Privacy Policy

Who is responsible

LLM Audit is built and operated by Nahuel Soria, an independent developer based in Argentina. There is no larger company behind it. For anything in this policy, including access and deletion requests, write to jorgenahuelsoria@gmail.com.

What we collect

What you type into an audit

A brand name, a website, a category, and optionally a location. This is business information, not personal information, and we store it with the audit result.

Your email address

Optional when you run a free audit, required to sign in. We use it to send you a sign in code, to attach past audits to your account, to deliver what you paid for, and to send the follow up emails tied to your audit. Every one of those emails has an unsubscribe link.

Usage and abuse prevention

We record product events such as page views, audits started and completed, and checkout steps, so we can see where the product breaks. We also process your IP address to enforce rate limits, which is what keeps one visitor from burning the free audit budget for everyone. The IP is used as the key of a counter, it is not attached to your audits or your account.

Payments

Payments run through Polar, our merchant of record. Card details are handled by Polar and never reach our servers. We store the order record so we know what you unlocked.

Google Search Console and Analytics data

Connecting Google is optional and the product works without it. If you connect it, we request two read only permissions:

• Search Console (read only), to read monthly clicks and impressions for a property you choose.
• Analytics (read only), to read monthly sessions that arrived from AI assistants for a property you choose.

We store an encrypted refresh token, the identifier of the property you selected, and monthly totals. We do not read individual visitors, page level reports, or anything from properties you did not select.

Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: your Google data is shown back to you inside your own report and nowhere else. It is never sold, never used for advertising, never sent to the AI providers we query, and never used to train any model. Humans do not read it.

You can revoke access at any time with the Disconnect button in your report, which deletes the stored token, or from your Google account permissions.

Who else sees your data

We do not sell data and we do not share it for advertising. We do rely on these processors:

• AI providers (OpenAI, Anthropic, Google). Running an audit sends the brand, website, category, and the prompts we evaluate to their APIs. That is what an audit is. Your email is never included.
• Tavily, to search for third party pages that cite you or your competitors.
• Supabase, our database and authentication.
• Vercel, our hosting and traffic analytics.
• SendGrid, to deliver email.
• Polar, to process payments.

What is public

A report is private until you create a share link, and then anyone holding that link can read it. We also publish the AI Visibility Index, which aggregates audit scores by category across brands. The Index carries brand names and scores, never your email, your account, or your Google data.

Retention and deletion

We keep audits and reports while your account exists, because the product is a history of how your visibility changes. Ask us at jorgenahuelsoria@gmail.com and we will delete your account and everything attached to it, or export a copy for you, within 30 days. Records we are required to keep for tax or accounting reasons are the exception.

You can also ask us to correct anything wrong, or to stop emailing you, which the unsubscribe link at the bottom of every email does immediately.

Cookies

We use a session cookie so you stay signed in, and Vercel Analytics, which measures traffic without cookies and without following you across other sites. No advertising trackers.

Children

This is a tool for businesses. It is not directed at children and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you, we update the date at the top and, for material changes, tell you by email before it takes effect.

See also our terms of service and how the score is built in the methodology.