How ViziRank handles your account, sign-in, project and billing data. Last updated 2 October 2026.
ViziRank is software that measures how visible brands are in the answers of AI assistants such as ChatGPT, Gemini and Claude. ViziRank is offered by:
ViziRank
Email: [email protected]
For the personal data described in this policy, ViziRank is the controller under the General Data Protection Regulation (GDPR). Questions about privacy can be sent to [email protected].
This policy covers our website and the ViziRank application: signing up, signing in (including with Google), using projects, receiving reports and emails, and paying for a subscription. When you use ViziRank to analyse a client's brand (for example as an agency), section 10 explains our role.
| Data | Purpose | Legal basis |
|---|---|---|
| Account data: name, email address, password (stored only as a one-way hash), language, time zone, job title if you add it | Creating and securing your account, signing you in, contacting you about the service | Performance of the contract |
| Google sign-in data: your Google account ID, name and email address, and whether Google has verified that address | Signing you in with Google and linking your Google login to your account | Performance of the contract |
| Two-factor authentication secret and recovery codes (encrypted) | Protecting your account if you turn on two-factor authentication | Performance of the contract |
| Project data: brand name, website, competitors, prompts, topics, optional Slack webhook URL | Running the measurements you set up | Performance of the contract |
| Analysis results: AI answers, brand mentions, positions, cited sources and links, scores, content audits, crawler checks, action plans and PDF reports | Showing your results, trends and recommendations | Performance of the contract |
| Billing data: company name, billing email and address, KvK and VAT number, purchase order reference, subscription and invoice history | Billing, invoicing and meeting tax obligations | Performance of the contract; legal obligation (tax records) |
| How you heard about us, if you tell us during onboarding | Understanding which channels bring customers | Legitimate interest |
| Technical data: IP address, browser and device type, pages requested, error logs | Operating, securing and troubleshooting the service, preventing abuse | Legitimate interest |
| Website statistics through Google Analytics (pages visited, approximate location, device type) | Understanding how our public website is used | Consent |
| Email and Slack notifications you enable (weekly digest, visibility alerts, report-ready emails) | Sending the updates you asked for | Performance of the contract |
We do not sell your personal data, we do not use it for advertising profiles, and we do not use it to train AI models.
If you choose “Sign in with Google”, we ask Google only for your basic profile: your Google account ID, name and email address (the openid, profile and email scopes). We do not ask for access to your Gmail, Drive, Calendar, contacts or any other Google data, and we do not store Google access tokens after you are signed in.
We use this information only to create your account or sign you in to the existing account with the same verified email address. We do not share it with anyone except the processors listed in section 6 that host our service.
ViziRank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect ViziRank from your Google account at any time in your Google account settings. Your ViziRank account stays available; you can then sign in with your email address and a password (use “Forgot password” to set one).
To measure visibility we send the prompts in your projects to the AI systems we measure (OpenAI, Google Gemini and Anthropic Claude) and ask them to answer, sometimes using their web search. We also use these providers to analyse the answers, classify prompts, translate short texts and audit web pages. What we send is the prompt text, the answers and the text of public web pages — not your account or billing data.
For the content audit and crawler check we fetch public pages of the website you enter, the same way a browser or search engine would.
Please do not put personal data or confidential information in prompts: they are sent to these providers as part of the measurement.
We use the following kinds of processors. Each only receives the data it needs for its task and is bound by a data processing agreement or equivalent terms.
We may also disclose data when the law requires it, or to protect our rights, our users or the security of the service.
Some of these providers, such as OpenAI, Anthropic, Google and Stripe, are based in or process data in the United States. Where data leaves the European Economic Area, the transfer is based on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Keeps you signed in during a visit and remembers your language choice | Until you close the browser or after 120 minutes of inactivity |
| XSRF-TOKEN | Protects forms against cross-site request forgery | Same as the session |
| Remember me | Keeps you signed in if you choose “Keep me signed in” or sign in with Google | Up to 400 days, or until you sign out |
| last_sign_in | Remembers on this device whether you last signed in with Google or with email, so the login page can mark it | Up to 400 days |
| vr_consent | Remembers your cookie choice | 12 months |
| _ga, _ga_* | Google Analytics, loaded through Google Tag Manager: shows us which pages of our public website are visited. Only after you accept analytics cookies; never inside the application | Up to 2 years |
All cookies except Google Analytics are necessary for the site and service to work. Google Analytics only loads after you accept it in the cookie banner; we do not use advertising or remarketing cookies. You can change your choice at any time via “Cookie settings” at the bottom of our website, and delete cookies in your browser settings.
ViziRank is designed to analyse brands, websites and public AI answers, not individuals. If you, as a customer, enter personal data in a project — for example in a prompt or as a brand name — we process that data on your behalf and you are responsible for having a legal basis for it. Agencies that use ViziRank for their clients can request a data processing agreement at [email protected].
We protect data with encrypted connections (HTTPS), hashed passwords, encrypted two-factor secrets, access controls, rate limiting and regular updates. No system is perfectly secure; if a breach affects your personal data, we will inform you and the authorities as the law requires.
Under the GDPR you have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent you have given. Most data can be viewed and changed in your account settings, and you can delete your account there. For anything else, email [email protected]; we respond within one month.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country.
ViziRank is a business service and is not intended for people under 16. We do not knowingly collect their data.
We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your personal data, we will notify you by email or in the application before it takes effect.