Privacy Policy

← Are you found by AI?

How Are you found by AI? (Tech Horizon Labs) handles your information.

What we collect

• The website you scan: the URL you enter, so we can analyse it.
• Your email: only if you give it to us (to email your results, or to buy a report).
• Scan results: the scores and signals we compute for a scanned site.
• Basic technical data: IP and request metadata, used for rate-limiting and bot protection.

Google user data (Search Console connection)

If you choose to connect your Google Search Console, we request read-only access (the webmasters.readonly scope) so we can display your own search performance, impressions, clicks, queries and positions, inside your monitoring console and reports, alongside your AI-visibility measurements.

• What we access: your Search Console property list and search-analytics statistics. Read-only, we can never change anything in your Search Console.
• How we use it: solely to render your own statistics back to you in your console, reports and monitoring emails. We do not use Google user data for advertising, we do not sell it, and we do not share it with any third party.
• Storage & retention: we store the OAuth refresh token and cached statistics in our database (Cloudflare, encrypted at rest) only while your connection is active. Disconnect anytime from your Google account permissions or by replying to any of our emails, we delete the stored token on request.
• Human access: no human reads your Google data except with your explicit permission for support, for security purposes, or where required by law.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use it

• To run your scan and deliver your results or report.
• To email you results or your purchased report (when you opt in or purchase).
• To improve the product and build anonymised, aggregated category benchmarks, never tied to your personal details.

Who we share it with

Only trusted processors needed to run the service: Cloudflare (hosting, security), Stripe (payments, we never see your card details), Resend (email delivery), and search/AI data providers (e.g. DataForSEO and the AI engines) to scan the website you submit. We do not sell your data. Public-page advertising measurement is described below; connected Google data is excluded from it.

Retention & your rights

We keep scan and order records only as long as needed to provide the service and meet legal obligations. You can request access to, correction of, or deletion of your personal data any time by emailing us. We comply with the Australian Privacy Act 1988.

Analytics & browser storage

We use Cloudflare, Plausible, our own visit counter and PostHog to understand traffic and product use. Public marketing pages also include the LinkedIn Insight Tag for advertising measurement. These services can receive request metadata; PostHog and LinkedIn may use browser storage. Essential storage also supports bot protection, scan limits and sign-in.

The report-to-account funnel uses a random journey identifier kept in this browser for up to 30 days. Its events contain a page category, source category and outcome. Public page views and navigation clicks also use fixed page categories. These events contain no page text, form values or recordings, and do not contain your email, website, question, report link, account ID or provider credentials. Browser observations and server-confirmed saves or payments are recorded separately. Pending funnel events are retained on our server for up to 30 days; PostHog retention is separate.

You can Turn off PostHog product analytics in this browser. The funnel also respects Do Not Track and an existing PostHog opt-out; blocking its SDK prevents browser funnel collection. This control does not switch off other providers or erase events already sent.

Meta ad measurement

On the public pages, Meta can record that you visited and that a scan finished, so we can see which ad led here. This does not include your email address, the website you scanned, or your report. You can turn this off.

The switch turns the pixel off for that browser, and it stays off.

Chrome extension (Are you found by AI?, AI Visibility Check)

Our browser extension has no accounts, no analytics, no background activity, and collects nothing beyond what is described here.

• Readiness checks run locally. When you click the extension icon, it reads the page you are on (schema, robots.txt, meta tags) inside your browser. That page content never leaves your device.
• One lookup request. On each click, the hostname of the current tab (for example example.com, never the full URL, never page content, never your browsing history) is sent to areyoufoundbyai.com solely to return that site's entry in our public index. Lookups are not stored against any user or identity; responses are cached briefly per site, not per person.
• Markdown copy stays on your device. The "Copy page for AI" and "Download .md" tools build the file locally in your browser and place it on your clipboard or disk. Nothing is transmitted.
• No sale, no sharing, no profiling. The hostname lookup is used for no other purpose, not advertising, not creditworthiness, not resale.

AI assistant connections (MCP server)

Our MCP server lets an AI assistant such as Claude, ChatGPT or Muse read AI-visibility measurements while you talk to it.

• What your assistant sends us: the name of the tool it calls and that tool's settings, for example which engine or question to look at. We use them to answer that one call.
• What we keep: a daily count of calls for each tool, and for a subscriber's connection the first eight characters of its connection key, so we can see how much each connection is used. We do not store what you ask your assistant, what it replies, or the settings it sends.
• The public demo at https://areyoufoundbyai.com/mcp/demo needs no account and returns only areyoufoundbyai.com's own measurements.
• Your own connection comes with a Pro subscription. Its private URL works as the key, so keep it private. If you approve an assistant through sign-in, we keep a record of which assistant you approved, which reports it can read, and when, until you revoke it. If your assistant uses request_rescan, we run a new measurement of your site and keep it like any other scan.

Cloudflare, which hosts the service, receives request metadata such as your IP address for security and rate limiting, as set out above. Cloudflare's request logs, which include the full connection URL, are kept for a short period for security and debugging.

Last updated September 2026 · Are you found by AI? is operated by Tech Horizon Labs (Australia) · Questions: hello@techhorizonlabs.com