Privacy Policy

LLM Metrix, Inc. ("we", "us", or "our") operates the LLM Metrix platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.

By using the Service, you consent to the data practices described in this policy.

2.1 Information You Provide

• Account data: email address and password when you register.
• Project data: brand names, domains, competitor names, and AI engines you configure.
• Billing data: when paid plans launch, payment information will be handled by a third-party payment processor; we will not store full card numbers.
• Communications: messages you send us via support channels.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, clicks, and session duration.
• Device data: IP address, browser type, operating system, and referring URLs.
• Cookies: session and preference cookies. See Section 7 for details.

We use the information we collect to:

• Provide, operate, and improve the Service.
• Authenticate users and maintain account security.
• Operate, maintain, and improve the Service.
• Send product updates, alerts, and weekly digests you opt in to.
• Respond to support requests and inquiries.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal data. We may share it with:

• Service providers: each acting on our behalf under a data processing agreement. Purposes and processing locations for every one of them are in our DPA.
  • Supabase — Database, authentication & file storage
  • Vercel — Hosting, CDN & AI Gateway (routes prompt text to model providers)
  • Stripe — Payment processing
  • Resend — Transactional & digest email delivery — receives recipient email addresses
  • Upstash (QStash) — Async job queue — carries scan and notification payloads
  • OpenAI, Anthropic, Google, xAI, Meta, Perplexity — AI engines queried via the Vercel AI Gateway; receive your brand name, domain and prompt text
  • Anthropic (direct) — Web-search-grounded Claude queries, which the AI Gateway cannot proxy; receives prompt text (only when you enable the related feature)
  • SerpAPI / DataForSEO — Google AI Overviews and SERP results; receives the search query derived from your brand and prompts (only when you enable the related feature)
  • DataForSEO (authority & keyword data) — Citation-source authority and keyword volume; receives the domains you track (only when you enable the related feature)
  • Google (Analytics 4 & Search Console) — Traffic and search-performance connectors; we hold an OAuth token for a property you verified and read its metrics (only when you enable the related feature)
  • Cloudflare — Traffic connector; we hold an API token for your zone and read its request analytics (only when you enable the related feature)
  • Google Knowledge Graph, Wikidata & Wikipedia — Entity presence checks; receive your brand name (only when you enable the related feature)
  • IPQualityScore — Domain safety screening — the Malicious URL Scanner check that runs before a new domain is accepted for tracking; receives the domain only, never scan contents (only when you enable the related feature)
  • Better Stack — Status page and uptime monitoring. Our public status page is hosted by them, so following a link to it sends your IP address and browser details to their servers — browsing our own pages does not (only when you enable the related feature)
• AI engines: the prompts we run on your behalf — which contain your brand name, competitor names and any prompt text you configure — are sent to the AI providers you enable, through the Vercel AI Gateway (and, for web-search-grounded Claude, directly to Anthropic). They are named in the list above. We do not send them your account details or any end-visitor data.
• Legal authorities: when required by law, court order, or governmental authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at privacy@llmmetrix.com. We will fulfill deletion requests within 30 days, subject to legal retention requirements.

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, and role-based access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We use the following types of cookies:

• Strictly necessary: session tokens required for authentication and security (cannot be disabled).
• Preference: store UI settings like sidebar state and date-range filters.
• Analytics: aggregate, anonymized usage metrics to improve the Service.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from using the Service.

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict its processing. To exercise these rights, contact privacy@llmmetrix.com. We will respond within 30 days.

If you are in the European Economic Area or the United Kingdom, you have rights under GDPR / UK GDPR including the right to lodge a complaint with your supervisory authority.

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for cross-border transfers in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

For privacy-related questions or requests, contact our privacy team at privacy@llmmetrix.com. If you require our registered mailing address for a formal data request, we will provide it on request.