This Privacy Policy explains how SearchFit collects, uses, protects, and shares your personal information. By using our Service, you agree to the practices described in this policy. Last updated: December 22, 2025.
We are committed to protecting your privacy and being transparent about our data practices. This policy complies with GDPR, CCPA, and other applicable privacy laws.
AI PROCESSING DISCLAIMER: SearchFit uses artificial intelligence to process your data and generate insights. AI can make mistakes and produce inaccurate results. We do NOT guarantee the accuracy or reliability of AI-generated content. You use AI features at your own risk.
SearchFit is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our AI-powered AEO platform.
We use AI to analyze your data and generate insights. AI processing may produce errors or inaccuracies. We do not guarantee the accuracy of AI-generated results. Use at your own risk.
You have rights regarding your personal data, including access, correction, deletion, and data portability. You can manage your privacy settings in your account dashboard.
We collect several types of information: (a) Account Information: Name, email address, company name, phone number, billing information, and authentication credentials provided during registration; (b) Project Data: Website URLs, keywords, competitor information, search queries, and business data you submit to analyze; (c) Usage Data: IP addresses, browser type, device information, pages visited, features used, time spent, click patterns, and interaction data; (d) Analytics Data: Search engine rankings, visibility scores, competitor analysis, AI-generated insights, and performance metrics; (e) Communication Data: Support tickets, feedback, survey responses, and email correspondence; (f) Payment Information: Credit card details and billing addresses processed securely through our payment provider (Stripe); (g) Cookies and Tracking Data: Session information, preferences, authentication tokens, and behavioral data collected via cookies and similar technologies.
We use collected information to: (a) Provide and operate the SearchFit Service, including AI-powered analysis and reporting; (b) Process your transactions and manage subscriptions; (c) Generate personalized insights, recommendations, and competitive intelligence using AI; (d) Communicate with you about your account, updates, features, and support; (e) Send marketing communications (with your consent, where required); (f) Improve and optimize our Service and develop new features; (g) Detect, prevent, and address technical issues, fraud, and security threats; (h) Comply with legal obligations and enforce our Terms of Use; (i) Provide customer support and respond to inquiries. We do NOT use your content, project data, or prompts to train AI models, whether ours or a third party's.
SearchFit uses artificial intelligence to process your data and generate insights. We do not build, train, or fine-tune AI models. We send prompts to third-party models operated by their providers, receive a response, and store that response against your account. Nothing you submit is used as training data by us, and we contract for the same from our providers: your content is not used to train their models and is not retained by them beyond the short abuse-monitoring windows described in their own terms. We do not share your data between customers, and no customer data forms part of any model we or anyone else ships. AI processing involves: (a) Analyzing your website content, keywords, and competitor data; (b) Generating reports, recommendations, and predictions that may contain errors or inaccuracies. WE DO NOT GUARANTEE THE ACCURACY, COMPLETENESS, OR RELIABILITY OF AI-GENERATED INSIGHTS. AI can make mistakes, produce hallucinations, and generate incorrect information. You acknowledge that: (i) AI outputs are probabilistic and may be wrong; (ii) You use AI-generated insights at your own risk; (iii) You should independently verify all AI recommendations before acting on them; (iv) SearchFit is not liable for decisions made based on AI-generated content. The model providers we route to are listed on our Sub-processors page at searchfit.ai/subprocessors.
These are three different things and we treat them differently. (a) Infrastructure that runs the Service: SearchFit is hosted on Railway, its database is operated by Neon, and its files and traffic pass through Cloudflare (object storage and content delivery). We do not disclose your data to these providers. Your data resides on and moves through their systems because that is where the Service runs, in the same way a tenant's belongings sit inside a landlord's building. Each acts only on our documented instructions under a data processing agreement and is contractually barred from using your data for its own purposes. (b) Processors that perform a specific function: Clerk (authentication), Stripe (payment processing), Resend (email delivery), Trigger.dev (background job processing), Sentry (error monitoring), and the AI providers we route model requests to. Each receives only the data that function requires, and none may use it for its own purposes. (c) Analytics and marketing technologies: Google Analytics and PostHog receive usage data to help us understand how the Service is used. Our public marketing pages also load the Meta (Facebook) advertising pixel and the Apollo website visitor tracker, and Intercom operates our support chat. (d) Internal notifications: we send ourselves alerts in Slack when a report is unlocked or a contact form is submitted, which include the submitted name and email address. (e) Genuine disclosure to third parties happens only when required by law, court order, or government request, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you. We do NOT sell your personal information, and we do NOT share it with third parties for their own marketing. A current list of every provider, with its purpose and processing location, is maintained at searchfit.ai/subprocessors.
We implement reasonable technical and organizational measures to protect your data, including: (a) Encryption of data in transit (TLS/SSL) and at rest; (b) Secure authentication via Clerk with multi-factor authentication support; (c) Regular security audits and vulnerability assessments; (d) Access controls and role-based permissions; (e) Secure cloud infrastructure (Railway, Neon, Cloudflare R2); (f) Rate limiting and DDoS protection; (g) Automated backup systems. However, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials. Notify us immediately if you suspect unauthorized access to your account.
We retain your data for as long as necessary to provide the Service and comply with legal obligations: (a) Account Data: Retained while your account is active and for up to 90 days after account deletion for backup and recovery purposes; (b) Project Data: Retained while your account is active; deleted within 30 days of account deletion; (c) Usage Analytics: Retained for up to 2 years for analysis and improvement; (d) Financial Records: Retained for up to 7 years as required by tax and accounting laws; (e) Support Communications: Retained for up to 3 years for quality assurance and legal compliance. You can request early deletion of your data by contacting [email protected], subject to legal retention requirements.
Depending on your jurisdiction, you may have the following rights: (a) Access: Request a copy of your personal data; (b) Correction: Update or correct inaccurate information; (c) Deletion: Request deletion of your personal data (right to be forgotten); (d) Portability: Receive your data in a machine-readable format; (e) Restriction: Limit how we process your data; (f) Objection: Object to processing based on legitimate interests; (g) Withdraw Consent: Withdraw consent for marketing communications at any time; (h) Opt-Out: Disable cookies and tracking technologies in your browser; (i) GDPR Rights (EU/EEA): If you are in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation; (j) CCPA Rights (California): If you are a California resident, you have rights under the California Consumer Privacy Act. To exercise your rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).
We use cookies, web beacons, and similar technologies to: (a) Maintain your session and keep you logged in; (b) Remember your preferences and settings; (c) Analyze usage patterns and improve the Service; (d) Track conversions and marketing effectiveness; (e) Provide personalized content and recommendations. Cookie Types: Essential Cookies (required for Service operation), Performance Cookies (analytics and optimization), Functional Cookies (preferences and settings), Marketing Cookies (advertising and remarketing). Third-party services that use cookies: Google Analytics, PostHog, Clerk. You can control cookies through your browser settings. Disabling cookies may limit Service functionality. See our Cookie Policy for detailed information.
SearchFit operates globally from Sydney, Australia, and your data may be transferred to and processed in Australia, the United States, and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place for international transfers, including: (a) Standard Contractual Clauses approved by the European Commission; (b) Data Processing Agreements with third-party processors; (c) Compliance with applicable data transfer regulations including the Australian Privacy Act 1988. By using our Service, you consent to the transfer of your data to countries outside your residence.
SearchFit is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will promptly delete such information from our systems.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA): (a) Right to Know: What personal information we collect, use, disclose, and sell; (b) Right to Delete: Request deletion of your personal information; (c) Right to Opt-Out: We do NOT sell personal information; (d) Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. To exercise these rights, email [email protected] with the subject "CCPA Request." We will verify your identity before processing your request.
If you are in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR): (a) Legal Basis for Processing: We process your data based on contract performance, consent, legitimate interests, and legal obligations; (b) Data Controller: SearchFit (Sydney, Australia) is the data controller; (c) Privacy Contact: Contact [email protected] for privacy inquiries. We have not designated a Data Protection Officer under Article 37, as we are not required to; (d) Right to Lodge Complaint: You can file a complaint with your local data protection authority if you believe we have violated GDPR. We comply with GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. For Australian residents, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You can contact the Office of the Australian Information Commissioner (OAIC) for privacy complaints.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Changes will be effective immediately upon posting to searchfit.ai/privacy-policy. Material changes will be communicated via: (a) Email notification to registered users; (b) Prominent notice on the Service; (c) In-app notification. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically. Last Updated: December 22, 2025.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: [email protected] | Privacy inquiries: [email protected] | Address: SearchFit, Sydney, New South Wales, Australia. We will respond to your inquiry within 30 days (or as required by applicable law).