Privacy Policy

1. Who we are

This service is operated by the owner of AuthorityOS (contact: the email address you can reach us at is shown on our homepage/support channel). If you have questions about this policy or your data, contact us there.

2. What data we collect

• Account data: email address, business name, and a securely hashed password (we never store your password in plain text).
• Business profile data: the answers you give us during onboarding — niche, offer, pricing, target audience, country, business stage, revenue goals, challenges, and what you've already tried.
• Website/social content you point us to: if you give us your website or social profile URL, we fetch the public text of that page to understand your tone and offer.
• Competitor names you provide: used to look up public reviews about those businesses (see below).
• Subscription/billing status: we know your plan and whether your subscription is active. Payments themselves are handled entirely by PayPal — we never see or store your card or bank details.
• Generated content: the strategies, content packs and analyses our AI generates for you, so you can revisit them later.

3. Third-party data about competitor reviews

When you give us competitor names, we retrieve public customer review text about those businesses via a third-party data provider (Outscraper). We deliberately do not collect or store the names of the people who wrote those reviews — only the review text and rating, used in aggregate to identify common themes. We do not publish or share individual review content outside your own account.

4. Why we process your data

We process your data to provide the service you signed up for (a contract basis): generating your Growth Blueprint, Content Engine output, and Customer & Market Avatar analysis, and to manage your account and subscription.

5. Who we share data with

We use the following processors to run the service. Each only receives what's needed to perform its function:

• OpenAI — processes your business profile and site content to generate strategy and content text.
• Outscraper — looks up public review data for the competitors you specify.
• PayPal — processes your subscription payment. We never handle your payment details directly.
• Hostinger — hosts our servers and database.

Some of these providers may process data outside the EU/EEA, under their own standard contractual safeguards. We do not sell your data to anyone, ever.

6. How long we keep your data

We keep your account and generated content for as long as your account is active. If you want your account and all associated data deleted, contact us and we'll remove it, typically within 30 days.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, contact us using the details above.

7a. California residents

If you're a California resident, you have the right to know what personal information we collect, request deletion of it, and opt out of its "sale" or "sharing." We do not sell or share your personal information with third parties for their own marketing purposes. To exercise these rights, contact us using the details above — we won't discriminate against you for doing so.

8. Cookies

We use one strictly necessary session cookie to keep you logged in — this doesn't require consent under applicable law. When you first visit, we also ask whether you'd like to allow analytics cookies. If you accept, we use that permission to enable usage analytics; if you choose "necessary only," no analytics cookies are set. You can change your choice anytime by clearing your cookies and revisiting the site.

9. Changes to this policy

We may update this policy as the service evolves. We'll update the date at the top when we do.