scan results are cached for up to 7 days for performance. Order and invoice records are kept as long as US commercial and tax law requires. Snapshot emails are kept until you ask us to delete them.

Audit artifacts are kept while you are a client and for 12 months after delivery, so a later re-run can be compared against the original, then deleted on request or on schedule.

Security and subprocessors

Audits and free scans run against public information: your website, and what public AI engines say about your brand. We do not need access to your systems, analytics, or customer data to run one.

Data is encrypted in transit with HTTPS/TLS on every page. The site and its data run on Vercel infrastructure, with access limited to the people who operate the service. Our strongest safeguard is holding as little personal data as the service needs, so there is little to expose in the first place.

The table below is the full list of processors that run the service, what each one is for, and what it sees. Prompts to AI engines and search-data lookups carry the domain you submit, never your customer data.

Your choices and rights

You can request access to, a copy of, correction of, or deletion of your personal data, and opt out of any marketing, at any time by emailing misha@noetio.com. We verify your identity and then respond within 30 days (GDPR) or 45 days (US state laws), which we may extend once by a further 45 days where the law permits and only with notice to you.

US residents, including under California's CCPA and CPRA and the laws of Virginia, Colorado, Connecticut, and Texas: we do not sell or share your personal information, we honor your rights to know, access, correct, delete, and opt out, and we do not discriminate against you for exercising any of them.

If we decline a request, you may appeal by replying to our decision, and we will review it and respond within the period your state's law allows.

EU and EEA visitors (GDPR)

If you are in the EU or EEA, our legal bases are: performing the scan and orders you request and pre-contractual steps (Art. 6(1)(b)); your consent for any further marketing (Art. 6(1)(a)); and our legitimate interest in operating and securing the service (Art. 6(1)(f)).

Because our processors are in the United States, transfers rely on those processors' certification under the EU-US Data Privacy Framework or on Standard Contractual Clauses. You may lodge a complaint with your local supervisory authority at any time.

Children

Noetio is built for businesses and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, email misha@noetio.com and we will delete it.

Changes to this policy

When we change this policy we post the updated version here with a new effective date and revise the summary at the top. For material changes we give notice by a reasonable means before they take effect.

Contact

Privacy questions or requests: misha@noetio.com. We acknowledge requests promptly and respond within the timeframes above.