Skip to content
helloAISearch

Privacy Policy

Effective September 18, 2026

Welcome to helloAISearch (“helloAISearch,” “we,” “our,” or “us”), a service operated by PulseSpark.ai LLC, a Pennsylvania limited liability company.

This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit helloaisearch.com, create an account, purchase a subscription, use our web application, APIs, or any related products and services (collectively, the “Service”).

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

This Privacy Policy applies to:

  • helloaisearch.com
  • app.helloaisearch.com
  • Any websites operated by PulseSpark.ai LLC that reference this Privacy Policy
  • Customer support interactions
  • Marketing communications
  • APIs and integrations provided by helloAISearch

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked from our Service.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories of information.

Account Information

When you register for an account, we may collect:

  • Name
  • Email address
  • Company or organization name
  • Authentication information
  • Subscription plan
  • Account preferences
  • Time zone
  • User settings

Passwords are securely managed through our authentication provider and are never stored by us in plain text.

Project Information

To provide the Service, we collect information you intentionally provide, including:

  • Brand names
  • Domains
  • Brand aliases
  • Industry
  • Business descriptions
  • Competitors
  • Projects
  • Keywords
  • Tracked prompts
  • Scan configurations
  • User preferences

AI Search Information

When you use helloAISearch, we may process:

  • Search prompts
  • AI provider requests
  • AI provider responses
  • Citations
  • Rankings
  • Visibility metrics
  • Share of Voice calculations
  • Historical scan data
  • Trend data
  • Recommendations
  • Generated reports
  • Dashboard metrics

Billing Information

If you purchase a subscription, payment processing is handled securely by Stripe, Inc.

We may receive and store information necessary to manage your subscription, including:

  • Stripe Customer ID
  • Subscription ID
  • Subscription status
  • Billing status
  • Invoice history
  • Payment timestamps

We do not receive or store your complete credit card number, bank account information, or payment security codes.

Your payment information is processed in accordance with Stripe's privacy policy and applicable payment industry security standards.

Communications

When you contact us, we may collect:

  • Emails
  • Support requests
  • Feedback
  • Survey responses
  • Feature requests
  • Bug reports

Technical Information

When you access the Service, we automatically collect certain technical information, including:

  • Browser type
  • Device type
  • Operating system
  • IP address
  • Language preferences
  • Time zone
  • Approximate geographic location
  • Referring pages
  • Session information
  • Performance metrics
  • Error logs
  • Security logs

3. How We Use Your Information

We use the information we collect to operate, maintain, secure, and improve helloAISearch.

Specifically, we use information for the following purposes.

To Provide the Service

Your account information, project configuration, competitors, prompts, and related information are used to:

  • operate your account;
  • authenticate your identity;
  • perform AI visibility scans;
  • generate reports;
  • calculate rankings;
  • calculate Share of Voice metrics;
  • display dashboards;
  • provide recommendations;
  • deliver requested features.

To fulfill your requests, prompts and related information may be transmitted to one or more third-party artificial intelligence providers that generate responses on our behalf.

These providers process submitted information in accordance with their applicable privacy policies, contractual obligations, and terms governing their services.

To Improve helloAISearch

We continually improve our products and services.

We may use information derived from your use of the Service, including:

  • scan results;
  • derived metrics;
  • product usage information;
  • feature adoption;
  • customer feedback;
  • interaction patterns;
  • benchmark data;
  • system performance information;

to:

  • improve helloAISearch;
  • improve our ranking methodologies;
  • improve recommendations;
  • develop new features;
  • create industry benchmarks;
  • improve our artificial intelligence systems;
  • train and improve our own machine learning models and algorithms;
  • improve accuracy, quality, reliability, and performance.

This information is kept separate from your account record: your name, email address, company details, billing information, and credentials are never part of it. Because your prompts and their results are about the brands you asked us to track, it can still contain brand names and domains — yours and your competitors'. We do not describe that material as anonymous, and we do not use it to produce output that identifies you or your business to anyone else.

We do not intentionally use passwords, authentication credentials, payment card information, billing details, or other highly sensitive personal information to improve or train our AI systems.

We do not sell personal information.

You can opt out. If you have an account, Settings → Account → Data use excludes your account from model training and benchmark development. The change takes effect immediately and applies to all future training work. Opting out does not affect your use of the Service, and we will not discriminate against you for it.

To Operate Our Business

We may also use information to:

  • respond to support requests;
  • send transactional emails;
  • notify you of important account activity;
  • process subscriptions;
  • detect fraud;
  • investigate abuse;
  • monitor service health;
  • enforce our Terms of Service;
  • comply with legal obligations.

Transactional and notification emails are delivered for us by Resend, Inc. To send you an email we pass Resend your email address and the contents of that message. Resend does not receive your prompts, scan results, or billing details. We also keep our own record of which notification emails we have sent you, so that we do not send the same one twice.

4. Artificial Intelligence Providers

To provide the Service, helloAISearch may securely transmit prompts and related project information to one or more third-party artificial intelligence providers.

These providers generate AI responses requested by you through the Service.

The AI providers we send this information to are:

  • OpenAI, L.L.C. (ChatGPT)
  • Anthropic, PBC (Claude)
  • Google LLC (Gemini)
  • Perplexity AI, Inc. (Perplexity)

We will update this list as providers change. The current list, together with every other company that processes information on our behalf, is published on our Subprocessors page.

Each provider processes submitted information according to its own privacy policy, contractual commitments, and applicable laws.

We encourage users to review the privacy policies of any third-party providers whose services are used through helloAISearch.

5. Aggregated and De-Identified Information

We may create information that no longer reasonably identifies an individual or customer.

This information may be used to:

  • improve the Service;
  • perform research;
  • measure trends;
  • create benchmarks;
  • publish industry statistics;
  • improve performance;
  • develop future products.

This section covers information that has genuinely been aggregated or stripped of identifying detail — counts, rates, and industry-level statistics. Such information is not considered personal information under this Privacy Policy. Training use of your prompts and results is governed by section 3 above, which describes what that material can still contain.

Accounts that have opted out under Settings → Account → Data use are excluded from the benchmark and research work described here, and from the model training described in section 3.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, improve performance, remember preferences, maintain security, and, where permitted, understand how our Service is used.

These technologies may include:

  • browser cookies;
  • local storage;
  • session storage;
  • similar browser technologies.

We do not use third-party advertising cookies.

Essential Cookies

Essential cookies are required for:

  • authentication;
  • account security;
  • maintaining signed-in sessions;
  • fraud prevention;
  • load balancing;
  • core functionality.

These cookies cannot be disabled without affecting the operation of the Service.

Preference Cookies

Preference cookies remember settings such as:

  • language;
  • display preferences;
  • dashboard configuration;
  • cookie choices.

Analytics Technologies

Where required by applicable law, analytics technologies that store information on your device or read information from it — including cookies and similar identifiers — operate only after you provide consent.

Before you provide consent, no analytics tool is started: your browser does not contact an analytics provider, nothing about your visit is sent to one, and no analytics cookie is set. Section 7 describes what each tool does once you accept. If your browser sends a Global Privacy Control signal, section 16 describes how we treat it.

Analytics help us understand:

  • feature adoption;
  • performance;
  • product quality;
  • user experience;
  • reliability.

You may withdraw consent at any time through available preference controls or your browser settings.

7. Analytics

To help us understand how helloAISearch is used and improve the quality of the Service, we use analytics tools that collect information about how users interact with our websites and applications.

Analytics requests are routed through our own domain rather than sent by your browser directly to the analytics provider. We do not record every click automatically.

We use two analytics tools: PostHog (PostHog, Inc.), which measures product usage inside the application, and Google Analytics (Google LLC), which measures traffic to our marketing pages.

Analytics are off by default. Until you choose “Accept analytics”, neither tool is started: your browser does not contact PostHog or Google at all, no analytics cookie is set, and nothing about your visit is sent to either provider. (The Google tag is not even downloaded; the PostHog library ships as part of our own site code but is never initialised.) Accepting enables full measurement. Declining, or withdrawing consent later, switches both tools off again: they stop, your browser stops contacting them, and analytics cookies already stored in your browser are cleared.

Analytics may include information such as:

  • Pages visited
  • Features used
  • Navigation patterns
  • Device type
  • Browser type
  • Operating system
  • Screen resolution
  • Session duration
  • Referring pages
  • Crash frequency
  • General geographic region derived from IP address
  • Masked session recordings, as described under Session Replay below

Analytics information is used only to:

  • improve the Service;
  • identify usability issues;
  • understand feature adoption;
  • prioritize development;
  • monitor performance;
  • improve reliability.

We do not use analytics for behavioral advertising.

Session Replay

If you accept analytics, PostHog records a replay of your session in the application: the pages you move through, where you click and scroll, and how long each step takes. We use these recordings to find where the product is confusing or broken.

Every piece of text on the screen, and every value you type, is masked in your browser before the recording is sent. A replay shows us the shape of the page and what you interacted with. It does not show us what the page said or what you wrote. Your brand names, your competitors, your tracked prompts and your scan results are not legible to us in a recording, and neither is anything you type into a form. Request and response contents are not captured alongside the recording either.

Some pages are never recorded at all. Recording does not run on sign-in, sign-up, password reset, email verification, the upgrade page, or anywhere under Settings, which is where billing and account deletion live. On those pages we consider masking insufficient on its own, so nothing is captured in the first place.

Recording is off until you accept analytics, stops immediately if you withdraw that consent, and never starts on the pages listed above. Recordings are stored by PostHog and are deleted after 30 days.

Section 8 describes a second, error-triggered recording that our error monitoring can keep. It is covered by the same choice: it does not run unless you have accepted analytics, and it stops if you withdraw.

You may withdraw consent at any time using available privacy controls or your browser settings. Withdrawal of consent does not affect information already processed before consent was withdrawn where permitted by law.

…

Opting out stops analytics capture immediately in this browser. Your choice is stored locally, so it applies per browser and device.

8. Diagnostics, Error Monitoring, and Security Logging

Maintaining a secure and reliable platform requires us to collect limited technical diagnostic information.

We may collect:

  • application errors;
  • crash reports;
  • browser information;
  • operating system information;
  • IP address;
  • device information;
  • performance metrics;
  • network request information;
  • application logs;
  • security events.

If you have accepted analytics, our error monitoring also keeps a short, masked recording of your recent activity in your browser’s memory and sends it only when a software failure occurs, to help us reproduce and resolve the problem. These recordings are triggered by errors only — we do not record ordinary browsing — and text and media are masked before the recording leaves your browser. No recording is kept or sent unless analytics are on for your browser, and it stops the moment you withdraw that choice.

Error reports themselves — the failure, where in the software it occurred, and the technical information listed above — are necessary to keep the Service secure and working, so unlike analytics they are not covered by the analytics choice. Only the recording is.

Where practical:

  • passwords are masked;
  • authentication credentials are excluded;
  • payment information is excluded;
  • sensitive form fields are masked.

Diagnostic information is used solely to:

  • investigate software defects;
  • improve reliability;
  • monitor availability;
  • detect abuse;
  • maintain security;
  • improve performance.

9. Security

Protecting customer information is important to us.

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

These safeguards may include:

  • encryption in transit;
  • encryption at rest where appropriate;
  • secure authentication mechanisms;
  • access controls;
  • role-based permissions;
  • least-privilege access;
  • audit logging;
  • infrastructure monitoring;
  • vulnerability management;
  • routine software updates;
  • backup and recovery procedures;
  • incident response procedures;
  • employee confidentiality obligations.

Despite these safeguards, no method of electronic storage or transmission is completely secure.

Accordingly, we cannot guarantee absolute security.

10. Data Retention

We retain information only for as long as reasonably necessary to:

  • provide the Service;
  • maintain customer accounts;
  • comply with legal obligations;
  • resolve disputes;
  • enforce agreements;
  • improve the Service.

Generally:

  • Customer account information is retained while your account remains active.
  • Subscription information is retained as necessary for financial and legal compliance.
  • Customer projects remain available while the account is active.
  • After account closure, certain information may be retained for a limited period to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.
  • Aggregated or de-identified information of the kind described in section 5 may be retained indefinitely because it no longer identifies an individual.

Where deletion is requested, information may remain in backups for a reasonable period before being permanently removed through normal backup rotation.

11. Data Deletion

You may request deletion of your account at any time.

How the 60-day grace period works. When you request deletion, we schedule your account for permanent deletion 60 days later and set any paid subscription to cancel at the end of its current billing period, so you keep what you have paid for and are not charged again. During those 60 days your account still exists and you can withdraw the request from Settings (Account tab, “Cancel deletion request”), which restores the account in full and resumes a subscription the request had scheduled to cancel. We do this so that an accidental or regretted deletion is recoverable. On the scheduled date the account and its associated data are permanently deleted, and that step cannot be reversed. If you need your data destroyed sooner than 60 days, contact us at privacy@helloaisearch.com and we will action it.

Following the grace period, we will delete or anonymize personal information in accordance with applicable law and our retention obligations. We also instruct our product analytics provider to delete the usage profile associated with your account.

Billing records are an exception. Our payment processor, Stripe, retains the customer and invoice records associated with your past payments, including the email address on those records, after your helloAISearch account is deleted. We keep those records because tax, accounting, and financial-record obligations require us to. They are not used to contact you or to provide the Service.

Certain information may be retained where necessary to:

  • complete financial records;
  • detect fraud;
  • comply with tax obligations;
  • comply with legal requirements;
  • resolve disputes;
  • enforce agreements.

Deletion of your account may permanently remove access to projects, reports, dashboards, prompts, scan history, and related data.

12. Business Transfers

If PulseSpark.ai LLC is involved in:

  • a merger;
  • acquisition;
  • investment transaction;
  • financing;
  • corporate reorganization;
  • bankruptcy;
  • sale of assets;

customer information may be transferred as part of that transaction, subject to applicable law.

Any successor organization will remain bound by this Privacy Policy unless users are notified otherwise.

13. Legal Compliance

We may disclose information when we reasonably believe disclosure is necessary to:

  • comply with applicable law;
  • respond to lawful requests from government authorities;
  • enforce our agreements;
  • protect our rights;
  • investigate fraud;
  • prevent illegal activity;
  • protect the safety of users or others.

14. International Transfers

helloAISearch is operated from the United States.

If you access the Service from another country, your information may be transferred to and processed in the United States or other jurisdictions where we or our service providers operate.

Where required, we implement appropriate safeguards for international data transfers.

15. Your Privacy Rights

Depending on where you live, you may have rights under applicable privacy laws.

These rights may include:

  • Access your personal information.
  • Correct inaccurate information.
  • Request deletion.
  • Obtain a copy of your information.
  • Restrict certain processing.
  • Object to certain processing.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local supervisory authority where applicable.

We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us using the information provided at the end of this Privacy Policy.

16. California and Other U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable privacy laws.

Subject to applicable law, you may request:

  • access to personal information;
  • correction of inaccurate information;
  • deletion of personal information;
  • portability of certain information.

helloAISearch does not sell personal information.

helloAISearch does not use personal information for cross-context behavioral advertising.

We do not knowingly share personal information in exchange for monetary or other valuable consideration as those terms are defined under applicable privacy laws.

Global Privacy Control. If your browser sends a Global Privacy Control signal and you have not made an analytics choice on this site, we treat the signal as “Necessary only”: we do not show the analytics banner, and no analytics tool is loaded. A choice you make on this site takes precedence over the signal, in either direction, and you can change it at any time using the control in section 7.

17. Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, data protection law requires us to have a legal basis for each way we use your personal information. Ours are as follows.

Performance of a contract. Creating and operating your account, running the scans you configure, sending the transactional emails the Service depends on, and processing your subscription. Without this processing we cannot provide the Service you asked for.

Legitimate interests. Keeping the Service secure, preventing fraud and abuse, diagnosing faults, and improving helloAISearch, including the benchmark and model-training work described in sections 3 and 5. We have weighed these interests against your rights, which is why that work excludes your account the moment you opt out in Settings → Account → Data use, and why it never uses your name, email address, billing details, or credentials. You may object to processing based on legitimate interests at any time by contacting us.

Consent. Analytics technologies that store or read information on your device, and the error-triggered recording, as described in sections 6, 7 and 8. Analytics are off until you accept, and you can withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.

Legal obligation. Retaining billing and tax records, and responding to lawful requests from authorities.

International transfers. helloAISearch is operated from the United States, and the companies listed on our Subprocessors page process data there. Where a transfer out of the EEA or UK requires a safeguard, we rely on the European Commission's Standard Contractual Clauses as incorporated into those providers' standard terms. Our Data Processing Agreement is published on this site and forms part of the Terms of Service. If you need a countersigned copy for your records, contact privacy@helloaisearch.com.

18. Children

The Service is intended for businesses and individuals who are at least 18 years of age.

We do not knowingly collect personal information from children under 16.

If we become aware that we have collected information from a child in violation of applicable law, we will delete that information as soon as reasonably practicable.

19. Third-Party Websites

The Service may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of third-party websites.

Users should review the privacy policies of those third parties before providing information.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice through the Service, by email where appropriate, or by other reasonable means before the changes become effective.

Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

21. Contact Us

If you have questions about this Privacy Policy or our privacy practices, you may contact us:

PulseSpark.ai LLC
Email: privacy@helloaisearch.com
General Support: hello@helloaisearch.com
Billing: billing@helloaisearch.com
Website: https://helloaisearch.com