Privacy Policy
Last updated: 6 April 2026
Who we are
WhereInAI is operated by SEOBurf, a senior SEO consultancy based in Bath, United Kingdom. The data controller is James Burfield. You can contact us at seoburf.com/contact.
What data we collect
When you run a free scan, we collect:
- Your brand name, website domain, and the prompts you submit for scanning
- The visibility scan results (which AI platforms mentioned your brand and how)
- Your email address (if you choose to receive the full report)
- Standard technical data such as IP address and browser type for security and rate limiting
When you sign up for a paid account, we additionally collect your name and payment details (processed securely by Stripe — we do not store card information).
How we use your data
- To run AI visibility scans and generate your report
- To send your scan results by email
- To send a weekly visibility digest if you opted in
- To provide and improve the WhereInAI service
- To prevent abuse of the free scan endpoint
Lawful basis (UK GDPR)
We process your data on the basis of (a) your consent when you submit your email address, (b) the performance of a contract when you become a paid customer, and (c) our legitimate interests in operating and improving the service.
Who we share data with
WhereInAI uses third-party services to operate. Your data is shared with:
- Supabase — database and authentication hosting
- Vercel — application hosting
- Resend — transactional email delivery
- Stripe — payment processing for paid plans
- OpenAI, Anthropic, Google, Perplexity — AI platform queries (we send your scan prompts to these services to generate your report)
We do not sell your data to anyone, ever.
Email and unsubscribe
If you submitted your email for a free scan report, you will also receive a weekly visibility digest. You can unsubscribe at any time by clicking the link in any email or by emailing us at seoburf.com/contact.
Cookies
WhereInAI uses essential cookies for authentication on the paid dashboard. We use Vercel Analytics (privacy-friendly, no cross-site tracking) to measure aggregate page views and conversion rates. We do not use advertising cookies or tracking pixels.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request that we correct or delete your data
- Object to or restrict our processing
- Withdraw consent at any time
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)
To exercise any of these rights, contact us at seoburf.com/contact.
Data retention
Free scan results and email addresses are retained for as long as you remain subscribed to the weekly digest. Paid account data is retained for the duration of your subscription plus 90 days after cancellation.
Changes to this policy
We may update this policy occasionally. Material changes will be communicated by email if you are a subscriber. The current version is always available at this URL.