Privacy Policy

Visibly (“we”, “us”, “our”) is an AI-citation monitoring service that tracks brand visibility across large language models and AI search engines. Our service is operated as a solo developer project. Questions: marko@getvisibly.app

• Account data — email address and display name provided at sign-up.
• Brand & prompt data — brand names, domains, and prompts you add for monitoring.
• Scan results — AI engine responses and citation scores generated when we query AI engines on your behalf.
• Usage data — page views, selected feature interactions, and error events (via Sentry).
• Billing data — subscription status and payment events from LemonSqueezy. We do not store card numbers; all payment data is held by LemonSqueezy.

• To provide the core service: running AI engine queries, computing citation scores, and displaying your dashboard.
• To send transactional emails (account verification, password reset, billing notifications) via Supabase Auth.
• To detect and diagnose errors via Sentry.
• With your permission, to understand page views and selected feature usage through PostHog and DataFast.
• To process subscription payments via LemonSqueezy.

We do not sell your data. We do not use your data for advertising.

We share data with the following sub-processors to deliver the service:

• Supabase — authentication and database (hosted on AWS us-east-1).
• OpenAI — AI engine queries. Your prompt and brand data is sent to OpenAI to generate citation results.
• Sentry — error monitoring. Error events may include request data.
• LemonSqueezy — payment processing and subscription management.
• Vercel — application hosting and edge network.
• PostHog — optional product analytics. In regions that require consent it runs only after you accept; elsewhere it may run by default until you opt out.
• DataFast — optional website analytics. In regions that require consent it runs only after you accept; elsewhere it may run by default until you opt out.

We retain your data for as long as your account is active. If you delete your account, your account data, brand data, prompt data, and scan results are deleted from our database. Residual copies in backups are purged within 30 days. Analytics and log data held by PostHog, DataFast, Sentry, and Vercel is subject to each provider's configured retention period and privacy terms.

You may request access to, correction of, or deletion of your personal data at any time by emailing marko@getvisibly.app. You can delete your account directly from Settings → Account. We will respond to data requests within 30 days.

We use essential browser storage for Supabase authentication, security, theme preferences, and remembering your privacy choice. These functions remain active because they are necessary to provide the service you request.

We use PostHog and DataFast analytics technologies to measure page views and selected feature interactions. In regions where prior consent is required (including the EU/EEA, UK, and Switzerland) these do not load until you accept them. In other regions they may run by default, and you can opt out at any time. PostHog session recording and automatic interaction capture are disabled. We do not use advertising cookies.

You can accept, reject, or withdraw analytics permission at any time through Cookie settings. Withdrawing permission stops future analytics collection on this browser and does not affect core product features.

Access to your data is restricted by row-level security policies enforced at the database level. Data in transit is encrypted via TLS. Passwords are hashed and never stored in plaintext.

The service is not directed to children under 16. We do not knowingly collect personal data from children.

We may update this policy. We will email you if we make material changes. The effective date at the top of this page will reflect the most recent revision.

For privacy questions or data requests: marko@getvisibly.app