Legal

Privacy Policy

Last updated: October 1, 2026

The short version: we collect what we need to run your audit, we don’t use ad trackers or sell your information, AI engines get prompts about your business (not your contact details), and you can have your data deleted by emailing support@findwhat.ai.

  1. 1. Who We Are

    FindWhat.ai is a product of NURO is, Inc. (“NURO,” “we,” “us,” or “our”), 8595 College Pkwy, Ste 350, Fort Myers, FL 33919. This Privacy Policy explains how we collect, use, share, and protect personal information through the FindWhat.ai website at https://www.findwhat.ai and the related audit service (together, the “Service”). It applies only to FindWhat.ai.

  2. 2. Information We Collect

    “Personal information” means information that identifies, relates to, or could reasonably be linked to you. We collect:

    • Information you give us. When you order an audit: your name, email address, the website address you want audited, and optionally a business name, a description of what you sell, and competitor names. When you use the contact form or email us: your name, email address, message, and any audit link or receipt you include. When you sign in to the dashboard: your email address.
    • Payment information. Payments are handled by Stripe. We receive your email address, the amount paid, and Stripe transaction identifiers. We do not receive or store your full card number.
    • Audit data. Publicly accessible pages of the website you submit, the answers AI engines return to audit prompts, and the scores, findings, and recommendations we generate. This is mostly information about a business rather than about you.
    • Dashboard activity. Which recommendations you mark as done, and when.
    • Technical information. Like most websites, our hosting provider records request data such as IP address, browser type, and pages requested in server logs. For rate limiting (for example, on the free quick-check and the contact form), we store a one-way hash of your IP address with a request count — not the address itself.
    • How you found us. Campaign parameters from the link you arrived on, your landing page, the referring site, and a random visitor identifier (see Analytics, Cookies, and Local Storage); and, if you choose to answer, how you heard about us.
    • The free quick-check. The domain you enter, which we use to run the check. Results are cached briefly in memory and are not tied to you.
  3. 3. Analytics, Cookies, and Local Storage

    We do not use third-party analytics, advertising, or cross-site tracking on FindWhat.ai. We measure which of our own posts and campaigns lead to audits using the first-party attribution cookie described below.

    • Cookies. If you sign in to the dashboard, we set authentication cookies to keep you signed in. Stripe sets its own cookies on its checkout pages, which are governed by Stripe’s privacy policy.
    • Attribution cookie. A first-party cookie (fw_attr, kept for 30 days) remembers how you first and most recently arrived at the Site — the campaign parameters in the link you clicked (such as utm_source and utm_content), the page you landed on, the referring site, and a random identifier. When you arrive from a tagged campaign link we record that visit. If you buy an audit, this information is stored with your order so we can see which posts and campaigns lead to audits. It is never shared with advertisers. You can delete it by clearing cookies for this site.
    • Local storage. Your browser stores your light/dark theme preference and, if you use the “guess your score” feature, your guess. These stay on your device and are never sent to us.
  4. 4. How We Use Information

    • to run audits and quick-checks and deliver results, reports, and the dashboard;
    • to process payments, refunds, and upgrades;
    • to send emails about your audit, including the report link, and to answer your messages;
    • to prevent abuse and fraud, enforce rate limits, and secure the Service;
    • to improve the Service, including through aggregated, de-identified statistics about audits; and
    • to comply with legal obligations and enforce our Terms.
  5. 5. Artificial Intelligence and Third-Party Processors

    We use the service providers below to operate FindWhat.ai. They process information on our behalf and under their own security and privacy terms. AI engines receive prompts about your business so we can measure how they answer; we do not send them your email address or payment information.

    ProviderPurposeInformation involved
    VercelHosts and serves the SiteRequest data, including IP address and browser information, in server logs
    SupabaseDatabase, report storage, and dashboard sign-inAccount email, audit inputs and results, dashboard progress
    StripePayment processingEmail, payment details (handled by Stripe), and order details such as website, business name, description, competitors, and campaign attribution
    HighLevel (GoHighLevel)Customer records (CRM)Name, email, website, score, and report link
    ResendSending audit emails and delivering contact-form messages to our support inboxName, email, website, score, report link, and any message you send
    OpenAI, Anthropic, Google (Gemini, including via OpenRouter), PerplexityAI engines queried during audits, and models used to analyze their answersPrompts built from your business name, category, competitors, and public website content — not your email or payment information
    DataForSEORetrieving Google AI Overviews results for audit promptsAudit prompts
    isitagentready.com and Google PageSpeed InsightsTechnical scans of the public website you submitYour website address
    Google FontsServes the icon font used on the SiteIP address and browser information, as part of a standard web request
  6. 6. Who We Share Your Personal Information With

    We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only:

    • to the service providers listed above, to operate the Service;
    • when you choose to share — for example, a public score card you publish (see below);
    • if required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of NURO, our users, or others; and
    • in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.
  7. 7. Public Score Cards

    If you use the share feature on your results page, anyone with the share link can see the audited domain, the business name, the readiness score, and its level. Share links do not expose your email, your recommendations, the receipts view, or your report. Share pages are excluded from search-engine indexing. To take a share link down, ask us at support@findwhat.ai to delete the audit.

  8. 8. Data Retention

    We keep audit records and the associated contact information until you ask us to delete them, so that your results, dashboard, and upgrades keep working. Basic audits become inaccessible after their access period, but the underlying record is kept so it can be upgraded. Messages you send us are kept in our support inbox. We may retain information where needed to comply with legal, tax, or accounting obligations (such as payment records), to prevent fraud, or to resolve disputes. Aggregated or de-identified data, which no longer identifies you, may be kept indefinitely.

  9. 9. What Is Our Security Policy?

    We use commercially reasonable safeguards, including HTTPS encryption in transit, access controls, and hashed identifiers for rate limiting. Audit results are reachable only through unguessable private links or a signed-in dashboard. No method of transmission or storage is completely secure, and we cannot warrant the security of information you transmit to us.

  10. 10. Your Rights and Choices

    You can ask us to access, correct, or delete the personal information we hold about you by contacting support@findwhat.ai or using our contact form. We delete records tied to your email within one business day of verifying a deletion request, except where we must retain information as described under Data Retention. To protect your information, we may need to verify that the request comes from you, typically by confirming access to the email address on the audit.

    If you receive follow-up emails from us about your audit and want them to stop, reply to the email or contact us and we will stop sending them. We will not discriminate against you for exercising any privacy right.

  11. 11. California Privacy Rights

    If you are a California resident, the California Consumer Privacy Act, as amended (CCPA), gives you the right to know what personal information we collect, use, and disclose; to request deletion; to request correction; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit.

    In the preceding 12 months we collected these categories of personal information: identifiers (name, email address, IP address); commercial information (audit purchases); internet or network activity (server logs); and professional or business information (website, business name, description, and competitors). We collected them from you, from your browser, and from public websites you asked us to audit, for the purposes described above, and disclosed them for business purposes to the service providers listed above.

    You may make a request yourself or through an authorized agent at support@findwhat.ai. We will verify your identity before responding, and an agent must provide your signed permission.

  12. 12. Children

    The Service is intended for people 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact support@findwhat.ai and we will delete it.

  13. 13. Where Information Is Processed

    NURO is based in the United States, and our service providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. By using the Service, you understand that your information will be processed in these locations.

  14. 14. How Will You Learn of Updates to This Policy?

    We may update this Privacy Policy from time to time. The “Last updated” date above shows when it last changed. If we make material changes, we will post them on this page before they take effect and, where appropriate, notify you by email.

  15. 15. Whom Should You Contact With Questions?

    Privacy questions and requests: support@findwhat.ai, or by mail to NURO is, Inc., 8595 College Pkwy, Ste 350, Fort Myers, FL 33919.