Privacy Policy

Last updated: September 26, 2026

This Privacy Policy describes how Ebener Street Technologies LLC, a California limited liability company doing business as AyanaSEO.ai ("AyanaSEO," "we," "us"), collects, uses, retains, and shares information in connection with the AyanaSEO.ai website and service (the "Service"). The Service is a business tool offered only to customers in the United States; it is not directed to children and we do not knowingly collect information from anyone under 18.

1. Information we collect from you

Account information. When you create an account or start a free preview, we collect your email address, name, password (stored by our authentication provider in hashed form), and the business location you choose to track.

Payment information. Payments are processed by Stripe. We do not store your card number; we receive subscription status and billing metadata from Stripe.

Content you provide. Business details, keyword selections, and branding assets (such as a logo and accent color) you upload for use in reports.

Free preview emails. To view a full free-preview result, you provide an email address. If you do not subscribe, we delete unconverted preview emails after 90 days.

Usage and technical information. We use cookieless, first-party web analytics (page views, referrers, approximate location, device type) and log product events needed to operate the Service. We do not use advertising trackers and do not show ads.

Communications. Emails you send to our support address.

2. Public business information we collect

The Service's purpose is analyzing publicly available local-search information about the business you track and its competitors: search rankings, business profile details (name, address, phone, categories, ratings, review counts), public reviews, and public business posts. This data originates from Google surfaces and is retrieved through third-party data providers.

Two rules govern this data:

  • Reviewer identity is never stored. When we ingest a public review, we keep the review text, star rating, and timestamp only — never the reviewer's name, photo, or profile identifier.
  • Verbatim text is purged within 30 days. Raw review and post text is deleted on a rolling basis no later than 30 days after capture. What we keep long-term are non-copyrightable facts (ratings, review counts, categories, rank positions, each with our own capture timestamp) and aggregated, de-identified analytics we derive (sentiment scores, themes, recommendations). Aggregates are published only above a minimum sample size so they cannot identify an individual.

3. How we use information

We use information to: provide and operate the Service (including running scheduled scans and generating analytics and reports); process payments and send billing communications, including a renewal notice before each charge; send transactional emails (account, password reset, trial expiry); send marketing email only if you separately opt in, with a working unsubscribe in every message; provide support; secure and improve the Service; and comply with law. Review text is processed by an AI model (Google Gemini, on paid API terms that do not use the data to train Google's models) to derive sentiment and themes.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not use personal information for cross-context behavioral advertising.

4. How we share information (service providers)

We share information only with service providers who process it on our instructions to run the Service:

  • Supabase — database and authentication (primary data store)
  • Vercel — hosting and web analytics
  • Stripe — payment processing (Stripe also acts as an independent controller for fraud and payments)
  • Resend — transactional and (opt-in) marketing email
  • Upstash — rate limiting and caching
  • DataForSEO — retrieval of public search, review, and business-profile data
  • Google (Maps Platform / AI Studio) — business lookup and AI analysis

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice to you).

5. Data retention

DataHow long
Account informationLife of the account, then deleted within 30 days of account closure
Payment and tax recordsUp to 7 years (legal/financial retention), held by Stripe and in our billing records
Free-trial emails (no subscription)90 days
Raw review and post textRolling window, purged within 30 days of capture
Business facts (ratings, counts, positions) and derived aggregatesRetained as historical, de-identified analytics
Support emails2 years

When you delete your account, your account data and your location's stored data are deleted after a short grace period, except records we are legally required to keep. Deleted data also ages out of encrypted backups on their normal rotation.

6. Your privacy rights

You may request access to, correction of, or deletion of your personal information by emailing admin@ayanaseo.ai or using the in-app account controls. We verify requests (for account holders, via your signed-in session) and respond within 45 days. We do not discriminate against you for exercising privacy rights. Because we do not sell or share personal information, there is nothing to opt out of on that front.

If you are a reviewer whose public review of a business was analyzed by the Service: we do not store your identity, and raw review text is deleted within 30 days. You may still contact us at the address above with questions or requests.

7. Security

Data is stored with access controls (row-level security scoping each customer to their own data), encryption in transit and at rest via our providers, and least-privilege service credentials. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by applicable law.

8. California disclosures

For CCPA/CPRA purposes, the categories of personal information we collect are: identifiers (name, email); commercial information (subscription and billing records); and internet activity (usage of the Service). We collect them directly from you or generate them through your use of the Service, for the business purposes in Section 3, and retain them per Section 5. We do not collect sensitive personal information as defined by the CPRA, and we do not sell or share personal information.

9. Changes and contact

We may update this policy; material changes will be notified by email or in-product notice before they take effect. Questions and privacy requests: Ebener Street Technologies LLC d/b/a AyanaSEO.ai, 455 Market St, Ste 1940 #788421, San Francisco, CA 94105, admin@ayanaseo.ai.