Privacy Policy

Last updated: 2026-09-11

This policy explains what personal data SoldByAI collects, how we use it, and the choices and rights you have. We keep it plain: we use your data to run the service you signed up for — never to sell, never to train public AI models.

Who we are

The data controller is SoldByAI ("we"). We handle personal data in line with the GDPR and applicable personal-data protection laws in the jurisdiction in which SoldByAI is established.

SoldByAI provides an AI-commerce visibility and optimization service: we measure how your brand and products are found across AI shopping engines, and help you improve that. This policy covers soldby.ai, your SoldByAI account, and the dashboard.

What we collect

We collect:

Account data — your name, email, company, and role, provided when you sign up. If you sign in through a single sign-on provider, we receive your name and email from that provider.
Store & catalog data — the store URL you audit, and any product catalog you connect or upload (product titles, descriptions, attributes, links). This is your commercial data; you provide it to be measured and optimized.
Audit & usage data — the readiness and visibility results we generate for you, and how you use the dashboard.
Payment data — handled by our payment processor. We receive confirmation and billing metadata; we never store full card numbers.
Automatically collected — IP address, device and browser (User-Agent), and essential cookies needed to keep you signed in and secure the service.

How we use your data

We use your data to: run the audit and visibility measurement you request; power your dashboard and optimization recommendations; manage your account and process payments; provide support; keep the service secure and prevent abuse; and improve the service using aggregated, de-identified insights. We do not use your catalog or store data to train public AI models, and we do not sell your data.

Subprocessors

To run the service we rely on a small set of trusted processors, each bound by a data-processing agreement: cloud hosting and infrastructure; AI model providers (used to measure how AI engines respond to your catalog); email delivery (Resend, resend.com); payment processing; and authentication. We share only the data each needs to perform its function.

Data retention

We keep your account and catalog data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, and security obligations. When you close your account or request deletion, we remove or de-identify your personal data within a reasonable period, except where we must retain it by law.

International transfers

SoldByAI serves brands across borders, so your data may be processed in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.

Your rights

You can access, correct, export, or delete your personal data, object to certain processing, and withdraw consent, in line with the GDPR and applicable laws. To exercise any right, email privacy@soldby.ai — we respond within the period required by law.

Security

We protect your data with encryption in transit, access controls, and the principle of least privilege. No system is perfectly secure, but we take reasonable and appropriate measures to safeguard your data and will notify you and the relevant authorities of a material breach as required by law.

Cookies

We use essential cookies to keep you signed in and to secure the service. We do not use advertising cookies or sell cookie data.

Children

SoldByAI is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Merchant agreements

If you become a contracted SoldByAI merchant, a separate data-processing agreement (DPA) governs how we process data on your behalf. That agreement, signed at onboarding, prevails over this policy for that processing.

Changes to this policy

We may update this policy as our service evolves or the law changes. We will post the updated version here with a new "last updated" date and, for material changes, notify account holders by email.