Privacy Policy

Devikit LLC ("Devikit", "Aigely", "we", "us") operates aigely.com and app.aigely.com (together, the "Service"). This policy applies to visitors of aigely.com, users of the free Aigely Scan, and customers with an Aigely account. It does not apply to third-party sites we link to.

1. Who we are

The data controller for personal data processed through Aigely is:

Devikit LLC
30 N Gould St, STE R, Sheridan, WY 82801, USA
EIN: 30-1484571
Contact: hi@aigely.com

Aigely is a separate product from other Devikit LLC brands. Data collected through Aigely is not shared with or added to mailing lists for unrelated Devikit products.

2. Scope of this policy

This policy covers, at minimum:

• Visitors browsing aigely.com marketing pages (features, pricing, solutions, blog).
• Anyone submitting a URL to the free Aigely Scan.
• Customers and their team members with an account on app.aigely.com.
• Billing contacts processed through our payment provider.

Aigely is a business-to-business (B2B) product: paid subscriptions require a company name and Tax ID at checkout, and we do not offer self-serve consumer (B2C) purchases. This policy still applies in full to the individuals - visitors, scan users, account holders, and billing contacts - whose personal data we process along the way, regardless of the B2B nature of the underlying contract.

3. Personal data we collect

Free Aigely Scan

• The store or website URL you submit.
• Your selected market/language for the scan.
• Scan results (mention data, excerpts of AI answers, GEO findings), which may be stored to power a shareable scorecard link if you choose to share it.
• Basic technical data: IP address and request metadata, used for rate limiting and abuse prevention.

Creating a free account (email + password) is separate from the scan itself - see Account below. Full AI answers for a scan are available after you register.

Waitlist / early access

• Work email you submit when you join the waitlist (e.g. from Log in, Sign up, or Start trial while the app is not open yet).
• Optional context we store with the signup: intent (login, signup, trial, subscribe), selected plan/billing period, and a rough page source - so we know what you were trying to do.
• IP address and request metadata for abuse prevention.

We use this to invite you when early access opens and to notify our team of new signups. We do not sell waitlist emails.

Accounts and subscriptions

• Name, work email, and password (or SSO identifier) for account holders.
• Company name and Tax ID/VAT number, collected at checkout for B2B billing.
• Organization and project data you configure: domains tracked, prompts, market/language settings, and team member roles.
• Content you submit or that we retrieve from your store to run the Service, such as your public catalog and product pages.

Payments

Payments are processed by Stripe, Inc. We do not store full card numbers on our own systems. Stripe collects billing name, address, Tax ID, and payment method details directly, subject to Stripe's own privacy policy.

Cookies and similar technologies

See Cookie Policy for the full list of cookies we use and how to manage your preferences.

Support and correspondence

If you email us or use a contact form, we keep the correspondence and any personal data included in it to respond to your request and keep a record of the interaction.

4. How we use personal data

• Run the free Aigely Scan and generate shareable scorecards.
• Operate the early-access waitlist and email you when Aigely opens.
• Create, operate, and bill B2B subscriptions, including free trials where offered.
• Generate AI-visibility tracking results: run your prompts against third-party AI providers and compile reports.
• Provide customer support and respond to inquiries.
• Detect and prevent fraud, abuse, and security incidents.
• Improve the Service, including with aggregated or anonymized usage data.
• Send service-related emails (e.g. weekly reports, billing notices) and, only with consent where required, marketing communications.
• Comply with legal, tax, and accounting obligations.

5. Legal bases (EEA/UK visitors)

Where the GDPR or UK GDPR applies, we rely on:

• Contract / steps prior to a contract - running the scan you request, operating your subscription.
• Legitimate interests - security, fraud prevention, rate limiting, and improving the Service, balanced against your rights.
• Consent - optional analytics cookies, and any marketing email you have opted into. You can withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation - retaining billing and tax records as required by law.

6. Cookies

aigely.com uses the open-source consent tool CookieConsent to ask for your choice before any optional cookie category runs. Necessary cookies (like the one that remembers your consent choice) are always on; everything else requires opt-in. Full details, including current cookie names and purposes, are in our Cookie Policy.

7. Who we share data with

We do not sell personal data. We share it only with service providers ("subprocessors") who need it to help us run the Service, under contractual confidentiality and data protection terms, and where legally required (e.g. in response to a valid legal request).

Current categories of subprocessors:

• Payments: Stripe, Inc. - billing, subscription management, tax ID collection.
• AI model providers: OpenAI, Google (Gemini, AI Overviews data via search infrastructure), Anthropic (Claude), and search-data providers used to retrieve Google AI Overviews results (e.g. DataForSEO or SerpApi, depending on configuration). Your submitted prompts and store URLs are sent to these providers to generate the tracking results you request; each provider processes that data under its own terms.
• Hosting infrastructure: Hetzner Online GmbH (Germany) - servers running the Service.
• Transactional email: Resend, Inc. - delivers waitlist notifications to our team (and, when enabled, service emails to you).
• Analytics (optional, consent-gated): Google LLC (Google Analytics 4) - page-view and usage metrics only if you accept Analytics cookies. IP anonymization is enabled.
• Error monitoring: if and when we enable an error-tracking tool, this policy and the subprocessor list will be updated before that provider starts receiving personal data.

We maintain an up-to-date list of subprocessors and will update this section when it changes materially.

8. International data transfers

Devikit LLC is based in the United States, and our subprocessors are located in the US, EU, and UK. If you are located in the EEA or UK, your personal data will be transferred outside the EEA/UK for processing. Where required, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, together with the safeguards implemented by our subprocessors, to protect data transferred this way.

9. Data retention

• Free scan results: kept while a shareable scorecard link remains active, or deleted after a limited period of inactivity if not shared.
• Waitlist emails: kept until you ask us to remove them, or until we convert / close the waitlist after launch, then deleted or rolled into an account record if you sign up.
• Rate-limit / security logs: short-lived, typically retained for a matter of days to weeks.
• Account and project data: kept for the duration of an active subscription, plus a reasonable period after cancellation to allow reactivation, then deleted or anonymized.
• Billing records: retained as required by tax and accounting law, typically several years after the relevant transaction.
• Support correspondence: retained as long as reasonably needed to resolve related issues and for our records.

10. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit (TLS), access controls limiting who inside Devikit can access personal data, and restricting subprocessor access to what each provider needs to perform its function. No system is completely secure; if we become aware of a breach affecting your personal data, we will notify affected individuals and relevant authorities as required by applicable law.

11. Your rights

Depending on where you live, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention requirements.
• Request a copy of your data in a portable format.
• Object to or request restriction of certain processing.
• Withdraw consent at any time for processing based on consent.

To exercise any of these rights, email hi@aigely.com. We will respond within the timeframe required by applicable law. If you are in the EEA or UK and believe we have not resolved your request adequately, you have the right to lodge a complaint with your local data protection authority - in the UK, the Information Commissioner's Office (ICO); in the EU, the supervisory authority in your country of residence.

12. Automated processing

Aigely uses automated processing to generate mention rates, sentiment classifications, and GEO findings from AI provider responses. This processing analyzes AI-generated text about your business, not about you as an individual, and does not produce legal or similarly significant decisions about any person. We do not use automated decision-making with legal or similarly significant effects on individuals.

13. Children

Aigely is a B2B product intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

14. When we process data on your behalf

When you submit your store's catalog, product content, or other business data to be tracked, we process that content as a processor on your behalf to deliver the Service. If your organization requires a Data Processing Addendum (DPA) for compliance purposes, contact hi@aigely.com.

15. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may give you additional rights regarding personal information we collect.

Categories we may collect in the last 12 months (depending on how you use Aigely): identifiers (name, email, IP); commercial information (subscription and billing metadata via Stripe); internet / electronic activity (pages visited, if you opt into analytics); professional information (company name, Tax ID); and inferences we derive about your store's AI visibility (not about you as a consumer profile for advertising).

We do not sell personal information and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not use sensitive personal information to infer characteristics about consumers for advertising.

California residents may request to know, access, correct, or delete personal information, and to opt out of sale/sharing (which does not currently apply because we do not sell or share for advertising). Email hi@aigely.com with the subject line "California privacy request". We will verify your identity before fulfilling a request and will not discriminate against you for exercising these rights.

16. Changes to this policy

We may update this policy as the Service, our subprocessors, or applicable law change. Material changes will be reflected by updating the "Last updated" date at the top of this page, and where changes are significant, we will provide additional notice (such as an email to account holders) before they take effect.

17. Contact and complaints

Questions about this policy or how we handle personal data: hi@aigely.com. See also our Terms of Service and Cookie Policy.