Privacy Policy

Who we are

SpreadAI (spreadai.io) provides an independent GEO and AI customer-journey readiness assessment. This policy describes how we handle information when you request a free scan or contact us.

Information you provide

When you submit the scan form, we collect the fields you enter: website URL, work email, business type, primary goal, optional market and notes, and optional company name. We record the time you gave consent, your consent choice, and basic attribution data (for example referrer and campaign parameters when present).

Public website analysis (automated)

To prepare your snapshot, we use automated tools to retrieve and analyze publicly available pages from the website URL you submit. We use http and https URLs only. We apply safety limits (including redirect caps, response size limits, rate limits, and robots.txt handling where appropriate). We do not bypass CAPTCHAs, login walls, paywalls, or anti-bot systems; we do not submit forms, send messages, book services, make purchases, or call APIs that require credentials on your behalf.

We do not request or store your passwords, API keys, OAuth tokens, payment card data, or your customers' personal data. We do not access private admin dashboards or non-public accounts.

How we use information

• Run the readiness assessment and deliver your snapshot by email
• Respond to your request and provide support
• Improve our systems, safety controls, and reporting quality
• Protect against abuse (rate limits, honeypot signals, logs)

We do not sell your personal information.

When you connect your account to an AI assistant (for example through our Model Context Protocol server), data shared that way is used only to fulfil your request. It is not sold, not used for unrelated advertising, not used to build profiles, and not used to train models.

Optional monitoring (AI mention tracking)

If you create a mention watch, we periodically ask AI models or a web search API the questions you configure and store what they answer about your category — including the question text, the engine/model used, the answer excerpt, any URLs the answer cited, and whether your domain or brand appeared. This is observational data about public AI answers, not about your customers. We store it to compute your mention metrics and change alerts, and you can delete a watch (and ask us to purge its observation history) at any time.

Retention

We retain lead and assessment records for as long as needed to operate the service, meet legal obligations, and resolve disputes. Monitoring observations are retained with the watch they belong to and can be deleted on request. You may request deletion as described below.

Your rights and contact

To request access to, correction of, or deletion of the personal data you submitted, email [email protected] from the same address you used on the form, or reply to your confirmation email. We may need to verify your request before acting on it.

Changes

We may update this policy from time to time. The effective date at the top will change when we do. Continued use of the service after an update means you accept the revised policy.