Legal
Privacy
What we collect, who else sees it, how long we keep it, and how to make us delete it. Written to be checked against the product rather than to sound reassuring.
Last updated 7 August 2026 · Seen in Search
What we collect
Three things, for three different reasons.
- Your account
- Your work email address, your name if you gave us one, and the domain part of your email. If you set a password we store a scrypt hash of it, never the password. Sign-in links and one-time codes are stored only as hashes, so we cannot read them back either.
- Your reports
- The domain you asked us to measure, the questions we put to answer engines, and their answers — including the verbatim text, because that text is the evidence behind your score. Also the competitors named in those answers, the sources cited, and the fixes we derived.
- Your IP address
- Recorded with a scan and with rate-limit counters, for abuse protection only. It is never used to profile you, and it is erased 30 days later — see retention.
We also record a handful of product events — a scan started, a report unlocked — so we can tell whether the product works. These are stored in our own database. We do not use any third-party analytics.
Who else sees it
Running a scan means asking other companies questions on your behalf, so this list is part of the product rather than an afterthought.
- DataForSEO
- Puts our buyer questions to ChatGPT, Google AI Overviews and Perplexity and returns their answers. Receives the questions and the domain being measured.
- Anthropic
- Plans the questions, reads the answers for sentiment and competitor names, and drafts the findings. Receives the brand and domain, text we fetched from the scanned site, and the engines’ answers.
- DeepSeek
- The fallback for the step above, used only when Anthropic fails. It receives the same material when it runs.
- Resend
- Delivers sign-in and notification email. Receives your email address and the message.
- Cloudflare
- Serves seeninsearch.com and runs the anti-bot check on the scan form.
- Neon
- Hosts our database, in the Asia Pacific (Singapore) region. Everything above is stored there.
- Google or GitHub
- Only if you choose to sign in with them. We ask for your email address and name and nothing else, and we never post anything.
We do not sell your data, and we do not share it for advertising. The companies above process it to deliver the product and for no other purpose we have asked them for.
Who can read a report
A report you paid for is private when it finishes. It lives at its own address, but until you publish it that address returns “not found” to everyone but you. Publishing is a button on the report page, and you can unpublish again at any time from the same place.
Free teaser scans and scans run for you through one of our partners work the other way round: nobody bought them, their purpose is to be shared, and they are readable by anyone with the address from the moment they finish. No report of any kind is offered to search engines — our robots.txt asks every crawler to stay out of report addresses — but a report that nobody owns is not private either.
We publish pages built from those ownerless scans. A brand profile, a category leaderboard, a head-to-head between two brands: each one carries scores, the brands the engines named, and a link to the report the figures came from. Only scans with no owner are ever used. A report that belongs to a signed-in customer is never included — not while it is private, and not after they publish it, because sharing a link is not the same as asking to be ranked in public. A measurement drops out of these pages automatically once it is more than 90 days old.
Reports quote what answer engines said about a brand. If a report or one of those pages mentions your company and you want it taken down, write to [email protected]. A takedown removes the brand from every published page at once and keeps it out of future ones.
What we email you
Almost everything we send is transactional: a sign-in link, a confirmation, a password reset, a report you started. Each one is the direct result of something you just did and is the only way to finish it, so there is nothing to opt into and nothing to switch off short of deleting the account.
There is now one exception, and it is opt-in. If you monitor a domain, we can email you when something we measured changes. We do not send any of it unless you turn it on. An account with us is not taken as agreement to it, no category is on by default, and there is no legitimate-interest argument being made here — the switch is off until you move it.
- Visibility drops
- When your AI visibility score falls further than run-to-run noise explains. Never sent for a change caused by a different set of engines answering.
- Competitor movement
- When a brand we have not seen before starts showing up in answers about your category, or when one overtakes you on a prompt you track.
- Lost citations
- When a site that used to be cited alongside your brand stops being cited.
- Digest
- One email collecting the alerts you chose, instead of one email each. This is how the alerts above arrive unless you set a category to immediate.
We record the moment you turned each one on and which version of this page was in force at the time. You can turn any of them off from your settings, or with the unsubscribe link at the bottom of every one of those emails — that link needs no sign-in. Turning a category off stops the email; the alerts themselves keep appearing in the app.
We do not use any of this to build a profile, we do not send it to anyone else, and there is no marketing list. The processor that delivers it is Resend, listed above.
How long we keep it
A daily job enforces this; it is not a promise we keep by hand.
- Sign-in tokens
- Deleted after 24 hours. They stop working within 30 minutes.
- Expired sessions
- Deleted once they expire. A session lasts 30 days.
- Rate-limit records
- Deleted after 7 days.
- IP addresses
- Erased from scans and events after 30 days.
- Raw engine responses
- Blanked after 90 days. The parsed evidence your report displays stays with the report, so old reports keep working.
- Your account and reports
- Kept until you delete them.
Your choices
You can delete your account at any time from your data, and choose whether your reports go with it. You can ask us for a copy of what we hold, or ask us to correct it, at [email protected].
Depending on where you live you may have further rights — to object to processing, to restrict it, or to complain to a regulator. Ask us and we will help rather than make you cite a statute.
Contact
Seen in Search, [registered address — to be confirmed]. Privacy questions and deletion requests: [email protected].