Privacy Policy

Last updated: August 2026

Introduction

Organicus AI ("we", "us", "our") operates the organicus.ai platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Data

When you create an account, we collect your name, email address, and authentication credentials (managed via Supabase Auth, including Google OAuth).

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, audit history, and device/browser information.

Website Data from Audits

When you run an audit, we crawl and analyze your website's publicly available pages, including HTML content, meta tags, structured data, performance metrics, and AI accessibility signals.

How We Use Your Information

We use the information we collect to provide and improve our AEO audit and AI visibility analysis services, generate your Organicus Score, produce roadmaps and AutoFix suggestions, power the AI Agent assistant, send service-related communications, and comply with legal obligations.

Data Sharing & Third Parties

We share data with the following third-party service providers, solely to operate and improve our platform:

  • Stripe — Payment processing and subscription management.
  • Supabase — Database hosting, authentication, and file storage.
  • OpenAI — AI-powered audit analysis, content generation, and AI Agent functionality.
  • Google AI (Gemini) — Multi-model AI visibility testing.
  • Vercel — Application hosting and serverless functions.
  • Sentry — Error monitoring and performance tracking.
  • PostHog — Product analytics and usage insights.

We do not sell your personal information to third parties.

Google User Data & Limited Use

Organicus AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access Google Search Console and Google Analytics (GA4) data only for the properties you explicitly connect, and use it solely to display analytics and AEO insights inside your dashboard. We do not sell this data, use it for advertising, or transfer it to third parties except as needed to provide the service or as required by law.

How We Protect Your Data

We protect all personal data we process — and in particular sensitive data such as Google user data obtained through Google APIs — with the following technical and organizational measures:

  • Encryption in transit — All data exchanged between your browser, our servers, and third-party APIs (including Google APIs) is encrypted with TLS (HTTPS).
  • Encryption at rest — Our databases and file storage are encrypted at rest using AES-256. OAuth access and refresh tokens for connected Google accounts are additionally encrypted at the application layer with AES-256-GCM before being stored.
  • Access controls — Google user data is processed only by the application components that need it to deliver the features you request. Human access is restricted to authorized personnel on a need-to-know basis, and only for support, security, or legal-compliance purposes, consistent with Google's Limited Use requirements.
  • Data minimization — We request only the minimum OAuth scopes required, and store only the data needed to display your analytics and AEO insights in your dashboard.
  • Monitoring & incident response — We continuously monitor our systems for errors and suspicious activity. If a security breach affects your personal data, we will notify you and the competent authorities without undue delay, as required by applicable law (including GDPR).
  • Revocation & deletion — You can disconnect a Google integration at any time from your dashboard; doing so deletes the stored OAuth tokens and the associated Google data from our systems. You can also revoke Organicus AI's access at any time in your Google Account security settings (myaccount.google.com/permissions). When you delete your account, we delete your personal data from our production systems.

Data Retention

We retain your account data for as long as your account is active. Audit data and analysis results are retained for the duration of your subscription. You may request deletion of your data at any time by contacting us.

Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Deletion — Request that we delete your personal data.
  • Portability — Request your data in a structured, machine-readable format.
  • Correction — Request correction of inaccurate personal data.
  • Objection — Object to certain processing of your personal data.

To exercise any of these rights, contact us at privacy@organicus.ai.

Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (PostHog) to understand how our platform is used. You can control cookie preferences in your browser settings.

Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at privacy@organicus.ai.

← Back to home