Privacy Policy

1. What this policy covers

It covers the AIQ website and app at aiq.socialiqstudio.com, including the free AI visibility check (whoever runs it, and whichever business it's about), the reports it produces, the emails we send, booking a call with us, and AIQ accounts.

2. Information you give us

• Free check: your website address, business name, type of business and city.
• Report request: your email address, and the version of our Terms and this Privacy Policy you accepted.
• Account: your email address and password (passwords are handled by our authentication provider and never stored in readable form), your name if you give it, and the business details you add.
• Booking a call: the name, email address, time and notes you give our scheduling provider, Cal.com.
• Paid plans: your billing name, email and address, and your card, which you give our payment provider, Stripe. We don't receive or store your full card number; we keep your plan, its status and Stripe's reference for you.
• Partner applications: your agency's name and website, your name and email address, roughly how many clients you'd bring, and your message, so we can review your application and reply.
• Anything you send us when you contact us.

3. Information we collect automatically

• Your IP address, used when you run a check or ask for a report to enforce daily limits. We store only a keyed one-way code made from it, not the address itself.
• Technical logs of what the service does (for example, that a check started or an email was sent). Our logs don't record email addresses once email sending is set up; until then, emails that would have been sent are recorded in the logs instead.
• Information your browser stores for the site to work: your sign-in session, your light or dark theme choice, and, after you open your report from your email, a reference that lets us connect your “Book a call” click to your report request.
• A security check by Cloudflare Turnstile on the free check form, which confirms you're a person. Cloudflare processes information about your browser and device to do this, under its own privacy policy.

We don't use advertising trackers, analytics cookies or ad pixels.

4. Information from public sources

Anyone can run a free check on any business, not only its owner. A business can be the subject of a check started by someone else: for example, a marketing agency, including Social IQ, may check a business before contacting it. To produce a check and report, we collect public information about the business entered:

• Pages of its public website: titles, text, structured data, phone numbers and links to social and review profiles. We read only pages a website allows automated readers to access, and identify ourselves as AIQ.
• Answers from AI assistants (ChatGPT, Claude, Perplexity, Gemini and Google's AI Mode) to questions customers ask about businesses like it, including the businesses and sources those answers mention.
• Web search results about the business's public profiles. We don't log in to or read social media profiles.
• For account holders: links to public forum threads (such as Reddit and Quora) found by web search where people ask about businesses like theirs, with the thread's title and our own one-sentence summary. We don't store what people wrote in those threads, or who wrote it.
• Its Google Business Profile as Google Maps shows it (name, address, phone, website, hours, categories, rating and review count), when an account holder links it. We use it to check it against the business's details, and keep only Google's reference for the listing and our own results, not Google's content.
• The reviews Google Maps shows for a linked listing (rating, text, reviewer's name and photo, and when it was posted), when an account holder loads them to reply. We show them and don't store them.

5. How we use information

• To run checks, produce reports, and show them to you.
• To email the report you asked for, and to follow up by email about your report and Social IQ's services. Every email we send has an unsubscribe link. Once you unsubscribe, we stop follow-up and marketing email, whether sent by our system or by our team; we'll still send a report you ask for.
• To research businesses and contact them about Social IQ's services, including by using the results of checks run on them. Those messages also include a way to opt out.
• To limit abuse and cost: daily limits per visitor, per website and per email address, and a security check.
• To prepare for and follow up on calls you book with us.
• To provide AIQ accounts and, when available, paid services.
• To keep the service working, secure and improving.
• To create aggregated statistics, as described in section 8.
• To comply with the law and enforce our Terms.

6. Who we share information with

We don't sell personal information, and we don't share it for cross-context behavioral advertising. We share it only with service providers that process it for us:

• Hosting and infrastructure: Lovable and Cloudflare, which run the site.
• Database: Supabase, which stores the service's data.
• AI providers: OpenAI, Anthropic, Perplexity and Google (Gemini) receive the questions we ask about a business. OpenAI also receives the business's name, type, city and website, excerpts of its public pages and the AI answers, to write questions, read answers, review page content, fill in the business's fact sheet from its website, and search for public profiles. When an account holder asks, OpenAI also receives the business's fact sheet, to write fixes, forum replies and pitches; the rating and text of a review (not the reviewer's name), to draft a reply; and the business's type, area, services and customer questions, to search for forum threads. Google's AI Mode answers are read through SerpApi, which receives the questions and the business's city. None of them receive your email address.
• Email: Resend, which sends report emails. When an account holder approves a pitch to a website that AI assistants cite, Resend also sends that pitch, in the business's name, to the contact address published on that site; we keep that address and when the pitch was sent.
• Security: Cloudflare Turnstile.
• Scheduling: Cal.com, when you book a call.
• Payments: Stripe, which processes subscription payments.
• Maps: Google Maps Platform (Places), which receives a business's name and address to look up its Google listing and its reviews.
• Social trends: the YouTube API Services, which receive the topic search phrases our staff choose (never your data) and return public video numbers, and through which Social IQ uploads its own videos to its own YouTube channel, used under the YouTube Terms of Service (youtube.com/t/terms) and Google's Privacy Policy (policies.google.com/privacy); and Google Trends' public feed of trending searches.
• Instagram and Facebook: Meta's Instagram Graph API, through Social IQ's own connected Instagram account, to read the public numbers of business and creator accounts (followers, and their posts' likes and comments) for our research on what reaches people. We don't read personal accounts, and no customer data is sent. Staff can also post carousels and Reels they've approved to that Instagram account and its Facebook Page, which belong to Social IQ. An account holder on a paid plan can connect the business's own Instagram professional account and the Facebook Page linked to it: we keep the Page's access token encrypted and use it only to show which account is connected, to post the posts the account holder approves or schedules (with their caption and images, or video), and to read how those posts did (reach, views, likes, comments, saves and shares). We don't read the account's messages, its followers' details or other people's posts through it.
• TikTok: TikTok's Content Posting API, through which Social IQ posts its own approved carousels and videos to its own TikTok account. TikTok fetches those images and videos from our site; no customer data is sent.
• Website platforms: when an account holder connects the business's website, we send the changes they approve, or that they let Autopilot make, to that website's own platform: WordPress (the site itself), Shopify or Webflow. We store the connection's login or token encrypted, and use it only to make and undo those changes.
• Partner agencies: when a business's AIQ account is set up and managed by a partner agency, that agency can see and manage everything in the business's workspace, and the business's reports may carry the agency's name.

We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a merger, acquisition or sale of assets, under a privacy policy at least as protective as this one.

7. Reports and their links

Each report has a long, unguessable address. Anyone who has that address can view the report, so share it only with people you want to see it. Reports don't show the email address they were sent to.

A client can turn on an AI profile page: a public page we host that shows the business details they gave us (such as its description, contact details, hours, services, team members named on its fact sheet and customer quotes they have permission to share). It is public, search engines and AI assistants may read and keep copies of it, and it is removed from our site when the client turns it off.

The link in a report email works once and for 7 days. Opening it takes you to the report's permanent address.

8. Aggregated statistics

We may combine results from many checks into statistics by type of business and city, for example how often AI assistants name businesses in a category. These statistics never identify a business or a person, and we only publish a statistic when it combines at least 5 businesses.

9. How long we keep information

• Free checks and reports: 24 months after the check, then deleted or made anonymous.
• Report requests and records of calls booked: 24 months after the last contact, unless you become a customer.
• Unsubscribe records: for as long as needed to honor them.
• IP codes used for daily limits: 30 days.
• Accounts: for as long as the account is open, then 90 days.
• Billing records: as long as tax and accounting laws require, which is usually 7 years. Stripe keeps payment records under its own policy.
• Technical logs: as long as our hosting provider keeps them.

10. Security

We protect information with access controls (only our servers can read check, report-request and lead records), encrypted connections, and by storing secrets only in protected form: report links and IP addresses are kept as one-way codes. No system is perfectly secure, so we can't guarantee absolute security.

11. Your choices and rights

You can ask us to tell you what personal information we hold about you, correct it, or delete it, by emailing hello@socialiqstudio.com. We'll verify the request comes from you and respond within 30 days. We won't treat you differently for making a request.

Social IQ doesn't currently meet the size thresholds that trigger full obligations under laws such as the California Consumer Privacy Act (for example, annual revenue above about $25 million, or buying, selling or sharing the personal information of 100,000 or more California consumers or households). We voluntarily follow many of its principles anyway, including the requests above, and will comply fully if we ever meet those thresholds.

To stop follow-up and marketing email, use the unsubscribe link in any of our emails, or write to us.

If someone else ran a check on your business, you can ask us to delete the check and its report, and we will.

Connected social accounts (Instagram, Facebook, YouTube and TikTok): pressing Disconnect next to the account in AIQ deletes the access token and account details we hold for it straight away. You can also remove our app from the platform's own settings: Facebook (Settings & privacy, Settings, Apps and websites), Instagram (Settings, Apps and websites), your Google Account (Third-party connections) or TikTok (Settings and privacy, Security and permissions, Apps and services permissions). To have us delete everything else we hold from a connection, such as records of what was posted and its results, email hello@socialiqstudio.com with the subject “Delete my data”. We'll delete it within 30 days and confirm by email. Posts already published stay on those platforms until you delete them there.

12. Children

AIQ is a service for businesses. It isn't directed to children, and we don't knowingly collect personal information from anyone under 16.

13. Where information is processed

AIQ is intended for use in the United States. It isn't directed at people in the European Union, the United Kingdom, Switzerland or Canada. If you use it from there, you do so on your own initiative and, to the extent the law allows, that use doesn't create additional rights under those places' laws. We and our service providers process information in the United States and may process it in other countries.

14. Changes to this policy

Each version has a version number, shown at the top. When we make material changes, we'll update the version and, where appropriate, tell people who have an account or have asked for a report.

15. Contact

Tastemaker Collective LLC, doing business as Social IQ, Las Vegas, Nevada. Email: hello@socialiqstudio.com.