Privacy Policy — EchoPilot
Operator: ChatLogic Insights Ltd, registered in England and Wales, company no. 15593166 · Applies to: echopilot.echorank360.com · Effective: October 2026 · v1.1
EchoPilot audits the public online presence of a business you specify, scores it against a published rule set, and on paid plans drafts content and actions for your approval. This policy explains what we hold about you and why. The Service is not offered in the European Union, the European Economic Area, or the United Kingdom (see Terms of Use §2); we use location signals to enforce that restriction.
1. What we collect
- Intake data you submit: business name, website, business type, city and country, ticket band, Google Business Profile URL, social handles, ad-spend band, and the yes/no answers in the setup wizard.
- Scraped public business data: pages fetched from the website you specify (at most 60 pages per audit, honouring robots.txt), DNS records, PageSpeed results, search results, Google Business Profile listing data from DataForSEO (such as rating, review count, categories, photo count and whether opening hours are set, labelled as DataForSEO data), public social-profile metadata, and directory listings. From Google Maps we store only place identifiers: a listing found through the Google Places API is shown live and not stored, and the setup wizard keeps only the details you save. We store the facts extracted for each rule (titles, counts, flags, short snippets), a log of every fetch, and a crawl snapshot of each audit run that keeps, per page, those facts and up to 3,000 characters of visible text for 90 days; we do not keep full page bodies.
- Connected Google Business Profile (optional): if you connect your Business Profile, the Google refresh token is stored encrypted (AES-256-GCM) and used only to read the profile data the checks need (claim and verification status, posts, questions, reviews and owner replies). You can disconnect at any time; the token is then marked revoked and no longer used, and it is deleted with your account data.
- Reviews you import (Managed, optional): reviews of your business that you import from a file or with the EchoPilot browser extension, including each reviewer's public display name, rating, text, date and your reply, used to draft replies for your approval and, as counts and average ratings, in the review sentiment digest.
- Competitor research (Managed): for each competitor you watch (at most five per business), the website address, name and, where Google lists it, its place identifier; weekly snapshots of its public homepage and pricing page (title, description, main heading, prices found, up to 20 KB of visible text, a fingerprint of the full text) and the dates of its posts, read with our crawler (robots.txt honoured, no social media); the changes between snapshots; and, where that provider is enabled, rating history from DataForSEO. Google ratings and review counts of competitors are fetched live when a page, report or email is produced and are not stored (Terms §17).
- Connected social tokens (paid plans, optional): if you connect a social account, the access token is stored encrypted (AES-256-GCM) and used only to read your own posts and, after your explicit approval of each item, to publish drafts you approved. You can revoke a connection at any time.
- Generated content: memos, drafted posts, brand-voice profiles and research briefs produced for your account, together with your approval or rejection of each item.
- Account data: email address, Google account identifier if you use Google sign-in, sign-in link records (hashed), tenant membership, plan and billing status.
- Free score data: the domain and email address you enter, the result, and the network address used for rate limiting.
- Payment data: processed by Stripe; we receive a customer ID, amount, status, card brand, last four digits and billing country — never full card numbers.
- Analytics data (Google Analytics): pages viewed, referrer, approximate location, device and browser type, and the product events listed in §8 — collected only as §8 describes.
- Technical and location data: IP address and its country (as passed by Cloudflare), user agent, timestamps and request logs — for rate limiting, abuse prevention, security, debugging, and enforcing the territorial restriction.
2. Why, and on what legal basis
| Purpose | Basis |
|---|---|
| Auditing the business you specify and producing scores, memos and drafts | Contract |
| Sign-in links, audit-complete and account email | Contract |
| Billing, receipts, refunds, disputes | Contract; legal obligation (accounting records) |
| Rate limiting, security, abuse prevention | Legitimate interests |
| Enforcing the territorial restriction (IP and billing country) | Legitimate interests; contract |
| Aggregate funnel statistics (counts of events, no profiles) | Legitimate interests |
| Measuring site use with Google Analytics (§8) | Consent in the EEA, the UK and Switzerland; legitimate interests elsewhere, with an opt-out |
We do not sell personal data and do not use it for advertising.
3. Processors
Cloudflare (proxy, TLS, geolocation) · Stripe (subscriptions, payments and the billing portal) · Google (sign-in if you choose it; PageSpeed Insights; Places API to find a listing's place identifier and to show listings and the rating of competitors you watch live, without storing them; Google Analytics, §8) · Anthropic (language-model classification of page text, review themes and drafts; prompts contain extracted business text, never your account credentials) · DataForSEO (search results and business listing data) or SerpApi (search results) · Brevo (email) · EchoRank (AI-visibility queries) · RackNerd (hosting). We disclose data if legally compelled and will tell you unless prohibited.
4. Shareable results
A scores-only summary of an audit can be shared through an unguessable link that you create and can revoke. It shows category and overall scores and nothing else. Full reports, evidence and drafts require login.
5. Retention
- Free score results: 7 days for the cached result, then may be pruned; the email address up to 90 days.
- Audit history, evidence and generated content: for the life of the account; a business you remove is hidden, its history is kept, and it is deleted only on an explicit deletion request or account deletion.
- Competitor snapshots, changes and research briefs: for the life of the account; deleted with the business data when the account is cancelled and purged, or deleted.
- Connected tokens: until you revoke the connection or delete the account.
- Account data: deleted or anonymised within 30 days of account deletion.
- Payment records: 7 years (UK tax law). Logs: up to 90 days.
6. Your rights
Access, correction, deletion, restriction, objection, portability, and — where consent applies — withdrawal. Email us from your account address; we answer within one month. As we are established in the United Kingdom you may complain to the UK ICO (ico.org.uk); you may also have rights under the law of the place where you live.
7. Cookies
- Strictly necessary: a session cookie when logged in and a short-lived cookie during Google sign-in.
- Your cookie choice:
ep_consentrecords Accept or Reject for analytics, for 12 months. - Analytics (Google Analytics, §8):
_gaand_ga_<id>, set only where analytics storage is allowed; they expire after up to two years. A five-minuteep_ga_evtcookie carries a "new account" event to the next page, then is deleted.
No advertising or cross-site tracking cookies.
8. Google Analytics
We use Google Analytics 4, provided by Google LLC, to count visits and see which pages and steps help people, with Google's Consent Mode.
- What it collects: pages viewed, referrer, approximate location derived from the IP address (Google Analytics does not store the IP address itself), device and browser type, and these events: a free score started and completed, an account created, a checkout started, and a purchase (plan, billing period, amount and the checkout session identifier). No email address, business name or audit content is sent.
- Your choice: in the European Economic Area, the United Kingdom and Switzerland, analytics cookies are off until you choose Accept in the banner; Reject keeps them off. Elsewhere analytics cookies are on by default. Anyone can change the choice at any time with Cookie choices at the bottom of every page; it is stored in the
ep_consentcookie for 12 months. - Without consent: where analytics storage is off, Google may still receive cookieless signals (for example that a page was viewed) that are not linked to a cookie or identifier.
- Advertising: advertising storage, ad user data and ad personalization are denied everywhere; we do not use Google Analytics data for advertising.
- Opt-out: besides Cookie choices, you can install Google's opt-out add-on: tools.google.com/dlpage/gaoptout.
- Where and how long: Google may process this data in the United States and elsewhere; see Google's privacy policy. Event data is kept for 14 months, then deleted by Google.
9. Transfers and security
Hosting is in Utah, United States. Stripe, Google (including Google Analytics), Anthropic, Brevo and Cloudflare may process data in the US and elsewhere under their standard contractual safeguards. TLS everywhere, hashed sign-in and share tokens, encrypted integration tokens, database bound to localhost, nightly rotated backups. If a breach affects your data we notify you and, where required, the ICO within 72 hours.
10. Children, changes, contact
Not intended for anyone under 18. Changes are posted here with a new version and date; subscribers are emailed for material changes.
Contact:
ChatLogic Insights LTD — EchoRank Agent:
Frederic Desjardins 1321 Upland Dr. PMB 10673, Houston, Texas 77043, United States
Legal: [email protected]
Support: [email protected]