Introduction

AIEntry is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

This platform is owned by the Personal Data Administrator \"SERPACT\" Ltd., UIC 202477340, with registered office and management address: Svilengrad, postal code 6500, 19 Krayrechna Street, office 6, email address: info@aientry.bg, telephone number: +359898222555

We inform you that we process data in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council and the Personal Data Protection Act of the Republic of Bulgaria.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. This information is necessary to provide you with access to our services.

Usage Data

We collect information about how you interact with our service, including the pages you visit, features you use, and actions you take. Through the operation of our tool, we collect the following data:

• project domains
• competitor domains
• prompts being tracked
• ranking data for prompts (from ChatGPT, Gemini, Perplexity) for projects & competitors
• AI bot crawl statuses - whether crawling is allowed or not (Response statuses of AI bots)

Google Analytics Data

When you connect your Google Analytics 4 account, we securely store encrypted OAuth tokens to access your analytics data. We only access data necessary to provide our services, namely:

• sessions data
• users data
• active users data
• total page views data
• transactions data
• revenue data
• traffic by AI source (ChatGPT, Gemini, Perplexity)
• pages by traffic (ChatGPT, Gemini, Perplexity)

Other Data Used

• Billing data through Stripe (invoices in Stripe)

Recipients of Your Personal Data

Recipients of your personal data are the Administrator's employees, IT, marketing and advertising specialists, accountants, and lawyers whose work is related to administering your profile, providing services to you, accounting for your payments to the Administrator, and settling your relationship with the Administrator regarding the services provided.

How We Use Your Information

• To provide and maintain our services
• To notify you about changes to our services
• To provide customer support
• To gather analysis or valuable information to improve our services
• To monitor the usage of our services
• To detect, prevent, and address technical issues
• To perform profiling according to your interests for marketing purposes and to send you relevant advertising messages

Data Security

We implement industry-standard security measures to protect your data, including encryption of sensitive information, secure OAuth authentication, and regular security audits. However, no method of transmission over the Internet is 100% secure.

Data Storage and Location

We retain your personal information for the purpose of concluding and/or performing a service agreement as long as your account is active or as needed to provide you services.

After deactivating your profile, we retain your data for up to 90 days for the purposes of settling any relationships related to profile deactivation and organizing their deletion, after which the data is destroyed. The storage of your personal data for marketing and advertising purposes is collected based on your consent until the consent is withdrawn.

Your personal data is stored on secure servers located in the European Union, ensuring compliance with EU data protection regulations.

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can set your browser to refuse all cookies except essential ones or to notify you when a cookie is being sent.

Third-Party Services

We use third-party services such as Stripe for payments and Google Analytics for website analytics. With your consent we also use the Meta (Facebook) Pixel and the LinkedIn Insight Tag for ad measurement and building targeting audiences. These tools send data about page views, clicks and completed payments to Meta Platforms Ireland Ltd. and LinkedIn Ireland Unlimited Company respectively. These services have their own privacy policies that govern the use of your information.

Legal Basis for Processing Personal Data

The legal basis for collecting and using your personal information depends on the specific data and the context in which we collect it.

We process your personal data based on:

• Contractual necessity: To conclude or perform a contract with you (for example, to provide you with the service you registered for). Providing your personal data is mandatory for concluding a contract, and if it is not provided, no contract will be concluded with you.
• Consent: You have given us explicit permission to process your data for a specific purpose (for example, to connect your Google Analytics account, to send you marketing and advertising messages, and others). Withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal.
• Legitimate legal interests: To improve our services, prevent fraud, ensure security, defend against legal and other claims against the Administrator, provided that these interests do not override your data protection rights
• Legal obligation: To comply with applicable laws and regulations.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), if you are a resident of the European Economic Area (EEA), you have the following data protection rights:

• Right of access: You can request information regarding the processing and copies of your personal data.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data under certain circumstances.
• Right to restrict processing: You can request that we limit the processing of your data under certain circumstances.
• Right to data portability: You can request transfer of your data to another organization or directly to you.
• Right to object: You can object to the processing of your personal data under certain circumstances.
• Right to withdraw consent: You can withdraw your consent at any time when we have relied on your consent to process your data.
• Right not to be subject to a decision based solely on automated processing, including profiling

To exercise any of these rights, please contact us. We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe that we have not processed your personal data in accordance with GDPR, you have the right to lodge a complaint with the local supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP) with address: Sofia, 2 Professor Tsvetan Lazarov Blvd., telephone: 02 915 3 518, website: cpdp.bg.

International Data Transfers

Your data is primarily stored and processed within the European Union. However, some of our third-party service providers (such as Stripe for payment processing, Google for analytics, and Meta and LinkedIn for advertising) may process data outside the EEA.

When we transfer your personal data outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the \"Last updated\" date.

Electronic Statements

All electronic statements exchanged between you and us are statements with a simple electronic signature, whose legal force is equivalent to a handwritten signature.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@aientry.bg