Privacy Policy
Last updated: April 17, 2026
This Privacy Policy explains what data LLM Brand Boost ("we", "us") collects from users of app.llmbrandboost.com and its agency subdomains, how we use it, and what choices you have.
1. What we collect
- Account data — email, name, hashed password, role, organization you belong to.
- Project data — brand names, domains, competitors, prompts, sources, and tracking results you configure or that are generated by running prompts against LLM providers.
- Usage data — which pages you visit, what you click, performance metrics. Used to improve the product.
- Billing data (when applicable) — handled by our payment processor (Stripe); we store only plan, status, and last 4 of a card.
2. Why we collect it
To deliver the service: authenticate you, run your tracking, show your dashboards, bill your plan, send transactional email (password resets, invites, quota warnings, weekly digests you opt into).
3. Third-party processors
We share minimum necessary data with:
- Supabase — managed Postgres + auth hosting.
- Vercel — application hosting, CDN, logs.
- DataforSEO — runs prompts against ChatGPT / Gemini / Claude / Perplexity on our behalf.
- Resend — transactional email delivery.
- OpenAI, Anthropic — model providers invoked directly when you enable API mode.
- Stripe — payments (when billing is activated).
Each provider is bound by a Data Processing Agreement and processes data only on our instructions.
4. Retention
Account + project data is retained while your account is active. After deletion, we remove personal data within 30 days; anonymized aggregate metrics (e.g. total prompt-runs) may be retained for analytics.
5. Your rights
- Access, correct, or export your data — contact us (see §8).
- Delete your account — from /admin/account (coming) or by emailing us.
- Withdraw consent at any time.
If you are in the EU, you have rights under the GDPR; in California, under the CCPA.
6. Cookies
We use only first-party, session-level cookies for authentication (auth_token, httpOnly). No advertising cookies. No cross-site tracking.
7. Children
The service is not directed at anyone under 16. We do not knowingly collect data from children.
8. Contact
Data requests & privacy questions: privacy@llmbrandboost.com.
9. Changes
We'll email active account holders at least 14 days before any material change.