Privacy Policy
Last updated: 22 July 2026
Who we are
Vinespire ("we", "us") is the controller of the personal data described below. Contact: [email protected].
What we collect
- Account data — email address, hashed password (or OAuth identifier), display name.
- Project data — brand names, URLs, competitor names, keywords you choose to track.
- Usage data — page views, feature interactions, basic device/browser info for security and product analytics.
- Billing data — handled by our payment processor; we never receive raw card numbers.
- Public signals — third-party posts, issues, articles, and metadata referencing the brands you track. We do not ingest personal data about end-users.
Free tools on vinespire.com
Free AI SEO tools under /tools (for example visibility estimators, readiness checklists, schema generators, robots.txt and llms.txt utilities) are designed to run entirely in your browser. Inputs you type—brand names, domains, pasted robots.txt or JSON-LD, scores, or form fields—are processed client-side for the core tool result. We do not require an account for core free-tool output, and we do not upload those inputs to Vinespire servers as part of generation or validation.
Optional analytics (page views, which free tool was opened, aggregate interaction events) may still use our existing product analytics pipeline without including the full contents of your pasted files. Shareable result links may encode answers in the URL query string on your device so you can reopen a result—those links are not a server-side data store. Do not put secrets in free-tool fields or shareable URLs.
How we use it
- Operate, secure, and improve the Service.
- Send transactional and weekly digest emails (you can turn the digest off in Settings → Notifications).
- Process payments and provide customer support.
- Detect and prevent abuse.
Analytics & Cookies
We use Umami Analytics (hosted at analytics.vinespire.com) to understand aggregate website usage and improve platform features. Umami is a privacy-focused, cookie-less analytics platform.
- No tracking cookies: Umami does not place any cookies or write tracking identifiers to your local storage.
- No persistent cross-site tracking: Anonymized visitor signatures are calculated temporarily from request metadata and reset every 24 hours. Activity cannot be tracked across different days or other websites.
- No personal data collected: Raw IP addresses and personally identifiable information (PII) are never stored or tracked.
- Essential functional cookies only: Functional cookies are used strictly for securing your account and maintaining authentication sessions (via Supabase). We do not use third-party advertising or cross-site tracking cookies.
Legal bases (GDPR)
Contract performance (account, billing, the Service itself), legitimate interest (privacy-preserving product analytics via Umami, abuse prevention), and consent (optional marketing communications).
Sharing
We share data only with sub-processors we need to run the Service (hosting, database, email delivery, analytics, payments). We don't sell personal data.
Retention
Account and project data is retained for the lifetime of your account. Public signals are pruned per source-specific retention policies (typically 30 days). On account deletion, your data is removed within 30 days except where law requires longer retention.
Your rights
Under GDPR you have the right to access, rectify, delete, restrict, port, and object to processing of your personal data, and to lodge a complaint with your data protection authority. To exercise these rights, delete your account from Settings → Profile or email [email protected].
International transfers
Some sub-processors are based outside the EEA. Where required, transfers are protected by Standard Contractual Clauses.
Security
We use industry-standard encryption in transit, row-level security on the database, and least-privilege access controls for our team.
Changes
Material changes will be communicated by email or in-product. See our Terms for the broader agreement.