Privacy Policy

Last updated: June 2026

1. Who we are

AI Visibility Lab is operated by David O'Donnell, Lugano, Switzerland. Contact: [email protected]

2. What data we collect and why

Domain names (free check)

When you submit a domain for the free AI visibility check, we process that domain name to run the audit. The result is cached for 24 hours to avoid redundant processing. We do not associate domain names with personal identities unless you also provide an email address.

Email addresses (full report)

When you request the full PDF report, we collect your email address and the domain you submitted. We use this solely to deliver the report. We do not add you to a marketing list without separate consent. We store the email address, domain, and report date in a database on our server in Frankfurt, Germany (Hostinger KVM VPS).

Server logs

Our server records standard access logs (IP address, request path, timestamp, response code). These are retained for up to 30 days for security and debugging purposes.

We use a single first-party cookie to store your cookie consent preference (key: aivl_cookie_consent). We do not use tracking cookies, advertising cookies, or any third-party analytics services.

3. Legal basis

We process domain names on the basis of legitimate interest (providing the service you requested). We process email addresses on the basis of contract performance (delivering the report you requested). This site is subject to the Swiss Federal Act on Data Protection (FADP / nDSG) and, where applicable, the EU GDPR.

4. Where data is stored

The public website is hosted on Infomaniak servers in Switzerland. The AI Visibility Engine API and database are hosted on a Hostinger VPS in Frankfurt, Germany. The Frankfurt server is operated under EU data protection standards.

5. Your rights

You have the right to access, correct, or request deletion of any personal data we hold about you. To exercise these rights, email [email protected] with your request. We will respond within 30 days.

6. Data retention

Email addresses and associated audit records are retained for up to 12 months, after which they are deleted unless you have engaged us for ongoing services. Server logs are retained for 30 days. Cookie consent preference is stored in your browser's localStorage and is not sent to our servers.

7. Changes to this policy

We may update this policy as the service evolves. The date at the top of this page shows when it was last revised.