Privacy Policy

1. Who is responsible

Dot Bd Solutions, 335/Kha, TV Road, East Rampura, Dhaka-1219, Bangladesh (“AEO Corner”) is the controller of the personal data described here. Contact: [email protected].

2. What we collect, and why

3. Google user data

This section explains how AEO Corner accesses, uses, stores, shares and deletes data it receives from Google APIs. It applies only if you choose to connect your Google account to a project. Connecting is optional and AEO Corner works without it. Signing in to AEO Corner does not use Google and gives us no Google data.

What Google user data we access

When you connect, Google shows you a consent screen for two read-only permissions. We request nothing else: no email address, no profile, no contacts, no files, and no permission to change anything in your accounts.

• Google Analytics (https://www.googleapis.com/auth/analytics.readonly). From the Google Analytics 4 property you choose we read reports of visits that came from AI answer engines (such as ChatGPT, Perplexity, Gemini and Google AI Overviews): the date, the traffic source, the landing page address, and the counts of sessions, engaged sessions, key events and revenue. We also read the list of accounts and properties you can see, once, so that you can pick one.
• Google Search Console (https://www.googleapis.com/auth/webmasters.readonly). From the site you choose we read search performance by date: the search queries and page addresses, with clicks, impressions and average position. We keep only the queries that contain your brand name and discard every other query at once. We also read the list of sites you can see, once, so that you can pick one.

We do not read anything from a property or site you did not choose, and we read no personal data about your website’s visitors: Analytics and Search Console reports of this kind are aggregated counts.

How we use it

We use this data for one purpose: to show you, inside your own AEO Corner project, how much traffic AI answer engines send to your website and how that changes after you make a fix. That is the user-facing feature you connect Google for, and we do not use the data for anything else.

• We do not use it for advertising of any kind, including personalised, targeted, retargeted or interest-based advertising.
• We do not use it to determine creditworthiness or for lending.
• We do not combine it with data from other customers, and we do not build databases of it for any other purpose.
• We do not use it to develop, improve or train artificial-intelligence or machine-learning models, ours or anyone else’s, and we do not send it to AI model providers. The AI models we use (see the subprocessors list) work on public web pages and AI answers, never on Google user data.

Who sees it, and who we share it with

Only members of your organisation who can see the project can see this data in AEO Corner. We do not sell it, rent it, transfer it or disclose it to anyone, including advertising platforms, data brokers and information resellers, except in these cases: (a) to the infrastructure providers listed on our subprocessors page, who store and process it for us under contract and may not use it for their own purposes; (b) where the law requires it; (c) for security, such as investigating abuse; and (d) in a merger, acquisition or sale of assets, only after we have told you and you have agreed.

AEO Corner staff do not read your Google data. A staff member may view it only if you ask us for support and agree to that, to investigate a security problem or bug, or where the law requires it. Our employees, contractors and any successor are bound by the same rules. These rules apply equally to the raw data and to anything aggregated, anonymised or derived from it.

How it is stored and protected

Data is encrypted in transit (HTTPS). The access token Google gives us is stored encrypted with a separate key-protected envelope and is opened only by the background process that reads your reports; it is never shown to anyone, never written to logs and never sent to your browser. The report figures are stored in our database in the region described in section 7, separated from every other organisation’s data by access rules in our code that are checked by automated tests.

How long we keep it, and how it is deleted

• The access token: kept until you disconnect or your account is closed. When you press “Disconnect” on the project’s Google connection screen, we erase our saved copy of it at once and stop reading your reports. You can also remove AEO Corner’s access yourself at any time at myaccount.google.com/permissions.
• The report figures (by day): kept while your account exists, so you can see trends, and deleted together with the rest of your account data about 30 days after the account is closed.
• Deleting sooner: email [email protected] from the address on your account and ask us to delete your Google data. We confirm and do it within 30 days.

Changes

If we ever want to use Google user data for a new purpose or access a new type of it, we will update this policy and ask for your consent before we do.

Google API Services User Data Policy

AEO Corner’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Marketing email

Receiving your audit report does not sign you up for marketing. We send marketing email only if you tick the separate consent box, and every message has an unsubscribe link.

5. Cookies

This public site does not set cookies of its own and does not use cookie-based analytics. The bot check on our audit form (Cloudflare Turnstile) and our sign-in provider (Clerk) may set strictly necessary cookies to do their job.

6. Who we share data with

We do not sell personal data, and we do not share Google user data (section 3). We share personal data with the companies below only as needed to run the service.

Subprocessors

The same list, with where each company processes data, is on the subprocessors page. We tell customers 30 days before we add one.

7. Where data is stored

Data is stored in the United States.

8. Your rights

You can ask us to access, correct, export or delete your personal data, and to stop marketing email. We act on requests within 30 days. Email [email protected]. If you are in the EU, UK or California you may have additional rights, and you can complain to your local data-protection authority.

9. Security

Data is encrypted in transit, secrets are encrypted at rest, and each organisation’s data is kept separate from others’. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

10. Children

AEO Corner is for businesses and is not directed at children.

11. Changes

If we change this policy in a way that matters, we will tell you before it takes effect.