Viscovery Privacy Policy

1. Information We Collect

We collect information you provide, information generated through your use of the Services, and information from third parties and public sources.

1.1 Information You Provide

• Account and profile information, such as your name, business email address, company, role, login credentials, and communication preferences.
• Analysis inputs, such as website or domain URLs, brand names, keywords, competitors, markets, prompts, notes, and other materials you submit for an audit or report.
• Transaction information, such as the plan purchased, amount, billing contact, transaction identifiers, and payment status. Payment card details are collected and processed by our payment processor (such as Stripe); we generally do not receive full card numbers.
• Communications, including support requests, survey responses, feedback, and messages you send us.

1.2 Information Collected Automatically

• Device and network information, such as IP address, browser type, operating system, device identifiers, language, and approximate location derived from IP address.
• Usage information, such as pages viewed, features used, referring URLs, timestamps, clicks, session activity, report access, and diagnostic logs.
• Cookie and similar technology data described in Section 5.

1.3 Information Used for Analysis

To provide AI visibility intelligence, we may collect or analyze information from websites and other online sources, including publicly available webpage content, metadata, technical signals, search or AI-generated outputs, citations, rankings, and references to brands or competitors. A customer may also submit information about another organization for benchmarking. Public availability does not necessarily mean that information is personal information-free, and we handle personal information in accordance with this Policy.

A person may request or purchase an audit of a website, domain, or brand without being affiliated with, employed by, or authorized by the organization being analyzed. For example, a user may submit a well-known company’s public website for analysis. An audit request does not establish that the organization is a Viscovery customer, has used or approved the audit, or endorses Viscovery.

To identify the entity covered by an audit or report, Viscovery may retrieve, reproduce, and display publicly available brand names, trade names, logos, trademarks, website imagery, and related brand assets within the Services, in reports, and on our website or other materials describing completed audits. A displayed brand may have been submitted by an unaffiliated user and must not be interpreted as a Viscovery customer, user, participant, or endorser. These materials remain the property of their respective owners and are used for identification, analysis, reporting, and presentation purposes only. Their appearance in Viscovery does not imply sponsorship, affiliation, participation, approval, or endorsement.

1.4 Information from Third Parties

We may receive information from service providers, payment processors, analytics providers, authentication providers, business partners, and publicly available sources. We may combine that information with information we already hold.

We may integrate the Services with third-party sources and tools that provide website analytics, search and keyword intelligence, backlink and authority data, traffic estimates, technical website data, content intelligence, competitive intelligence, advertising data, AI visibility signals, and similar business information. We may send domains, URLs, keywords, brand names, or other analysis inputs to those providers and receive data and insights in return. The providers may change as the Services evolve, and their processing is also governed by their own privacy notices.

2. How We Use Information

• Provide, operate, maintain, personalize, and improve the Services.
• Analyze websites, keywords, brands, competitors, AI visibility, citations, technical signals, content, and authority signals; calculate scores; and generate recommendations and reports.
• Create, secure, and administer accounts; authenticate users; process purchases; and provide customer support.
• Send transactional messages, report links, service notices, security alerts, and, where permitted, marketing communications.
• Monitor performance, measure product usage, troubleshoot, prevent fraud or abuse, and protect the rights, safety, and security of users, Pepper Square, and others.
• Develop and evaluate features, models, methods, and aggregated insights, subject to applicable law and contractual restrictions.
• Comply with law, enforce agreements, resolve disputes, and establish or defend legal claims.
• Carry out another purpose disclosed to you when information is collected or with your consent.

3. AI Processing and Automated Analysis

Viscovery uses automated systems, which may include machine-learning models and third-party AI services, to evaluate submitted inputs and online information and to generate visibility scores, comparisons, summaries, recommendations, and reports. These outputs are probabilistic and may be incomplete or inaccurate. They are intended to support business analysis and are not legal, financial, employment, credit, housing, insurance, medical, or other high-impact decisions.

Depending on the feature and our provider settings, inputs and outputs may be sent to service providers that process them on our behalf. We contractually limit service providers to authorized purposes where required. Do not submit sensitive personal information, confidential information you are not authorized to share, or content whose processing would violate law or third-party rights. We do not use personal information submitted through customer accounts to train general-purpose public AI models unless we disclose that practice and obtain any consent required by law.

Authorized members of our team may access and review submitted inputs, generated reports, and related system information when reasonably necessary to provide support, investigate errors or abuse, improve quality, validate results, or conduct periodic or random quality audits. Access is limited to personnel and contractors with a business need and is subject to appropriate confidentiality and security obligations.

4. How We Disclose Information

We may disclose personal information to the following categories of recipients:

• Service providers and processors that support hosting, cloud infrastructure, analytics, AI processing, authentication, customer communications, security, support, and payments.
• Business customers and authorized users, for example when a report or workspace is shared within an organization.
• Professional advisers, auditors, insurers, and financial institutions where reasonably necessary.
• Government authorities, law enforcement, courts, or other parties when required by law or reasonably necessary to protect rights, safety, or security.
• A buyer, investor, successor, or other relevant party in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar transaction.
• Other parties at your direction or with your consent.
• Data and integration providers that supply website, search, keyword, backlink, traffic, technical, content, competitive, advertising, or AI visibility information used to perform or enhance an audit.

We may disclose aggregated or de-identified information that cannot reasonably be used to identify you. We do not sell personal information for money. Some analytics or advertising technologies may be considered a "sale," "sharing," or targeted advertising under certain state laws; where applicable, we provide required choices as described in Sections 5 and 11.

5. Cookies, Analytics, and Similar Technologies

We and our service providers may use cookies, pixels, local storage, software development kits, and similar technologies to keep the Services functioning, remember preferences, understand usage, measure performance, prevent fraud, and, if enabled, support marketing or advertising. These technologies may collect identifiers and device, network, and activity information over time.

You can control cookies through an available cookie preference tool and your browser settings. Blocking some cookies may impair functionality. Where required by law, we ask for consent before using non-essential cookies. We also honor legally required opt-out preference signals, such as Global Privacy Control, when they apply to the browser and jurisdiction from which the signal is sent.

6. Payments

Payments may be processed by Stripe or another payment processor. The processor collects and uses payment information under its own privacy notice and security practices. We receive limited transaction and billing information needed to confirm payment, provide the purchased service, maintain records, handle refunds or disputes, and prevent fraud. We do not control the processor’s independent use of information.

7. Marketing Communications

We may send marketing communications where permitted by law. You may opt out at any time using the unsubscribe link in an email or by contacting us. We may still send non-marketing communications about your account, purchases, reports, security, or material service changes.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and the risks of processing. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of account credentials and for promptly notifying us of suspected unauthorized access.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect against fraud or abuse. Retention periods vary based on the type of information, the relationship, contractual requirements, sensitivity, and legal requirements. We may retain aggregated or de-identified information where it can no longer reasonably identify an individual. Backup copies may persist for a limited period after deletion.

10. Your Privacy Choices and Rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; to object to or restrict certain processing; to opt out of sale, sharing, targeted advertising, or certain profiling; to withdraw consent; and to appeal a decision on a request. These rights are subject to exceptions and verification requirements.

To exercise a right, contact us using Section 16 and describe your request. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct identity verification. We will not unlawfully discriminate against you for exercising a privacy right. You may also lodge a complaint with your local data protection authority.

11. California Privacy Notice

This section supplements the rest of this Policy for California residents and is intended to address the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), where it applies to us. Terms defined by the CCPA have the same meaning here.

Pepper Square’s incorporation in Texas does not by itself determine whether the CCPA applies. This section applies only to the extent Pepper Square is subject to the CCPA, including because it does business in California and meets an applicable statutory threshold. If the CCPA does not apply to Pepper Square at a particular time, this section does not create rights or obligations beyond those otherwise required by law, although we may choose to honor requests as a matter of policy.

In the preceding 12 months, we may have collected the categories below. The examples describe the types of information in Section 1; actual collection depends on how you interact with us.

We collect these categories from you, your device, service providers, business partners, and public sources, and use them for the purposes in Section 2. We retain them as described in Section 9. We do not knowingly sell personal information for monetary consideration. If our use of cookies or similar technologies constitutes "sharing" for cross-context behavioral advertising, you may opt out using our cookie controls or a recognized opt-out preference signal. We do not knowingly sell or share the personal information of consumers under 16.

Subject to applicable law, California residents may request to know/access, correct, or delete personal information; obtain information about categories and recipients; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service and price. We do not use or disclose sensitive personal information for purposes that trigger a right to limit under the CCPA. California’s "Shine the Light" law may allow certain residents to request information about disclosures for direct marketing; contact us to make such a request.

12. Other U.S. State Privacy Rights

Residents of states with comprehensive privacy laws may have similar rights, including access, correction, deletion, portability, opt-out rights, and an appeal right. We process requests in accordance with applicable law. If we deny your request, you may appeal by replying to our decision or contacting us with "Privacy Appeal" in the subject line.

13. International Users and Data Transfers

Pepper Square Inc. is based in the United States, and the Services may be supported from the United States and other countries. Your information may therefore be transferred to and processed in countries whose privacy laws differ from those where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or another lawful transfer mechanism. We do not rely on the obsolete U.S.-EU Safe Harbor or EU-U.S. Privacy Shield frameworks.

The design, development, testing, operation, maintenance, customer support, quality assurance, and execution of the Viscovery platform and its audits may be performed by Pepper Square personnel, affiliates, contractors, and service providers located in the United States, India, and other countries. Accordingly, authorized teams in multiple jurisdictions may remotely access or otherwise process inputs, reports, account information, and technical data where reasonably necessary for their assigned functions. We apply role-based access, confidentiality commitments, vendor controls, and legally required transfer safeguards to such processing.

If privacy law in the European Economic Area, United Kingdom, or Switzerland applies, our legal bases may include performance of a contract, legitimate interests (such as operating, securing, and improving the Services), compliance with legal obligations, and consent. You may withdraw consent at any time without affecting prior lawful processing. You may also object to processing based on legitimate interests, subject to applicable law.

14. Children’s Privacy

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it. Users between 13 and the age of majority may use the Services only with permission of a parent or legal guardian where required.

15. Third-Party Services and Links

The Services may link to or integrate with third-party websites, platforms, AI services, payment processors, or other services. Their privacy practices are governed by their own notices. We are not responsible for third-party privacy or security practices, and we encourage you to review their notices.

16. Contact Us

For questions, privacy requests, or complaints, contact:

Company

Pepper Square Inc., a Texas corporation

Product

Viscovery

Email

support@viscovery.ai

Address

13355 Noel Road, Suite 1100, Dallas, TX 75240, USA

Website

www.viscovery.ai

We will respond within the period required by applicable law. If your request concerns information controlled by a Viscovery business customer, we may direct you to that customer.

17. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in the Services, our practices, or law. We will post the updated Policy and revise the "Last Updated" date. If changes are material, we may provide additional notice as required by law. Your continued use of the Services after the effective date of an updated Policy is subject to the updated Policy.