Privacy Policy

This policy explains what data Enkidu, Inc. ("Enkidu", "we") collects when you use the AI search visibility platform, why we collect it, who we share it with, and the controls you have. We collect only what we need to run the service and we do not sell your personal data.

We collect the following categories of data:

• Account information — your name and email address, organization name, and authentication details you provide when you sign up or are invited.
• Crawled site content — the pages and text we fetch from the website you designate for analysis, used to synthesize your brand profile and prompt set.
• AI-provider responses — the answers returned by third-party AI models to the prompts we run, and the brand mentions we extract from them.
• Usage metrics — product events, scan history, and diagnostic logs that help us operate, secure, and improve the service.
• Security and session data — your IP address, browser user-agent, and timezone, recorded with sign-ins and audit events to secure accounts, rate-limit abuse, and investigate incidents.

We use this data to: provide the core service (crawl, profile, generate prompts, scan providers, extract mentions, and score visibility over time); produce content recommendations; authenticate you and secure your account; process subscription payments; send transactional and service email; and monitor, debug, and improve the platform. We do not use your data to train our own foundation models.

We share data with a small set of vendors who process it only to provide services to us:

When we run a scan, the prompts we generate are sent to the AI providers above; their handling of that data is governed by their own terms. We do not send your account credentials or payment details to the AI providers.

We retain your data for as long as your account is active. You can permanently delete your organization (workspace) at any time from the danger zone in your settings: deletion removes your brand profiles, crawl content, scan results, audit trail, and all associated organization records from our production systems within 30 days; residual copies may persist in encrypted backups for a limited period before rotating out. You can export your generated content (Markdown/HTML) and analytics (CSV) from within each project. To delete the login account itself, or to request a complete copy of your data, contact us at the address below and we will action it promptly. We also delete data when required by law.

We use two first-party cookies — a session cookie to keep you signed in and a security (CSRF) cookie that protects your requests — plus your browser's local storage for interface preferences such as your selected project. We do not use advertising cookies or third-party ad-tracking, and we do not sell or share your data for cross-site advertising.

Depending on your location you may have rights to access, correct, export, or delete your personal data. The self-serve workspace deletion and per-project exports cover the most common requests; for account-level deletion, a full data export, or anything else, contact us and we will respond within a reasonable time.

Questions about privacy or a data request? Email support@myenkidu.com.