Privacy policy

Data we collect

• Account data — your name, email address and profile picture from Google sign-in, your organization, role and invitations.
• Project data you provide — website URLs, brand and business details, locations, competitors, questions and settings.
• Public web and AI-answer data — content from the public websites you ask us to analyze and the answers AI engines give to the questions we run. This is mostly business information, but it can include personal data — for example, a sole trader's name, staff profiles, reviews, or people named in AI answers. We process it to produce the analysis you asked for; the scores and signals derived from it are also pooled to fit our internal predictive models, as described below. The same retention and request rights apply to it.
• Connected-assistant data — when you connect ChatGPT or Claude, the OAuth grant and tokens that link the assistant to your account, and the requests the assistant makes on your behalf (for example, which project or report it read).
• Usage and technical data — sign-in sessions, IP address, browser type, security and audit logs, error reports and performance data.
• Web analytics — we use Yandex Metrica to count visits and see how people use the site: page views, clicks, scrolling and the actions we mark as goals (for example copying the install request or downloading the plugin). It sets cookies to do so. Inside the signed-in app it may also use session replay (Webvisor) and click maps, which capture page content so a visit can be replayed. Session replay and click maps never run on the public pages (this policy, the terms, About, Support and the plugin page), and access codes in a link are removed before any address is sent. Metrica does not run on sign-in or on sensitive pages such as account settings, shared reports and invitation links.

We do not sell personal data, and we do not provide your data to train third-party generative AI models. We do use scan results — scores, signals and visibility outcomes, pooled across scans — to fit our own statistical and predictive models that estimate which features are associated with AI visibility. These models are used only inside AIReady.

How we use it

• To provide the service: run scans, show results and reports, and answer your assistant's requests.
• To authenticate you, control access, and keep the service secure.
• To support you, and to send service-related messages such as invitations.
• To diagnose errors and improve the product.

Who we share it with

Service providers. These process data on our behalf to run AIReady, under contractual obligations:

• Cloud hosting, database and file storage providers.
• Google, for sign-in.
• AI model providers and search/web-data providers used to run scans and other features (such as generating customer questions). They receive the project and market context those features need: your website and brand, industry, services, locations (including coordinates), competitors, keywords and questions, and any customer context you enter (for example, customer pain points or objections). They do not receive your sign-in details. Avoid putting personal data about individuals in free-text project fields.
• Error-monitoring providers, and Yandex (Yandex Metrica web analytics).

Recipients you choose. These are not our service providers. They receive data because you direct us to send it, and their own terms and privacy policies govern what they do with it:

• Any AI assistant or MCP client you connect to your account, such as ChatGPT, Claude, an IDE or a desktop app. It receives only the project and report data it requests on your behalf, within the access you grant, until you revoke the connection. If the assistant asks for it and the consent screen shows it, it also receives the name and email address of your AIReady account, so it can label the connection.
• People you share reports with.

We may also disclose data when required by law.

How long we keep it

• Account and project data: for as long as your account is active. Deleting a project hides it from the product but does not yet erase its stored data. Closing an account and erasing its personal data is done on request, by our team, rather than automatically — email us and we will confirm when it is done.
• Sign-in sessions and connected-assistant grants: they stop working when they expire, when you sign out, or when you revoke the connection. The record that they existed (when, from which device or client, and when they ended) is kept as security history, like the audit logs below.
• Security and audit logs: currently kept without a fixed expiry, to investigate abuse and protect accounts. We will publish a retention period here once one is enforced.
• Web analytics data: according to Yandex Metrica's own retention settings.

Backups may keep copies for a period after data is deleted, until they rotate out.

Your choices and controls

• Review and revoke connected assistants from Connections, or from ChatGPT or Claude settings.
• Review and end your active sign-in sessions from Settings.
• Edit or delete projects and revoke shared reports at any time.
• Ask us to access, correct, export or delete your personal data, or to close your account, by emailing napetrov@plastorium.com. Depending on where you live (for example, the EU/UK GDPR or California law), you may have further rights, including to object to processing and to complain to a data-protection authority.

Security

Data is encrypted in transit, access is restricted by role, and security-relevant actions are logged.

Children

AIReady is a business service and is not directed at children under 16.

Changes and contact

We will post changes here and update the effective date. Questions: napetrov@plastorium.com or plastorium.com/contact.