Privacy Policy

Overview

Flynk AI LTD (“we”, “us”, “our”) operates Seen42 (the “Service”). Seen42 reads your website and checks how AI assistants such as ChatGPT, Perplexity, Gemini, Claude and Google AI Overviews answer the questions your buyers ask: which brands they name and which sources they cite. It helps you write answer pages from your company’s facts. On paid plans, you can host those pages with us, copy them, or send them to your own website system, and Seen42 re-checks the same questions every week. This Privacy Policy explains how we collect, use, and share information when you visit our website, create an account, subscribe, use the app, or publish pages through Seen42. In essence, we collect the minimum personal and usage data we need to run the Service, process it lawfully under UK and EU data protection rules, and never sell it to anyone.

Information We Collect

We collect the following categories of information:

• Account information: Your name, email address, website address and authentication identifiers. Sign-in is handled by our processor Clerk, which verifies your email address with a one-time code. If you sign in with Google, Clerk receives the identifiers Google permits it to share. A website address is required to use Seen42.
• Billing information: When you subscribe to a paid plan we receive your billing email, a Stripe customer ID, your plan, and the status and dates of your subscription and payments. Card details are entered into and held by Stripe, our payment processor; we never receive or store full card numbers.
• Workspace content: What you add to Seen42: your website address, company facts, competitor names, buyer questions (“prompts”), messages you exchange with the Seen42 agent, page drafts and published pages, documents you upload, and images or files you upload for your pages. Your conversations with the agent are stored in our database so that it can keep context between sessions; they are deleted with your account.
• Your website: After you sign up, we automatically fetch your website. This covers the homepage, a few key pages (such as pricing, features and about), its robots.txt and sitemap, and up to a set number of its pages that depends on your plan (Free 25, Starter 100, Growth 250, Pro 500). Pages are read through Firecrawl (see below); our own direct requests identify themselves with the user agent “Seen42/1.0”. We only read pages that are publicly accessible. From these pages we take the site name, a description, candidate company facts, your logo, site icon and brand colours. We store copies of the logo and site icon. We also run rule-based checks of each page’s HTML, for example its title, description, headings, word count, structured data, noindex settings and robots rules for AI crawlers. We re-check your pages about once a week.
• Company facts: Facts we find on your website or in documents you upload are used in your pages as found. You can edit or remove any of them.
• Uploaded documents: You can upload up to 20 documents about your company: text-based PDF (not scanned images), Word .docx, plain text or Markdown, up to 10 MB each. We read each file once and do not keep the file itself. We store its file name, type and size and its extracted text (up to about 200,000 characters) in our database, and send that text to our AI model providers to suggest candidate facts. You can delete a document at any time. This deletes its stored text and any facts suggested from it that you have not confirmed.
• Visibility results: What our measurement provider Cite42 returns for your prompts: which brands the AI assistants named, in what position, and which sources they cited. We store these results so you can see how they change over time.
• Website-system connections: If you connect your own website system (WordPress, Webflow, Shopify, Ghost or a webhook URL), we store the connection settings and the credentials you give us, such as a WordPress application password or an API token. We store credentials encrypted, use them only to create or update the posts you send, and never show them again. We delete them when you disconnect or close your account.
• Free check: On the Free plan, one check runs automatically after you sign up. Each website can have the free check only once, across all accounts. To enforce this, we keep a record of the website domain only, not of who used it.
• Visitors to published pages: Pages published through Seen42 count visits without cookies. For each counted visit we store the page, the origin of the referring website and a traffic category (for example “AI assistant”, “search” or a named crawler). The visitor’s IP address is used only briefly in memory to avoid counting repeat visits and is not stored with the visit.
• Usage and technical data: Like most online services, our servers record technical data such as IP address, browser user agent, requested path, status codes and errors. We use it to run the Service securely, enforce plan limits, troubleshoot and detect abuse.
• Cookies and similar technologies: We use strictly necessary cookies for sign-in and payment, and a cookie that records your cookie choices. Google Analytics may receive limited cookieless measurements while analytics storage is denied; analytics cookies are set only after you accept them. See our Cookie Policy for the full list and controls.

Seen42 is designed to work with information about companies, products and public topics. Please do not enter special-category data (such as health, political opinions or biometrics) or personal data about private individuals in prompts, company facts, uploaded documents or pages. See our Terms of Service for the corresponding rules.

Our Role: Controller and Processor

For your account, billing, usage and website-analytics data, Flynk AI LTD is the controller. For personal data contained in the content you add to Seen42 or in the pages you publish (for example a named contact on your website or in a document you upload), you are the controller and we are your processor: we process it only to provide the Service and on the data processing terms in section 9 of our Terms of Service, which also cover our subprocessors (the providers listed under Sharing of Information) and your right to object to new ones.

How We Use Information

We use the information we collect to:

• Provide the Service: sign you in, read and check your website, suggest company facts, prompts and competitors, run visibility checks, show your results, draft your pages, host them or send them where you ask, and keep your history so you can compare weeks.
• Bill you: process subscriptions through Stripe, apply your plan limits and keep the billing records the law requires.
• Keep the Service secure: enforce limits, prevent fraud and abuse, and investigate security incidents.
• Improve the Service: analyse aggregated and de-identified usage to fix errors and improve reliability. We do not use your workspace content to train AI models (see below).
• Communicate with you: send account and security emails, notices about material changes, and a weekly digest of your visibility results that you can switch off in Settings. We do not send marketing emails without your opt-in.
• Meet legal obligations: keep tax and accounting records, respond to lawful requests, and enforce our agreements.

We do not sell personal data, and we do not run advertising tags on our website.

AI Processing

Drafting and suggestions. We use large language models from Google (Gemini, our primary provider) and OpenAI (the fallback when Gemini is unavailable). They draft your prompts, competitor lists, answer pages, outreach drafts and chat replies, and pick out company facts from your website and documents. To do this, we send them the relevant part of your workspace: text from your website, your company facts, text extracted from documents you upload, your messages to the agent including any images or files you attach, competitor names, prompts, visibility results and the draft being edited. We use these providers’ paid commercial APIs, not consumer chat products. Under their API terms, the content we send is not used to train their general models, and where a provider offers a setting that prevents API content from being used for training, we have enabled it. We do not opt you in to model training. Each provider operates under its own terms of service and privacy policy.

Visibility checks. Checks run through Cite42, our measurement provider. Cite42 is an AI search visibility service that is also operated by Flynk AI LTD. We send Cite42 your prompts, your brand name, your competitors’ names and your website domain, and for some research features the selected country. Cite42 asks your prompts on the AI assistants in your plan (ChatGPT, Perplexity, Gemini, Claude and Google AI Overviews, depending on your plan). It returns which brands were named, in what position, and which sources were cited. For research features such as question maps and content briefs, Cite42 may also query search, trend and community-discussion data sources about your topic. We do not send your account identity or billing details to AI assistants or data providers.

Reading your website. We read the public pages of your website through Firecrawl, a web-reading service that loads them as a browser would. We send it only addresses on your website; it returns the page content, which we use for your company facts, brand details and page checks.

Suggested prompts and competitors. We draft your first prompts and competitor list automatically with AI models. They are based on your website content and on AI answers fetched through Cite42. You can edit them.

Answers vary. AI assistants give different answers on different runs and over time. Seen42 records sampled answers. Results describe what was observed in those samples. They are observations, not guarantees, and not a permanent fact about your brand.

No training on your content. Flynk AI does not use your workspace content, your drafts or your results to train any AI model it owns or operates. Aggregated, de-identified statistics (for example, how many checks ran last month) may be used to improve reliability.

Information About Other Companies and People

Seen42 processes information about companies other than yours: competitors you name, brands and websites that AI assistants name or cite for your prompts, and the pages those assistants cite as sources. This information consists of brand names, domain names, public page addresses and titles, the position in which a brand was named and, where you enable it, an automated estimate of how answers describe a brand. It comes from public AI answers and public web pages, and we use it only to show you how AI assistants answer your prompts and to help you draft pages from sources you confirm.

Where a business is a sole trader or a brand is a person’s name, this can be personal data. Our legal basis is the legitimate interest that you and we have in measuring and describing public market information; we do not use it for any other purpose, do not combine it with other data about the person, and keep it only as part of your results. If you are such a person and want us to stop processing your name, or if an AI answer recorded in Seen42 is inaccurate about you, email support@seen42.com. We cannot change what a third-party AI assistant says, but we can remove or annotate the record in our Service and will tell you which provider produced the answer.

Legal Bases for Processing (UK/EEA)

If you are in the United Kingdom or the European Economic Area, our processing of your personal data is governed by the UK GDPR, the EU GDPR and the UK Data Protection Act 2018. We rely on the following bases:

• Contract: processing your account, website, workspace content, uploaded documents, checks, pages, website-system connections and payments is necessary to provide the Service you signed up for.
• Legitimate interests: operating, securing and improving the Service, preventing abuse (including keeping a record of which website domains have had the free check), and counting visits to published pages without cookies. These interests are not overridden by your rights given the limited data involved.
• Consent: analytics cookies and any marketing emails, which you can withdraw at any time.
• Legal obligation: keeping billing records for tax purposes and responding to competent authorities.

Sharing of Information

We share information with the service providers below, which process it on our behalf to run Seen42:

AI assistants checked for you

To measure visibility, Cite42 asks your prompts on the AI assistants in your plan: ChatGPT (OpenAI), Perplexity, Gemini and Google AI Overviews (Google), and Claude (Anthropic). These providers receive the prompt text and the minimum metadata needed for the request through Cite42. We do not control them; each operates under its own terms and privacy policy. The set of assistants may change as products are added, retired or become unavailable.

Pages you publish

You decide what your published pages say, and you are the controller of any personal data they contain. If you add analytics, tag-management, advertising, comment or cookie-consent tools to your pages through Seen42 integrations, those tools are configured by you and you are the controller of the data they collect. You are responsible for your own privacy and cookie notices for those pages. Seen42’s own cookieless visit count is described above.

If you copy a page or send it to your own website system, it is published on your website under your control, and your website’s own privacy and cookie notices apply. Pages sent to your website system arrive as drafts unless you choose to publish them straight away. Nothing is published automatically.

Other recipients

We may also disclose information:

• where required by law or in response to a lawful request from a competent authority, including for tax, accounting or law-enforcement purposes;
• where reasonably necessary to enforce our Terms of Service, to investigate suspected fraud, abuse or security incidents, or to protect the rights, property or safety of Flynk AI, our users or third parties;
• to professional advisers (such as lawyers, auditors and accountants) bound by confidentiality obligations;
• in connection with a merger, acquisition, financing or sale of substantially all assets, in which case we will notify affected users and ensure that any acquirer remains bound by commitments at least as protective as this policy.

Data Retention

We keep personal data only as long as needed for the purposes above:

• Account and workspace data: while your account is open. When you close your account we immediately end any subscription, take your published pages offline, stop scheduled checks, delete the credentials we store for your website system, and replace your name and email in our database. You can ask us to delete the remaining workspace data at any time by emailing support@seen42.com; we will do so unless the law requires us to keep it.
• Closed accounts: remaining workspace data (prompts, results, drafts, facts and agent conversations) is deleted within 30 days of a verified deletion request, and otherwise reviewed for deletion periodically. Billing records are kept as described below.
• Text from uploaded documents: we never keep the uploaded file. We keep its extracted text while your account is open, until you delete the document. Deleting a document deletes its stored text and every fact taken from it. Pages you already published keep their approved wording.
• Website-system credentials: until you disconnect your website system or close your account. We then delete them.
• Free-check record: we keep the website domain so that the free check cannot be repeated for the same website. This record does not say who used the check.
• Application logs: 30 days.
• Database backups: rolling, encrypted, kept for 7 days.
• Billing records: for the period required by UK tax law (currently six years from the end of the relevant financial year).

International Transfers

Flynk AI LTD is established in the United Kingdom, and our application and database run in London. Several of our service providers are established in the United States or process data globally. When we transfer personal data from the UK or EEA to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with technical safeguards such as encryption in transit and at rest. You can request details of the safeguards for a particular transfer by emailing support@seen42.com.

Your Rights

Under the UK GDPR, EU GDPR and equivalent laws (including U.S. state privacy laws where applicable), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the “right to be forgotten”), subject to legal retention obligations.
• Restrict processing while a dispute or correction is pending.
• Port data you have provided to us in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent, without affecting earlier processing.
• Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or another supervisory authority.

To exercise any of these rights, email support@seen42.com. We will respond within one month of a verified request, extendable by up to two further months for particularly complex requests.

Security

We protect your data with TLS 1.2 or higher in transit, AES-256 encryption at rest for our database and file storage, isolated production infrastructure, restricted access, and regular dependency updates. Credentials for your website system are also encrypted with AES-256-GCM before we store them, and we never show them again after you enter them. Drafts stay private to your account until you publish them.

No system is perfectly secure. If we become aware of a personal data breach affecting your data, we will notify you and the relevant supervisory authority as required by law.

Children’s Privacy

The Service is not directed to, and we do not knowingly collect data from, anyone under 16. If you believe a person under 16 has provided data to us, please contact support@seen42.com and we will delete it.

Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Seen42 measures AI answers about brands and drafts pages at your request and for your review. We use automated systems to enforce plan limits and detect abuse; if such a decision affects you, you can request human review at support@seen42.com.

Changes to This Policy

We may update this Privacy Policy. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated by email to the address on your account or by a prominent notice in the app at least 14 days before they take effect. If you do not agree, you may close your account.

Contact

For privacy questions, requests or complaints:

• Email: support@seen42.com
• Controller: Flynk AI LTD, registered in England and Wales (company number 17286617). Registered address: 66 Paul Street, London, EC2A 4NA, United Kingdom. Company details are also listed on the Legal Notice page.
• UK supervisory authority: Information Commissioner’s Office, ico.org.uk. We would appreciate the chance to resolve a concern before you contact the ICO, but you may contact it at any time.
• Data protection contact: We are not required to appoint a Data Protection Officer; privacy requests are handled by our management at the email above.