Privacy Policy

1. What we collect

• Account details: your email address and password (stored hashed by our authentication provider, Supabase — we never see or store your raw password).
• Site data: the domain(s) you scan, and the full results of each scan — scores, category breakdowns, generated fix content, and citation-check results.
• Citation Tracker data: the specific questions you choose to track for your domain.
• Competitor data: any competitor domain you choose to scan for comparison.
• Billing metadata: your plan tier and a payment reference token. We do not collect or store your card number — PayGate (and, for international customers, our alternate processor) handles card details directly and only passes us confirmation of payment.

2. How we use it

To run the scans and citation checks you request, maintain your Citation Ledger (a permanent, timestamped record of your scan history — this is a core feature, so scan history is kept indefinitely unless you ask us to delete your account), bill your subscription, and respond when you contact support.

3. Who we share it with

We share the minimum needed to run the service, and nothing else:

• Supabase — hosts our database and handles authentication.
• Vercel — hosts the application itself.
• PayGate (and our alternate international processor) — processes payments.
• OpenAI, Anthropic, Google, xAI, and Perplexity — when you run a scan or a Citation Tracker query, the domain and a generated question are sent to these providers' APIs to check whether their AI model mentions that domain. This is the core mechanism of the product and can't be done without querying the real platforms. If you scan a competitor's domain via the Competitors feature, that domain is sent to these same providers the same way.

We do not sell your data, and we do not use third-party advertising trackers on the app.

4. Cookies

We use one functional cookie set by Supabase to keep you signed in. We don't use advertising or analytics tracking cookies.

5. Your rights under POPIA

As a South African business processing personal information, we operate under the Protection of Personal Information Act (POPIA). You have the right to:

• Ask us what personal information we hold about you, and get a copy of it.
• Ask us to correct information that's inaccurate or out of date.
• Ask us to delete your account and associated data.
• Object to a particular use of your information, or withdraw consent where we rely on it.
• Lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za if you believe we've mishandled your information.

To exercise any of these, email support@zeeder.ai from the address on your account. We'll respond within a reasonable time.

6. Data retention

Scan history is kept indefinitely as your Citation Ledger, since a permanent audit trail is a feature of the product, not incidental storage. Deleting your account deletes your profile, sites, and scan history from our database.

7. Changes

We may update this policy as the product changes. Material changes will be emailed to the address on your account before they take effect.