Privacy Policy

Last updated: July 6, 2026

1. Who we are

This Privacy Policy explains how Discoverably LLC (“Discoverably,” “we,” “us,” or “our”), a limited liability company organized under the laws of the State of Maryland, USA, collects, uses, discloses, and protects personal information in connection with our website at discoverably.com (the “Site”) and our generative-engine-optimization (“GEO”) analytics service that measures how brands appear across AI answer engines (the “Service”).

For the purposes of the EU/UK General Data Protection Regulation, Discoverably is the data controller of the personal information described below, except where we act as a processor on behalf of our customers (see Section 11).

Contact:

• Privacy inquiries: privacy@discoverably.com
• Mailing address: Discoverably LLC, 306 W Redwood St STE 201, Baltimore, Maryland 21201, USA

2. Scope

This Policy applies to personal information we process about: (a) visitors to our Site and our free onboarding report funnel; (b) customers and their authorized users of the paid dashboard; and (c) prospects who interact with our marketing. It does not apply to third-party websites, AI answer engines, or services that we link to or measure, which have their own privacy practices.

3. Information we collect

(a) Information you provide to us.

• Onboarding report requests: your business domain/website and email address, and any brand, competitor, industry, or location details you confirm so we can generate and email you a free AI-visibility report.
• Account and billing: name, work email, account credentials, and the configuration you select (engines, prompts, cadence). Payment card details are collected and processed directly by our payment processor (Stripe); we do not store full card numbers.
• Communications: information you include when you contact support, request sales/enterprise inquiries, or respond to surveys.

(b) Information collected automatically. When you use the Site or Service, we and our analytics/advertising providers may collect: IP address, device and browser type, operating system, referring/exit pages, pages viewed and interactions (including, where session-replay analytics is enabled, recordings of your interactions with a page, such as mouse movements, clicks, and scrolling), approximate location (derived from IP), and cookie/identifier data including advertising click identifiers (e.g., gclid, gbraid, wbraid, fbclid, li_fat_id, and OpenAI ad references) and analytics identifiers. See Section 5 (Cookies) and our cookie banner for the categories and your controls.

(c) Information from third parties.

• Brand enrichment: publicly available brand metadata (logo, industry, description, competitors) from our enrichment provider (Brandfetch) when you enter a domain.
• AI answer engines and search results: the Service collects how brands — including yours and competitors you track — are mentioned, cited, or ranked in responses from AI answer engines and AI-powered search surfaces, via our data vendor. This may incidentally include personal information that those engines themselves surface in public answers.
• Advertising and analytics partners: measurement and attribution data from the partners listed in Section 7.

We do not intentionally collect special categories of data (e.g., health, biometric, precise geolocation) or the personal information of children.

4. How we use information, and our legal bases

We rely on consent for non-essential cookies, advertising, and analytics where required (EU/EEA/UK/Switzerland and other consent jurisdictions); you can withdraw consent at any time via the “Cookie settings” link in our footer.

We do not use your confidential customer data, prompts, or report content to train third-party generative AI models, and we do not sell it.

5. Cookies and tracking technologies

We use strictly necessary, functional, analytics, and advertising cookies and similar technologies. On first visit (and on demand via the footer “Cookie settings” link) you can Accept all, Reject all non-essential cookies, or Manage choices at a category level. Non-essential cookies and tags do not load before you opt in where consent is required, and we honor Google Consent Mode v2 signals. We also recognize browser-based universal opt-out signals (e.g., Global Privacy Control) as a valid opt-out of targeted advertising and “sale”/“sharing” where applicable. For details on each cookie category, see the preferences panel in the banner.

6. How we share information

We do not sell your personal information for money. We disclose personal information only as follows:

• Service providers / processors that help us run the Service under contract (see Section 7).
• Advertising and analytics partners, where you have consented, for measurement and attribution (Section 7). Some of these disclosures may be considered “sharing” for targeted advertising or a “sale” under certain US state laws; you can opt out (Sections 5 and 10).
• Professional advisors (lawyers, accountants, auditors) under confidentiality.
• Legal / safety: to comply with law, legal process, or government requests; to enforce our Terms; or to protect the rights, property, or safety of Discoverably, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Service providers and partners (subprocessors)

We use reputable third parties to provide the Service. The current categories and providers include (subject to change; an up-to-date list is available on request at privacy@discoverably.com):

Providers are bound by contract to process personal information only on our instructions and to protect it appropriately.

8. International data transfers

We are based in the United States and our providers may process data in the US and other countries. Where we transfer personal information from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum / Swiss addendum, as applicable). You may request a copy of the relevant safeguards at privacy@discoverably.com.

9. Data retention

We retain personal information only for as long as necessary for the purposes described in this Policy, then delete or anonymize it. Indicative periods:

• Onboarding report data: retained to provide and improve the report and follow-up, then deleted/anonymized after 24 months of inactivity.
• Account and billing records: for the life of the account plus the period required by tax, accounting, and legal obligations (typically up to 7 years).
• Consent records: retained as long as needed to demonstrate compliance.
• Cookie/analytics identifiers: per the lifetimes shown in the cookie panel.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights: access, correction, deletion, portability, to opt out of targeted advertising, the “sale”/“sharing” of personal information, and certain profiling; to restrict or object to processing; and to withdraw consent. We do not discriminate against you for exercising these rights.

How to exercise: email privacy@discoverably.com or use the in-app account controls and the footer “Cookie settings” link. We will verify your request as required by law. You may use an authorized agent. If we deny a request, you may appeal by replying to our decision; if you remain unsatisfied, you may contact your state Attorney General.

EEA/UK/Switzerland: you also have the right to lodge a complaint with your local supervisory authority.

11. Maryland and other US state disclosures

Maryland (MODPA). If you are a Maryland resident, you have the rights listed in Section 10. Consistent with the Maryland Online Data Privacy Act, we practice data minimization (we limit collection to what is reasonably necessary for the purposes disclosed), we do not sell sensitive data, we do not process sensitive data without consent, and we honor universal opt-out mechanisms.

California (CCPA/CPRA). California residents have rights to know, delete, correct, and opt out of sale/sharing and certain targeted advertising, and to limit the use of sensitive personal information. We do not sell personal information for money; certain analytics/advertising cookie activity may constitute “sharing,” which you can opt out of via Section 5 / GPC.

Other states (e.g., Colorado, Connecticut, Virginia, and similar): residents have comparable rights, exercisable as described in Section 10.

Categories collected/disclosed in the last 12 months: identifiers (e.g., email, IP), commercial information (subscription/billing), internet activity (usage/analytics), and inferences, disclosed to the provider categories in Section 7 for the purposes in Section 4.

Processor role. When we process personal information contained in a customer’s account, configuration, or reports on the customer’s behalf, the customer is the controller/business and we act as the processor/service provider; such individuals should direct rights requests to the relevant customer, and we will assist as required by our customer agreement.

12. Security

We maintain administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, row-level security, secrets management, and least-privilege practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Children’s privacy

The Service is intended for businesses and is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact privacy@discoverably.com and we will delete it.

14. Third-party links and AI engines

The Site and Service reference third-party websites, search engines, and AI answer engines that we do not control. We are not responsible for their content or privacy practices.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where required, provide additional notice. Material changes affecting consent will be handled through the cookie banner’s revision mechanism.

16. Contact us

Questions or requests: privacy@discoverably.com or Discoverably LLC, 306 W Redwood St STE 201, Baltimore, Maryland 21201, USA. [If you offer services to the EEA/UK: name your Article 27 EU/UK representative here, or confirm none is required.]