Legal

Privacy Policy

How we protect and manage your data at Yozigo.

Last updated

Yozigo ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Generative Engine Optimization (GEO) platform.

1. Information we collect

Personal data

We collect information that personally identifies you, such as your name, email address, and billing information, primarily when you register for an account, book a demo, apply to the partner programme, or subscribe to our journal. This data is managed through secure third-party providers (for example Clerk for authentication, Stripe for billing, and Zoho for CRM and scheduling).

Usage and technical data

We automatically collect certain information when you visit the Service, including your IP address, browser type, operating system, referrer, and details about your interaction with our tools (such as the URLs you submit for GEO auditing). On this website that collection also identifies AI crawlers and AI-referred visits so we can measure how AI engines use our content.

Data from websites that use our tracking integrations

When a customer installs a Yozigo GEO tracking integration on their own website (our WordPress plugin, JavaScript snippet, Next.js or Cloudflare middleware, or a log drain), that website sends us a record of each page visit: the visitor's IP address, user agent, referrer, request path and query string, and a timestamp. Nothing is sent until the customer has entered their API key. We use this data only to classify AI crawlers and AI-referred visits and to report traffic share to that customer in their dashboard. The customer is the controller of this data and is responsible for disclosing the integration in their own privacy policy; we process it on their behalf, retain it only for as long as their account needs it, and never sell it or use it for advertising.

2. AI data processing (GEO audits)

The core of our Service involves analyzing how AI models (for example ChatGPT, Gemini, Claude) perceive and cite your content.

  • Retrieval Augmented Generation (RAG): we process your website content to simulate how AI models might "ground" their answers in your data.
  • Model interactions: we do not share your proprietary personal data with AI model providers. We only submit the public URLs or content snippets you designate for auditing to these models to retrieve visibility and sentiment scores.
  • AI employees: content and outreach produced by AI employees is grounded in the data you connect and is logged for your review. Nothing is published or sent without the approval rules you set.

3. How we use your information

  • Deliver and improve the GEO platform features.
  • Process your subscriptions and prevent fraudulent transactions.
  • Send you technical notices, security alerts, and support messages.
  • Analyze platform usage to optimize our GEO algorithms.

4. Cookies and tracking

We use cookies and similar technologies to remember your preferences (such as the light or dark theme) and to measure usage with Google Analytics 4 in production, with IP anonymisation and advertising storage denied by default. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; some portions of the Service may then be unavailable.

5. Data retention and security

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We implement technical and organizational security measures to protect your data, including TLS encryption for data in transit and AES-256 encryption at rest.

6. Your data rights (GDPR/CCPA)

  • Access: the right to request copies of your personal data.
  • Correction: the right to request that we correct inaccurate information.
  • Erasure: the right to request that we erase your personal data under certain conditions.
  • Portability: the right to request that we transfer your data to another organization.

7. Third-party services

We use third-party services to help us operate our platform: cloud infrastructure providers (Vercel, AWS), authentication (Clerk), CRM and scheduling (Zoho), and analytics tools. These providers have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Connected commerce and CMS platforms. When you connect a Shopify store, or another content platform such as WordPress or Webflow, we store an access token for that platform so we can publish the articles you approve. Tokens are encrypted at rest and are used only to list the blogs you can publish to, and to create and update articles you have approved.

For Shopify specifically, we request the write_content permission only. We do not read or store your products, orders, customers, or any other store data. We keep the store’s domain, the blog you selected, and the identifiers of the articles we published, so that an article can later be updated rather than duplicated.

Disconnecting the integration, or uninstalling our app from your store, revokes the token and stops all publishing. We delete the stored token and the connection record on request, and within 48 hours of an uninstall notification from the platform. Articles already published belong to you and remain on your site.

8. Contact us

For any privacy-related inquiries or to exercise your data rights, please contact our Data Protection Office at iam-security@yozigo.com.