Privacy Policy

BrandAnchor.io measures what AI engines say about companies and helps correct what they get wrong. This policy explains what personal data we collect in that process, why we collect it, and how we handle it. We do not sell personal data. We do not run advertising.

01 Who We Are

BrandAnchor.io is operated by Yair Zilberman (sole proprietor). Contact: hello@brandanchor.io. For GDPR purposes, BrandAnchor.io acts as the data controller for information submitted through this website and for our business contacts and engagement records, and as a data processor for personal data we handle on a client's behalf, such as visitor data from the tracking tag on a client's website.

02 What We Collect & Why

Information you submit

When you request a report or apply for a pilot, we collect your work email address and company website, and your name when a form asks for it. We also keep anything you write to us. This is the minimum we need to respond to you and deliver what you asked for. We do not ask for phone numbers or payment details on our website forms.

Engagement and business records

If we work together, we keep business contact details (names, work emails, roles), Orders, invoices, messages and the deliverables we produce for you.

Brand and website data

To prepare a report or files for your website, we use the brand name, domain and category you give us, facts about your company that you confirm, and the content of websites you connect to us (for example through our WordPress plugin). We use this only to provide the services. As part of the services, verified facts about your company are published as public records on data sites that we operate (see section 07 of our Terms of Service). These records can include the names and roles of company officers. You can ask us to correct or remove them at any time.

AI engine data

To produce a Threat Report we ask AI engines questions built from your brand name, domain and category, and record their answers and the source URLs behind them. We do not send confidential business information to these engines. Answers can mention named people, such as executives; we keep them only as part of the findings about your company.

Website visitors

Our hosting provider and our servers process technical data such as IP address, browser type and time of request to deliver this website and keep it secure. This website also runs our own tracking tag (described in section 08 of our Terms of Service): for visits that arrive from another website or carry a campaign tag, it records the page path, the referring site and the campaign tag, together with a random per-tab identifier held in your browser's session storage. It sets no cookies, and we do not store visitors' IP addresses. This website loads its fonts from Google Fonts, so your browser connects to Google's servers to retrieve them.

Payments

Self-serve plans are paid through Lemon Squeezy, our Merchant of Record. We do not receive or store your card details. Invoiced engagements may be invoiced and paid through Remotify, which receives the billing contact details needed for the invoice.

Business outreach

We may email people at companies that could benefit from our services, using publicly available business contact details. You can opt out at any time by replying to the message or writing to hello@brandanchor.io. We will stop contacting you and keep only what we need to remember your opt-out.

03 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the UK, we process your data under the following legal bases:

• Contractual necessity — to respond to your request and to deliver the reports and services you ask for.
• Legitimate interests — to run, secure and improve our services, to measure how AI assistants send visitors to our website, and to contact business people about services relevant to their company.
• Legal obligation — retaining invoices and transaction records as required by applicable tax and accounting law.

04 How Long We Keep Your Data

We keep personal data only as long as we need it to provide the services, for the purposes in this policy, or to meet legal obligations. Engagement and invoice records are kept as long as tax and accounting law requires. Contact details we use for outreach are kept until you opt out, ask us to delete them, or they are no longer relevant. You can ask us to delete your data at any time (see section 07).

05 Service Providers

To operate our services, we share data with the providers below, and only to the extent they need it to perform their function. We do not sell your data, and we do not share it with advertising networks or data brokers.

06 International Transfers

Some of our providers process data outside your country, including in the United States. Where the law requires safeguards for such transfers, we rely on the mechanisms our providers offer, such as standard contractual clauses.

07 Your Rights

Under GDPR (and equivalent laws in your jurisdiction), you have the right to:

• Access — request a copy of the data we hold on you.
• Rectification — correct any inaccurate information.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Object — opt out of any processing based on legitimate interests.

To exercise any of these rights, contact us at hello@brandanchor.io. We will respond within 30 days of receiving your request. If we hold your data as a processor for a client, for example visitor data from that client's website, we will refer your request to that client or help them respond to it.

08 Security

We encrypt data in transit, restrict access to our systems, and deliver reports through private links (with a PIN where we provide one). We do not store payment card data; billing for self-serve plans is handled by Lemon Squeezy and never touches our servers. No system is completely secure, and we cannot guarantee absolute security.

09 Cookies & Similar Technologies

This website sets no cookies. Our tracking tag uses your browser's session storage for a random per-tab identifier, as described in section 02. It is not used for advertising, and we do not use Google Analytics, Meta Pixel or any advertising tracker.

10 Changes to This Policy

If we make material changes, we will update the "Last updated" date at the top of this page. We will not retroactively apply less protective practices to data already collected. Continued use of the services after a change constitutes acceptance. If you disagree with a change, email us and we will handle your data as described in section 07.