Privacy Policy

AEOMCP LLC operates the AEOMCP platform. For personal data that our customers submit and process through the service, the customer is the controller and we act as processor on their instructions. For data we collect about our own customers, prospects, and website visitors, we are the controller.

Questions, and any request to exercise the rights below, go to hello@aeomcp.ai.

Account and contact data. Name, work email, organization name, and authentication identifiers. We use a third-party identity provider for sign-in and do not store your password.

Billing data. Plan, subscription status, billing period, invoice history, and billing contact. Payment card details are collected and stored by Stripe — they do not reach our systems, and we never see a full card number.

Usage and telemetry. API and MCP calls, tool names, quota consumption, feature usage, error traces, IP address, and approximate location derived from it. We use this to operate the service, enforce quotas, investigate faults, and detect abuse.

Configuration you submit. Brand profiles, prompts, tracked domains, tags, and workspace settings. Prompts are business questions about brands; please do not put personal or sensitive information into them.

Data the platform collects for you. Answers captured from third-party AI platforms, the sources those answers cite, and content retrieved from public web pages during analysis. This is public-facing content, but an answer or a cited page can incidentally contain personal data, and where it does we process it as part of delivering the service to you.

Website and product analytics. How visitors use aeomcp.ai and how signed-in users use the application — pages viewed, links and buttons clicked, approximate location, browser and device type — and any message you send us. In the application, analytics are linked to your account by an internal user identifier, never by your name or email address, and never include the prompts you track or the answers we collect.

We process personal data to provide and secure the service, to bill for it, to give support, to comply with legal obligations, and to communicate about the product.

Where the GDPR or UK GDPR applies, our lawful bases are: performance of a contract (providing and billing for the service); legitimate interests (securing the platform, preventing abuse, improving the product, and limited direct marketing to business contacts); consent, where we ask for it, such as for non-essential analytics; and legal obligation, for tax and accounting records.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

We use these providers to run the service. Each is bound by a contract limiting them to processing data on our instructions.

• Stripe — payment processing, subscription billing, and tax calculation (United States).
• WorkOS — authentication and single sign-on (United States).
• Google Cloud Platform — application hosting, databases, storage, and logging (United States).
• Bright Data — retrieval of public web pages and answer collection infrastructure.
• PostHog — product analytics for our websites and the application, and, where enabled, session replay with every form input masked (United States).
• miniDesk — the support chat in the application, which holds the messages you send through it and any email address you give there.
• Twilio — runs the chat on aeomcp.ai: it stores the messages you send there, along with your name and email address, and relays them to our team (United States).
• WhatsApp (Meta) — carries chat alerts, and our replies, between Twilio and our team's phones.
• Slack — where our team reads and answers chat messages (United States).
• Google Cloud Vertex AI (Gemini) — when the chat's AI assistant replies, it receives the conversation to write the answer (United States).
• Third-party AI platforms — ChatGPT, Gemini, and Google AI Mode, which receive the prompts the platform submits on your behalf in order to capture the answers you are measuring.

We may add or change subprocessors as the service evolves. Email hello@aeomcp.ai to request the current list or to be notified of changes.

We are based in the United States and our infrastructure runs there, so personal data you provide is transferred to and processed in the United States. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, together with our providers.

Account and configuration data is kept while your account is open. After termination we keep it for 30 days so you can request an export, then delete or anonymize it.

Collected answers, citations, and metrics are kept for the retention window of your plan, and deleted with the account on the schedule above.

Billing and tax records are kept for as long as tax law requires, typically seven years, even after an account closes.

The chat on our website asks for your name and email address before it starts. Messages sent through it, your name and your email address are kept for up to 12 months.

Security and access logs are kept for up to 12 months.

Data is encrypted in transit and at rest. Access to production systems is restricted, authenticated, and logged. API keys are scoped to a workspace and can be revoked by you at any time. Payment card data never touches our infrastructure.

No system is perfectly secure. If a breach affects your personal data, we will notify you and any required regulator without undue delay.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent you previously gave.

If you are in California, you may also request disclosure of the categories of personal information we collect and the purposes for collecting it, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising.

To exercise any of these rights, email hello@aeomcp.ai. We respond within 30 days, and we may need to verify your identity first. If you are an end user of one of our customers, contact that customer — we will refer your request to them and support them in answering it.

If you are in the EEA or UK and believe we have not handled your data properly, you can complain to your local supervisory authority. We would rather you told us first.

The application uses cookies that are strictly necessary for sign-in and session security. Our websites and the application also use first-party analytics cookies and browser storage (PostHog, and Google Analytics on the marketing site) to understand traffic and how the product is used. PostHog honours your browser's Do Not Track setting and captures no events from a browser that sends it. We do not use advertising cookies or third-party tracking pixels.

The service is for organizations and business users. It is not directed at anyone under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, email hello@aeomcp.ai and we will delete it.

We may update this policy. The effective date at the top of this page reflects the current version, and we will give notice by email or in the application before a material change takes effect.

AEOMCP LLC

1700 Northwest 64th Street, Suite 201, Seattle, WA 98107, United States

Email: hello@aeomcp.ai