Privacy Policy
Last updated: October 12, 2026
This policy explains what SearchWin.ai ("we", "us") collects when you visit searchwin.ai, run the free AI visibility check or ask for a full audit, why we collect it, who we share it with and how to have it deleted. Questions: hi@searchwin.ai.
What we collect
- The website you enter in the free check, and public information we read from that website: business name, services, city, state, phone numbers, addresses and email addresses published on the site.
- The results of the check: the questions we ask ChatGPT, ChatGPT's answers, the businesses and sources it names, and the date of the check.
- Your email address, only if you ask for the full audit, together with the text of the consent you agreed to.
- Technical data: IP address, browser and device (user agent), the page you landed on, the referring page, and advertising parameters in the link you clicked (UTM tags, Google click IDs gclid/gbraid/wbraid, Meta click ID fbclid).
- Cookies, listed below.
We store your IP address only as a one-way hash, which we use to limit how many free checks one connection can run per day.
How we use it
- To run the check you asked for and show you the result.
- To prepare and email you the full audit and 45-day roadmap you asked for, and to follow up about it.
- To send you occasional emails about AI search and our services. Every email has an unsubscribe link.
- To protect the free check from abuse (bot protection, daily limits).
- To measure our advertising and show our ads to people who visited the check (see below).
Advertising pixels and hashed emails
The free check page uses the Meta Pixel and Meta Conversions API, and Google tags for Google Ads and Google Analytics 4. They record that you visited the page, started a check, saw a result or asked for an audit, so that Meta and Google can measure our ads and build audiences for them, including showing our ads to people who saw a result but did not ask for an audit.
When you ask for the full audit, we send Meta and Google a SHA-256 hash of your email address (and hashed city and state of the business you checked) together with your IP address, browser details and Meta cookie IDs. A hash is a one-way code: Meta and Google use it to match the event to an account they already know, not to read your email. You can control ad personalisation in your Meta ad preferences and Google ad settings.
Cookies
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
| sw_attr | SearchWin.ai | Remembers which ad or link brought you here (UTM tags and click IDs) | 90 days |
| _fbp, _fbc | Meta | Meta Pixel browser and click IDs | 90 days |
| _ga, _gcl_* | Google Analytics and Google Ads measurement | up to 2 years | |
| Turnstile | Cloudflare | Tells people from bots on the check form | session |
Your browser also stores the ID of your last check (local storage) so the result opens again when you come back.
Who we share data with
- Vercel (hosting) and Neon (database), where the site and data are stored.
- DataForSEO, which sends our questions to ChatGPT and returns the answers. It receives the questions, not your email.
- Anthropic (Claude), which reads the public text of the website you entered to find the business name, service and city.
- Cloudflare (Turnstile bot protection).
- Meta and Google, as described above.
- Telegram, which carries internal notifications to our team about new audit requests.
We do not sell your personal information.
How long we keep it
- Raw ChatGPT responses: 90 days.
- Check results, audit requests and your email: until you ask us to delete them, and no longer than 24 months after our last contact with you.
- Daily-limit records (hashed IP): 7 days.
Your choices and how to delete your data
Email hi@searchwin.ai from the address you gave us to see, correct or delete your data, or to stop all emails. We reply within 30 days. You can also unsubscribe with the link in any email. If you live in California or another US state with a privacy law, you have these rights under that law, and we will not treat you differently for using them.
Children
The check is for businesses. It is not meant for anyone under 16, and we do not knowingly collect data from children.
Changes
If we change this policy, we will update the date at the top. Significant changes will be announced on this page before they take effect.