Effective October 13, 2026

Privacy Policy

This policy explains what the free AI Visibility Audit at ai-audit.posted-social.com collects, why, who sees it, and what you can ask us to do about it. The tool is run by Posted Social, a marketing agency in St. Louis, Missouri. Our main website has its own policy at posted-social.com/privacy-policy.

1. What we collect

• What you type into the form. Your business website address, business name, industry, the city or town you serve, and your name and email address, so we can send you the report. If you book a call, your phone number and company as well.
• What your browser sends. Your IP address, browser and device information, the pages you open and when. To limit abuse we keep a shortened, one-way hash of the IP address next to a request, not the address itself.
• Cookies and similar technologies. Described in section 5.
• Public information about the business website you enter. We read pages of that website that anyone can open, the way a search engine does; we run a speed test on it; and we ask AI assistants what they say about businesses like it in your area. We never log in to anything. The report may name other local businesses the AI tools mention, taken from their public answers.

2. How we use it

• To run the audit and build your report.
• To email you the report when it is ready.
• To contact you about a consultation, if you book one, and about our services afterwards. You can tell us to stop at any time.
• To keep the tool working, see how it is used, and improve it.
• To measure our advertising. If you arrive from one of our ads on Facebook or Instagram, we tell Meta that an audit was run or a call was booked, so we can see which ads work (section 5).
• To prevent abuse: a bot check on the form, limits on how many audits and requests come from one place, and a daily cap on audits.

We do not sell your personal information, and we do not send marketing you did not ask for.

3. Your report

Each report is about a business and is built from public information. It lives at an unlisted address: it is not published or listed anywhere, and we ask search engines not to index it, but anyone who has the link can open it. If you share the link, they can read the report. A business audited again within thirty days is shown the same report, so two people asking about one business see one report rather than two that disagree. You can ask us to remove a report about your business (section 8).

4. Who we share it with

We use other companies to run the tool. Each receives only what it needs to do its part:

• AI providers and search. OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), xAI (Grok), Perplexity, and SerpApi (Google AI Overviews) receive the questions we ask about your industry and area. Anthropic's model also reads text from the public pages of the website you entered, to check our findings. None of them receives your name or contact details.
• Google PageSpeed Insights measures the website's speed and receives its address.
• ScrapingBee fetches public pages of a website when that site blocks our own servers.
• Vercel hosts the tool, Supabase stores audits, reports and requests, and Inngest runs the audit in the background.
• Resend sends the report email. GoHighLevel is our customer system and receives your contact details, the business you asked about and its report when you run an audit or book a call.
• Cloudflare provides the bot check on the form (Turnstile).
• Meta receives the advertising events described in section 5.

These companies process data on our behalf under their own terms and may store it in the United States. We may also disclose information when the law requires it, or to protect the tool and the people using it.

5. Cookies, pixels and advertising

• Cloudflare Turnstile stores what it needs to tell people from bots. The form does not work without it.
• Meta Pixel and Conversions API. When our advertising measurement is on, Meta's pixel runs on this site and our server sends Meta the matching events: a page viewed, a report viewed, an audit started, and a request made (running the audit with your name and email, or booking a call). The name, email address and phone number you gave are hashed, turned into a code that cannot be read back, before they are sent, together with your IP address, browser information and Meta's cookies (_fbp, _fbc) when your browser has them. Meta uses this to measure our ads and, within your own Meta settings, to decide which ads you see. You can limit this in your Facebook and Instagram ad preferences, by blocking cookies, or with a browser that sends the Global Privacy Control signal, which we honour: no pixel loads and nothing is sent for that visit.
• We use no other analytics or advertising cookies. Your browser may keep a few small things for this site on your device, such as the name and email you entered, so the waiting page can say where your report is going and the call form can start filled in. They stay on your device.

6. How long we keep it

• Audits and reports are kept while the tool runs, so a business can be compared over time and report links keep working. Ask us and we will remove a report about your business.
• Requests (your contact details) are kept for as long as we have a relationship with you or a genuine need for them, then deleted.
• Server logs are kept for a short period for security and troubleshooting.

7. Security

Connections to the tool are encrypted. Access to stored data is limited to the people and systems that need it, and the keys that reach other companies are kept on our servers, never in your browser. No system is perfectly secure, and we cannot promise otherwise.

8. Your choices and rights

Whoever you are and wherever you live, you can ask us to show you the personal information we hold about you, correct it, delete it (including a report about your business), stop contacting you, or stop the advertising measurement described above. Email info@posted-social.com. We answer within 45 days and never treat anyone differently for asking.

If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. We do not sell personal information. The advertising measurement in section 5 may count as "sharing" under that law; to opt out, email us or turn on Global Privacy Control in your browser. Residents of other states with privacy laws have similar rights and can use the same address. An authorised agent may make a request for you.

If you are in the European Economic Area or the United Kingdom, our legal bases are the contract with you (running the audit you asked for and sending what you requested), our legitimate interests (keeping the tool secure and improving it) and your consent where it is required (advertising measurement). You also have the rights to restrict or object to processing, to take your data with you, and to complain to your data protection authority.

9. Children

The tool is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

10. Changes

We may update this policy. The date at the top says when it last changed, and a material change will be noted here.

11. Contact

Posted Social
1203 Tower Grove Ave, St. Louis, Missouri
info@posted-social.com · (314) 912-3990