How Perfotix AI handles your information.

Information we collect

When you create an account, we collect your name, email address, and password (stored as a salted hash, never in plaintext). When you use the platform, we store the workspace, brand, competitor, prompt, scoring result, recommendation, and report data you create. We do not collect payment card details. All billing is handled directly by Paddle, who act as the merchant of record.

Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance (Article 6(1)(b)). We process your account information, workspace data, and billing details to deliver the platform features included in your subscription.
• Legitimate interests (Article 6(1)(f)). We process session data, security logs, and usage patterns to keep the platform secure and to detect abuse. Our legitimate interest does not override your rights.
• Consent (Article 6(1)(a)). Where you have opted in, we send product updates and digest emails. You may withdraw consent at any time from your account settings or by emailing support@perfotix.in.

How we use your information

Your information is used to operate and deliver the Perfotix AI platform: authenticating your session, storing your AI visibility workspace, running live scoring against AI provider APIs, generating reports, and sending account-related communications. We do not use your data for advertising, and we do not sell it to any third party.

AI provider data handling

When you run live AI scoring, prompt text from your workspace is sent to the following AI provider APIs to obtain model responses:

• OpenAI (ChatGPT scoring and evaluation). Privacy policy: openai.com/policies/privacy-policy
• Google (Gemini scoring and evaluation). Privacy policy: policies.google.com/privacy
• Anthropic (Claude scoring). Privacy policy: anthropic.com/privacy

Prompt text sent to these providers may include your brand name, competitor names, and category keywords. We do not send personally identifiable information about your end customers to AI providers. Responses are stored in your workspace as scoring results. We do not share workspace data with AI providers beyond what is necessary to fulfil a scoring request.

Third-party service providers

We use the following sub-processors who may handle personal data on our behalf:

• Paddle: Payment processing and subscription management. Acts as merchant of record and handles all payment card data directly.
• Neon: Cloud-hosted PostgreSQL database where your account and workspace data is stored.
• Vercel: Application hosting and content delivery.
• Resend: Transactional email delivery. Your email address and name are shared with Resend to deliver password reset emails, digest reports, and account notifications.
• OpenAI, Google, Anthropic: AI scoring providers. Prompt text is sent to these APIs during live scoring runs, as described above.

We do not sell your data to any third party. Each provider operates under their own privacy policy and data processing agreements.

Data storage and retention

Workspace data is stored in a cloud-hosted PostgreSQL database (Neon) located in the United States. Data is retained for as long as your account is active. When you cancel your subscription, your data remains accessible until you request deletion. You may request deletion of your account and all associated data at any time by contacting us at support@perfotix.in.

Cookies

We use the following cookies:

• perfotix_session: An HTTP-only, secure session cookie used to keep you authenticated. This is strictly necessary for the platform to function. It expires when you sign out or after a period of inactivity.
• perfotix_theme: A functional preference cookie that stores your chosen display theme (light or dark). This is not used for tracking and contains no personal data.

We do not use third-party advertising cookies or tracking pixels. We use Google Analytics to measure aggregate page traffic. You can opt out of analytics tracking via our cookie consent banner.

Your rights

You have the following rights regarding your personal data. We will respond to all requests within 30 days.

• Access. You may request a copy of the personal data we hold about you.
• Rectification. You may request correction of inaccurate or incomplete data. Most data can be updated directly from your account settings.
• Deletion. You may request that we delete your account and all associated personal data. We will fulfil deletion requests within 30 days, except where we are required by law to retain certain records.
• Portability. You may request your data in a structured, machine-readable format.
• Objection. You may object to processing based on our legitimate interests. We will cease that processing unless we have compelling grounds that override your interests.
• Restriction. You may request that we restrict processing of your data in certain circumstances.
• Withdraw consent. Where processing is based on consent (such as marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email support@perfotix.in with the subject line "Data Request." If you are located in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

Data breach notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you via email as required by applicable law, and no later than 72 hours after we become aware of the breach where feasible.

Children

The platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email.

Contact

For privacy-related questions, data requests, or concerns, contact us at support@perfotix.in. We aim to respond within 30 days.