Privacy Policy

1. Introduction

This Privacy Policy describes how Overture Systems Solutions, LLC (“Overture,” “we,” “us,” or “our”) collects, uses, and shares information when you use AI BotCheck at www.aibotcheck.io (the “Service”). By using the Service, you agree to the practices described here. Please also review our Terms of Service.

2. Information We Collect

Account information

When you register or sign in, we may collect your email address, display name, authentication provider identifier, and account preferences.

Scan and builder data

When you run a scan or use our file builders, we collect the URLs you submit, the resulting scan outputs (such as robots.txt, llms.txt, HTTP headers, scores, and related metadata), and any configuration you enter in builder tools.

Subscription and billing data

If you subscribe to Guardian or make a purchase, payment processing is handled by Stripe. We receive subscription status, plan details, and limited billing metadata from Stripe — we do not store full payment card numbers on our servers.

Usage and technical data

We automatically collect information such as IP address, browser type, device information, pages visited, timestamps, and referral URLs. We may use Vercel Analytics for aggregated page-view metrics.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Run website scans and generate reports and builder files
• Store scan history and enable comparison and recurring scan features
• Process subscriptions and manage your account
• Send service-related notifications, including change alerts for recurring scans
• Monitor usage, diagnose problems, and improve performance and security
• Detect, prevent, and address abuse, fraud, or unauthorized access
• Comply with legal obligations

4. Scan Data Handling

When you submit a URL for scanning, we fetch publicly accessible resources from that site to produce your report. You are responsible for ensuring you have the right to scan any URL you submit. Scan results are stored in association with your account (when signed in) or as otherwise described at the time of use. Retention periods may vary by feature and account type; scan history for subscribed users is retained until you delete it or close your account, subject to backup and legal retention requirements.

5. Third-Party Service Providers

We use trusted third parties to operate the Service. They process data on our behalf and are contractually required to protect it:

• Stripe — payment processing and subscription management
• Upstash QStash — asynchronous scan job queuing and background processing
• Neon — managed PostgreSQL database hosting for account, scan, and subscription data
• Vercel — application hosting and infrastructure

Each provider's use of your information is also governed by their own privacy policies.

6. Cookies and Authentication

We use an HTTP-only authentication cookie to maintain your signed-in session. The cookie contains a signed JSON Web Token (JWT) with a defined expiration period. We configure cookies with security attributes appropriate for production deployment (including SameSite restrictions).

We do not use third-party advertising cookies. Vercel Analytics, if enabled, collects lightweight, aggregated usage data and does not use cookies for cross-site tracking in the same manner as ad networks.

7. How We Share Information

We do not sell your personal information. We may share information:

• With service providers listed above, solely to operate the Service
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Overture, our users, or others
• In connection with a merger, acquisition, or sale of assets (with notice where required)

8. Data Retention and Deletion

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data by contacting us. Deletion may be subject to reasonable backup retention periods and legal hold requirements.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at the email below. We will respond within the timeframe required by applicable law. Residents of the European Economic Area, United Kingdom, and certain U.S. states may have additional rights under local privacy laws.

10. Security

We implement reasonable administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.

12. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. and other countries where our service providers operate.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Material changes may be communicated through the Service or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or requests, contact Overture Systems Solutions, LLC at jordan.martens@osscontact.com.