Privacy Policy

What we collect

• Checks you run:the URL you submit, what we read from that public site, the AI engines' answers to our questions about it, the resulting report, and rate-limit data (a hashed IP address, the site's host, the date and a count).
• Your account: your sign-in identity and email from our sign-in provider, your plan and billing status, the sites you monitor, fix tickets, and white-label settings if you use the Agency plan. We never see your card details.
• Connections you choose to make:for Google Search Console, a read-only refresh token; for Bing Webmaster Tools, the API key you paste. Both are encrypted at rest and used only to check your sites' index status.
• API keys and connected apps:when you create an API key or connect an app such as Claude or Claude Code with "sign in with GetPicked", we store only a hash of each key or token, the app's web address, and when it was last used. Connected apps can read your monitored sites and run re-checks; they cannot change billing, keys or settings.
• Email: when you unlock a report, buy, subscribe or join a waitlist, and any correspondence sent to getpicked@onenano.tech.

How we use it

To run the checks and weekly monitoring you ask for, show results to you (and to clients you share a report link with), verify the fixes you mark done, send the emails you request, bill your plan, prevent abuse, and improve the product. The public "What AI cites" pages contain only category-level totals from our own questions, never your sites' data.

Who we share it with

Service providers that run parts of GetPicked for us: our host (Vercel), database (Neon), sign-in (Clerk), payments (Stripe), email (Resend), and job queue (Upstash). The questions we ask about a site are sent to the AI engines we measure (OpenAI, Anthropic, Google, Perplexity and xAI) through their APIs, and site and page URLs may be sent to Google, Microsoft (Bing), Brave and IndexNow when you connect those services. We do not sell or rent your data.

How long we keep it

Reports and account data are kept while your account is open and deleted on request. Expired OAuth codes and tokens stop working immediately; disconnecting an app or revoking a key ends its access at once. Rate-limit records are kept for a short time for abuse prevention.

Your rights

You can request deletion of your email address or audit records at any time by emailing getpicked@onenano.tech with the subject line “Delete my data.” We will remove your address within 30 days and confirm by email.

If you are in the EU or UK, you also have the right to access, correct, or port your data. Contact us at the address above.

Cookies and analytics

This site uses privacy-friendly analytics to count page visits and understand traffic sources. No cross-site tracking cookies are set. No personal data is collected via analytics.

Changes

If we make material changes to this policy, we will update the date at the top of this page. For questions, contact getpicked@onenano.tech.