Privacy Policy

Last updated: June 2, 2026

HiBot ("HiBot", "we", "us", or "our") provides an AI visibility audit platform that measures how AI answer engines surface, recommend, and represent a brand across the customer decision journey, using our proprietary ANSWER framework. This Privacy Policy explains what information we collect when you use our website and services (the "Services"), how we use and share it, and the choices you have.

By using the Services you agree to the practices described here. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide

  • Account details. When you register, we collect your name, email address, and (optionally) company name. If you create a local account we store a securely hashed password; we never store your password in plain text. If you sign in with Google or LinkedIn, we receive your basic profile and email from that provider instead of a password.
  • Brand and audit inputs. To run an audit you provide details about the brand being audited — such as its name, website, target geography, competitors, and the category priorities used to weight your results. You may also review, edit, and approve the question set generated for each audit.
  • Billing information. Payments are processed by Stripe. We do not receive or store your full payment card number. We retain billing metadata such as a billing name, the plan purchased, and a record of each transaction.
  • Communications. If you contact support or correspond with us, we keep a record of that correspondence.

Information collected automatically

  • Log and usage data. Our servers record technical information such as your IP address, browser type, pages viewed, and timestamps. We use this for security, abuse prevention (including rate limiting of sign-in attempts), and to operate and improve the Services.
  • Cookies and analytics. We use a strictly necessary session cookie to keep you signed in and to protect against cross-site request forgery. We also use analytics tools to understand how the site is used. See "Cookies and Tracking" below.

Information from third parties

When you choose social sign-in, Google or LinkedIn shares your name and email with us so we can create or access your account. We do not receive your social media password.

2. How We Use Your Information

  • To create and manage your account and authenticate you.
  • To generate audit questions, run and score audits, and produce your reports.
  • To process payments and manage one-off and recurring subscriptions.
  • To send transactional email such as verification, receipts, and audit notifications.
  • To provide customer support and respond to your requests.
  • To secure the Services, prevent fraud and abuse, and enforce our terms.
  • To analyze and improve the Services, and to comply with legal obligations.

3. AI Processing and Your Audit Data

Delivering an audit involves AI models. We use the Anthropic (Claude) API to draft your audit's questions and to write the report narrative, and a scoring model to rate the responses recorded during the audit. Inputs you provide — such as your brand details and approved questions — may be sent to these providers solely to produce your deliverables.

Audit responses are captured by our specialists under neutral conditions (logged-out, fresh sessions in your target market) and our AI scores only the recorded response text; we do not feed your private account or billing information into the public answer engines being audited. Your generated reports are treated as private client data: they are stored privately and are downloadable only through an authenticated process that verifies your ownership of the audit.

4. How We Share Information

We do not sell your personal information. We share it only as described below:

  • Service providers (subprocessors). We share information with vendors who process it on our behalf to operate the Services:
    • Stripe — payment processing and subscription billing.
    • Anthropic (Claude API) — audit question generation and report narrative.
    • OpenAI — automated scoring of recorded audit responses.
    • Postmark — transactional email delivery.
    • Google and LinkedIn — optional social sign-in.
    • Google (Tag Manager & Analytics) and Microsoft Clarity — website analytics.
  • Agency accounts. If your account is managed by an agency (or is a white-label sub-account), the managing account may have access to the brands, audits, and reports within that relationship.
  • Legal and safety. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, property, or safety of HiBot, our users, or the public.
  • Business transfers. If HiBot is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

5. Cookies and Tracking

We use a strictly necessary session cookie that is required to sign in and to protect form submissions; the Services will not function correctly without it. We also use Google Analytics and Microsoft Clarity (loaded through Google Tag Manager) to understand site usage and improve the experience. You can control cookies through your browser settings, and you may use opt-out tools such as the Google Analytics opt-out browser add-on. Blocking non-essential cookies will not prevent you from using the Services.

6. Data Retention

We retain your account information for as long as your account is active and as needed to provide the Services. Audit data and reports are retained so you can track trends across audit cycles. We also retain certain records (such as payment and transaction history) for as long as required to meet legal, accounting, and tax obligations. When information is no longer needed, we delete or de-identify it.

7. Data Security

We use industry-standard safeguards to protect your information, including encrypted transport (HTTPS), hashed passwords, parameterized database access, and access controls that separate customer, specialist, and administrator roles. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your account information directly from your account settings. To make a request or ask a question about your data, email us at [email protected]. We will respond consistent with applicable law, and we will not discriminate against you for exercising these rights.

9. International Data Transfers

HiBot and our service providers may process and store your information in the United States and other countries that may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for these transfers.

10. Children's Privacy

The Services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at [email protected].

Connect our AI visibility playbook to your AI