Privacy Policy
QuerySonar is dedicated to maintaining the confidentiality, security, and integrity of your data. This Privacy Policy outlines how we collect, process, store, and safeguard your personal information and brand telemetry in full compliance with global privacy frameworks (GDPR, CCPA/CPRA).
Zero Data Brokerage
We never sell, rent, or trade your personal information or brand search telemetry to third-party advertisers.
AES-256 Encryption
All data in transit is encrypted via TLS 1.3, and all workspace records are secured at rest using industry standards.
Full User Control
Instant self-serve account deletion and telemetry purge directly within your workspace settings at any time.
01. Information We Collect
When you interact with QuerySonar, we collect certain information to provide, maintain, and secure our services:
- Account & Authentication Data: When signing in with our passwordless flow or OAuth (Google), we collect your email address, verification timestamps, and associated authentication tokens.
- Brand & Telemetry Configurations: Brand names, website domains, target categories, geographic regions, target buyer queries, and competitor domains you submit for multi-engine probing.
- System Telemetry & Logs: IP address, browser type, device information, access timestamps, and API response latency to maintain platform security, prevent brute-force attacks, and enforce rate limits.
- Billing Information: Payment transactions are processed directly by our PCI-DSS compliant third-party payment processors. QuerySonar does not store raw credit card numbers.
02. How We Use Your Information
We process your data exclusively for legitimate operational purposes:
- Executing real-time simulated buyer probes across third-party AI models (ChatGPT, Gemini, Perplexity, Claude, DeepSeek, Grok).
- Calculating Share of Voice (SOV), citation presence, sentiment scores, and technical /llms.txt indexability health.
- Authenticating users via single-use passwordless 6-digit email OTPs.
- Delivering automated weekly competitor displacement alerts and digest summaries requested by your workspace.
- Preventing automated scraping, denial-of-service attempts, and platform abuse.
03. Third-Party Service Providers & Subprocessors
We partner with trusted infrastructure providers who adhere to strict data privacy obligations:
- AI Inference Endpoints: Anonymous prompt requests sent to OpenAI, Google Vertex AI, Anthropic, Perplexity, and DeepSeek for query probing. Submitted prompts contain public search questions and are not used to train proprietary public foundational models.
- Transactional Email: Resend (used solely for dispatching secure 6-digit OTP verification codes and workspace notifications).
- Cloud & Database Hosting: Secure PostgreSQL database clusters with encrypted disk storage and automated backups.
04. Data Retention & Deletion Rights
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or until you request account deletion.
You possess the absolute right to request the complete purge of your account, workspace telemetry, and historical audit transcripts. Account deletion can be initiated instantly from within your Settings → Account panel or by emailing privacy@querysonar.com.
05. Global Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you have statutory rights under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA):
- Right of Access: Request a copy of all personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your data.
- Right to Restrict Processing & Object: Restrict or object to certain types of processing.
- Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
06. Cookies & Essential Storage
QuerySonar uses only essential first-party session cookies required for authentication and security. We do not embed invasive third-party cross-site behavioral advertising pixels.
07. Contact Our Privacy Team
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer at: