Privacy Policy
Who we are
ApexEcho AI measures how AI answer engines mention brands. Questions: apexechoai@gmail.com.
Information we collect
Account details from your sign-in provider, the brands, questions, scans, audits and reports you create, subscription status from Polar, and the technical data needed to keep you signed in. Passwords stay with Clerk and card details stay with Polar.
Providers that process data for us
To measure AI visibility we send your tracked questions, brand and competitor names and domains to the AI providers above through their business APIs. We don't send your account details. Replit (Application hosting); Neon (Database (encrypted at rest)); Clerk (Sign-in and account security); Polar (Payments and subscriptions); OpenAI (Asking ChatGPT your tracked questions; content analysis); Perplexity (Asking Perplexity your tracked questions); Google (Gemini analysis, transactional email, and Search Console / Analytics if you connect them); DataForSEO (Reading Google AI Overviews and search results).
Security
Our database (Neon Postgres) encrypts all stored data with AES-256, with keys managed in a cloud key-management service. Every connection, from your browser to us and from us to our database, uses TLS 1.2 or newer. Google Search Console and Analytics tokens, AI-assistant sessions you connect, and webhook signing secrets are also encrypted inside the app with AES-256-GCM. API keys are stored only as one-way hashes.
Retention
Your work is kept until you delete it or your account. Monitoring scans and prompt-test results are deleted after 2 years.
Your rights
Download or delete your data at any time in Settings → Privacy & data, or email us. We don't sell your data.