Privacy Policy

Last updated

Contents

1. Introduction

This Privacy Policy explains how FlareGraph, LLC ("Flaregraph," "we," "us," or "our") collects, uses, and shares information when you visit flaregraph.com (the "Site") or request an AI Visibility Report from us.

Flaregraph provides AI search visibility services to businesses, helping them appear in recommendations from AI assistants including ChatGPT, Gemini, Perplexity, and Claude.

We have written this policy to be clear and direct. If you have questions, contact us at hello@flaregraph.com.

2. Information We Collect

Information You Provide

When you submit our AI Visibility Report request form, we collect:

  • Your business website URL and work email address
  • Business type, your role, primary services or case types, market or service area, and number of locations
  • Current search activity, approximate monthly search and content investment, and who can implement approved changes
  • What you want AI assistants to understand or recommend about the business, and any competitor names you choose to provide
  • Business-specific answers where requested, including personal injury practice focus or a home-services business’s primary service and approximate annual revenue range

The questions shown depend on your business type. The form identifies required and optional answers. We ask for a work email and check for common personal-email domains as part of submission validation.

Please provide business information only. Do not include confidential client, patient, or case information, health records, financial account information, passwords, or other sensitive personal information in free-text responses.

If you correspond with us directly by email, we receive whatever information you choose to include in that correspondence.

Information Collected Automatically

When you visit the Site, our hosting provider (Vercel) automatically collects standard server log information, which may include:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages viewed and time of visit
  • Referring URL

This information is used for security, abuse prevention, and to ensure the Site operates correctly.

Information We Do Not Collect

We want to be specific about what we do not do:

  • We do not require user accounts or store passwords
  • We do not process payments through the Site
  • We do not use third-party analytics or tracking pixels
  • We do not use marketing or advertising cookies
  • Our forms are intended for business information and do not ask for sensitive personal records

3. How We Use Your Information

We use information you submit to:

  • Manually review your request and assess whether a useful report can be scoped
  • Confirm the relevant business, services, market, competitors, and questions before preparing an agreed report
  • Respond to questions you ask us
  • Follow up by email about your request, scope, and next steps
  • Send transactional communications related to services you request
  • Detect, investigate, and prevent fraudulent or abusive activity
  • Comply with legal obligations

Report requests are reviewed by Flaregraph, not accepted or declined by an automated qualification decision. Submitting a request does not subscribe you to marketing emails.

We use aggregated, de-identified findings about recurring visibility issues and solutions to improve our services and develop products. We do not include information that identifies individual clients or people in those shared findings. We do not sell personal information.

We never use raw client material for model training.

4. How We Share Information

We share information only as necessary to operate our business.

Service Providers

We rely on the following third parties to deliver our services:

  • Vercel, Inc. provides Site hosting and content delivery, and processes server logs as described above.
  • Resend, Inc. processes report-request messages on our behalf, including the answers and contact information needed to send them to our review mailbox. Resend also processes email delivery information.
  • Google LLC (Google Workspace) hosts our internal email and document storage. Communications you send to addresses ending in @flaregraph.com are processed through Google Workspace.

Each of these providers is contractually obligated to use information only to provide services to us and to maintain reasonable security practices.

Legal Disclosures

We may disclose information when required by law, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If Flaregraph is acquired, merged, or sells substantially all of its assets, your information may be transferred to the successor entity. We will notify you of any such transfer that materially changes how your information is handled.

What We Do Not Do

We do not sell your personal information. We do not share your information with advertisers or data brokers. We do not share your information for any third party's independent marketing purposes.

5. Cookies and Tracking Technologies

The Site does not currently use analytics, advertising, or marketing cookies. The only cookies that may be set are essential cookies deployed by Vercel and our web framework (Next.js) for basic Site functionality, security, and performance.

If we add web analytics or other tracking technologies in the future, we will update this Privacy Policy and provide appropriate notice and choice where required by law.

6. Data Retention

We retain information only as long as necessary for the purposes described in this Privacy Policy:

  • Prospect requests and related correspondence: Retained for up to 12 months after the last meaningful contact if no client engagement begins. This schedule includes copies forwarded within Flaregraph.
  • Client working records: Retained for the duration of the engagement and up to two years afterward, subject to the applicable agreement and any continuing legal or recordkeeping obligation.
  • Contracts, invoices, and other necessary financial or legal records: Retained separately for the period required by applicable obligations and a documented business need.
  • Provider-operated logs: Retention depends on the provider and the applicable service settings.
  • Aggregated, de-identified findings: Retained while useful for improving services and developing products, with periodic review to ensure they do not identify individual clients or people.

You may request earlier deletion of your information at any time, subject to legal retention requirements. When an obligation requires longer retention, we keep the records needed for that obligation rather than extending retention of all related information.

7. Data Security

We use commercially reasonable technical and administrative safeguards to protect information in our control. These include:

  • HTTPS encryption for all Site traffic
  • Honeypot and rate-limiting controls on our submission form to prevent automated abuse
  • Reputable third-party providers (Vercel, Resend, Google) with industry-standard security practices
  • Limited internal access to submitted information

No system is perfectly secure. We cannot guarantee that information transmitted over the internet will never be accessed by unauthorized parties.

8. Your Rights and Choices

General Rights

You may at any time:

  • Request a copy of the information we hold about you
  • Request that we correct inaccurate information
  • Request that we delete your information
  • Unsubscribe from non-transactional emails by replying "unsubscribe" or contacting us directly

To exercise these rights, email us at hello@flaregraph.com. We will respond within 30 days.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to know what personal information we collect, use, and share about you
  • Right to delete personal information we hold about you
  • Right to correct inaccurate personal information we hold about you
  • Right to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, so this right does not currently apply, but the option remains available to you
  • Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined under California law
  • Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights

To exercise any of these rights, contact us at hello@flaregraph.com. We may need to verify your identity before fulfilling certain requests. You may also designate an authorized agent to make a request on your behalf.

European Economic Area, United Kingdom, and Switzerland (GDPR and equivalents)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation and equivalent laws:

  • Legal basis for processing. We process your information based on (i) your consent when you submit our form, (ii) our legitimate interest in operating and improving our business, or (iii) compliance with legal obligations.
  • Your rights: access, rectification, erasure, restriction of processing, data portability, and objection to processing.
  • Right to withdraw consent at any time, without affecting processing that occurred before withdrawal.
  • Right to lodge a complaint with your local data protection supervisory authority.
  • International transfers. Information you submit will be transferred to and processed in the United States. We rely on appropriate safeguards, including Standard Contractual Clauses, where applicable.

To exercise any of these rights, contact us at hello@flaregraph.com.

9. Children's Privacy

The Site and our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has submitted information to us, contact us at hello@flaregraph.com and we will delete it.

10. Email Communications (CAN-SPAM)

When you submit our form, we use your email to respond to the request and discuss its scope and next steps. Submission does not enroll you in a newsletter or other optional marketing. Any optional marketing signup will be separate from the report request.

All emails we send include our identity, our physical mailing address, and clear instructions for unsubscribing. To stop receiving non-transactional emails, reply "unsubscribe" or contact us at hello@flaregraph.com. We will honor unsubscribe requests within ten business days, as required by the CAN-SPAM Act.

11. International Users

The Site is operated from the United States. If you access the Site from outside the United States, you understand that information you submit will be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your country.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will provide additional notice (such as a prominent statement on the Site or an email to active clients) before the changes take effect.

14. Governing Law

This Privacy Policy is governed by the laws of the State of Georgia, without regard to its conflict-of-laws principles. Any disputes arising from or relating to this Privacy Policy will be resolved as set forth in our Terms of Service.

15. Contact Us

For privacy questions, requests, or to exercise any of the rights described above, contact us at:

FlareGraph, LLC
675 Ponce de Leon Ave NE, Ste 8500
Atlanta, GA 30308
hello@flaregraph.com