Privacy Policy

Data We Collect

Our contact form collects your name, email, and company URL. Product requests also ask about your team, chosen product, account count, and reporting tools. Some requests also ask for a company name and project details. Requests for ChatGPT ads management ask for your business website, offer, service area, monthly ad budget range, tracking status, and who holds your ad account. Agencies also provide their agency name.

We use IP addresses to limit requests to contact forms, site checks, product requests, and AI page readings.

Contact rate limits stay in app memory. Site and AI check limits store an IP hash and short-lived timestamps, not the raw address. New lead records do not include IP addresses.

The free check reads the URL you enter. Its AI step may cache the domain, identified business label, and result for up to 24 hours. The cache does not store full page text.

Google Analytics collects data on site use. Its own privacy terms cover that data.

On the audit page, we may record how you first arrived: UTM campaign tags, OpenAI's privacy-preserving referral value, the landing page, the referring site's origin, and the time. An origin includes only the scheme, host, and port.

Your browser keeps those source details for the current session. If you ask for a full report, we save the allowed source fields with your request.

How We Use It

We use contact forms to reply to you. We send the AI Visibility Report if you ask for it. We read check URLs right away. Saved AI results help us avoid doing the same check twice.

We use product and service requests to review your needs, scope the requested work, and reply with next steps. For ChatGPT ads management, this includes planning campaign setup, tracking, and ongoing management. We do not use agency client details from these requests to market other Canonry services.

We keep contact forms only as long as we need them. This lets us reply, manage our work with you, or keep required business records. Site-use data helps us learn how people use the site.

We may turn on OpenAI Ads tracking. If we do, the browser and server use the same event ID. This lets us count a full-report request once.

Services We Use

We use Resend to send email. We use Google Analytics to track site use.

The optional AI step sends up to 6,000 characters of public page text and JSON-LD structured data to Google Cloud Vertex AI. A Gemini model processes it in the United States.

We may save the domain, business label, model ID, findings, and summary. We keep these for up to 24 hours. We do not cache the full page text.

We may use the OpenAI Ads Measurement Pixel and Conversions API. They help us track a lead after an ad visit. The pixel may save that private referral value in a cookie for this site.

The server sends the event ID, time, audit source URL, and referral value when available. It also sends a SHA-256 hash of your normalized email address.

This event does not send OpenAI your raw email, name, company URL, audit results, or IP address. We do not sell your data.

Your Rights

You can ask us to delete your data at any time. Email hello@canonry.ai.

Contact

Questions about this policy? Email hello@canonry.ai.