Privacy Policy
Last updated: October 2026
How we handle your data
AskGrip processes data you provide to generate AI search visibility audits. We are committed to GDPR compliance for EU customers and data residency requirements.
Sub-processors
To generate your audit, we send crawled content and derived queries to the AI sub-processors below — each is contractually required not to train on your data. We also use the analytics sub-processors below (internal ids and event names only, never crawled content or findings) to operate and improve the product, and Stripe to process payments. Data Processing Agreements (DPAs) with these vendors are in progress, not yet signed.
| Provider | Purpose | Data region |
|---|---|---|
| Anthropic | LLM extraction, gap analysis, report assembly, Claude sampling surface | US / EU (enterprise) |
| OpenAI | GPT sampling surface, ChatGPT visibility analysis | US / EU (org settings) |
| Google Gemini | Gemini sampling surface, AI search visibility | US / EU |
| Perplexity | Perplexity sampling surface, cited-source analysis | US |
| PostHog | Product analytics — internal UUIDs and event names only, never crawled content, prompts, or findings | EU |
| Google Analytics (GA4) | Marketing-page visit analytics, opt-in only, IP anonymised | US / EU |
| Stripe | Payment processing and subscription billing — name, email, billing address, VAT ID and payment instrument, held by Stripe (card details never touch our servers) | US / EU (transfers to the US rely on the EU-US Data Privacy Framework and Standard Contractual Clauses under Stripe's terms) |
Data retention
Account data and audit results are retained for the lifetime of your subscription. On account deletion, all data is soft-deleted immediately and hard-deleted within 30 days, including your Customer record at Stripe, which we delete and whose subscription we cancel. The exception is invoices: Stripe retains them (name, email, billing address, VAT ID) for the statutory tax-record period, for example seven years, after deletion, because we are legally obliged to keep them (Art. 6(1)(c) GDPR). Scan sessions not linked to an account are automatically deleted after 24 hours.
Contact
For data protection enquiries, please contact privacy@geo-audit.com.
Cookie preferences
You haven't made a choice yet — the banner will appear on your next page visit.