Privacy Policy

Found by AI is operated by AlphaLux Marketing ApS ("Company", "we", "us"), a company registered in Copenhagen, Denmark. We are committed to protecting your personal data and your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish data protection legislation.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.

1. Data Controller

2. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, phone number (optional), company name, and business URL when you create an account or submit a form.
• Usage Data: Pages visited, features used, time spent on pages, and interaction patterns to help us improve the Service.
• Technical Data: IP address, browser type, device type, operating system, and referral source, collected automatically through standard web technologies.
• Payment Data: Billing address and payment method details, processed securely through our third-party payment processor (Stripe). We do not store your full payment card details on our servers.
• Communications: Records of correspondence when you contact us via email, forms, or other channels.

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• To provide our Services (legal basis: performance of contract) -- including running AI visibility checks, delivering reports, creating content, and managing your account.
• To communicate with you (legal basis: legitimate interest / consent) -- including responding to inquiries, sending service updates, and providing relevant product information.
• To improve our Service (legal basis: legitimate interest) -- including analyzing usage patterns, conducting research, and developing new features.
• To process payments (legal basis: performance of contract) -- including billing, invoicing, and fraud prevention.
• To comply with legal obligations (legal basis: legal obligation) -- including tax reporting, regulatory compliance, and responding to lawful requests.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data: Retained for the duration of your account and up to 12 months after deletion, to allow for reactivation.
• Usage data: Retained in anonymized form for up to 24 months for analytics purposes.
• Payment records: Retained for 5 years as required by Danish accounting legislation.
• Marketing data: Retained until you withdraw consent or unsubscribe.

5. Your Rights

Under the GDPR, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

6. Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for the Service to function properly (e.g., session management, authentication). These do not require consent.
• Analytics cookies: Help us understand how visitors interact with the Service. We use privacy-focused analytics that do not track individuals across websites.
• Marketing cookies: Used only with your explicit consent to measure the effectiveness of our advertising and provide relevant content.

You can manage your cookie preferences at any time through your browser settings or our cookie consent banner.

7. Third-Party Services

We share data with the following categories of third-party service providers, all of which are bound by data processing agreements:

• Payment processing: Stripe (PCI DSS compliant)
• Email delivery: For transactional and marketing communications
• Cloud hosting: For secure data storage and service delivery (EU-based servers)
• Analytics: Privacy-focused analytics tools

We do not sell your personal data to third parties. Data transfers outside the EU/EEA are only made with appropriate safeguards in place, such as Standard Contractual Clauses.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), encryption at rest, access controls, regular security audits, and employee training.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For any questions or concerns about this Privacy Policy or our data practices, contact us at: