Privacy Policy

What you give us: your name and email, the domains you ask us to measure, business details such as name, industry and service area, facts about your business you confirm on your fact sheet, any message you send, and, when you pay by card, the cardholder name, email, phone and billing address we keep as the record of your authorisation. Card numbers go directly to the card processor and are never stored by us.

What the Service generates: audit scores, citation records, competitor and directory findings, tracked questions, content and video plans, suggested replies, and the reports tied to your account.

What we collect automatically: usage and device data, and your IP address, used for rate limiting, abuse prevention and security. The optional AI-traffic pixel a business installs on its own site is cookieless and session-scoped; it records that a visit came from an AI assistant and whether it led to a contact, never who the visitor is.

About your website: to build your fact sheet and measure you, we read the public pages of the site you give us and the public answers AI assistants give about it.

To run and deliver your audits, scans, reports and plans; to email you results, account notices and billing messages; to operate, secure and improve the Service; to prevent abuse; and to meet legal obligations.

Emails about your results and your account come from 10xSearch, using 10xSearch's own sending address. The platform sends nothing to you in its own name.

We do not sell your personal information.

If you, or an administrator of your account, connect an AI agent or tool to the Service, that agent can read the data your login can read. We record every request an agent makes, with the identity that authorised it, so you can see who read what and when, and access can be revoked at any time. What a connected agent does with the data it reads is governed by that agent's provider, not by this policy.

10xSearch can see your dashboards, reports and account details, is responsible for the messages it sends you, and answers your questions about the service. The platform operator sees your data only to run the Service, support 10xSearch, keep the platform secure and meet its legal duties. Your data is never shared with any other business on the platform.

We share limited data with vendors that process it on our behalf, under contract, only to provide the Service: hosting (Vercel), database and authentication (Supabase), email delivery (Resend), bot and abuse protection (Cloudflare Turnstile), and the AI and search data providers used to run audits and scans. These providers act under their own security and privacy commitments.

We keep your information for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where we must keep it for legal, security or accounting reasons. Scan results are kept so your history stays readable; a deleted account removes them.

You can update your details in your account and ask 10xSearch to pause or delete your account and personal data. Depending on where you live you may have further rights, such as access, correction, deletion or portability; 10xSearch will pass a request to the platform operator where needed.

We use technical and organisational measures to protect your information, including access controls, encryption in transit, and row-level isolation between accounts. No method of transmission or storage is perfectly secure, but we work to protect your data.

The Service is not directed to children under 18, and we do not knowingly collect their personal information.

We may update this policy. The date above changes when we do, and for material changes we give notice where appropriate.

Questions go to 10xSearch. The platform operator is 10XSearch Inc. (7548 S Willow Circle, Centennial, CO 80112, United States).