Privacy Policy

Effective: September 28, 2026 · Last updated: September 28, 2026

1. Who we are

VIR Insights LLC ("VIR Insights", "we", "us", "our") is a marketing analytics company based in Chicago, Illinois. This Privacy Policy explains what information we collect through our website (virinsights.com) and our Intelligence Suite (seo.virinsights.com), together the "Services", how we use it, and the choices you have.

2. Information we collect

Information you provide

• Inquiry forms: when you contact us or request a demo, we collect your name, email address, company, message, and any plan you express interest in.
• Account information: to use the Intelligence Suite you provide an email address, a name, and a password. Passwords are stored only as salted, one-way hashes (bcrypt); we never store your plain-text password. You may also provide team information such as teammate email addresses.

Google Search Console data you connect

With your explicit authorization, the Intelligence Suite accesses Google Search Console data for properties you choose, using read-only permissions (webmasters.readonly) granted through Google's OAuth consent flow. This data includes search queries, impressions, clicks, positions, and device and country breakdowns. We use it to ground recommendations, populate your Visibility Dashboard, and generate reports. Access tokens are stored encrypted. You may disconnect a property or revoke our access in your Google account at any time.

Usage data

We store the work you do in the Services: URLs and documents you analyze, findings and reports generated, sites you crawl and the pages crawled, keywords you scan, AI answer text retrieved during visibility scans, PDF exports, and activity logs. This data powers your history, trends, and reports.

Technical and analytics data

On virinsights.com, Google Tag Manager loads analytics tags including Google Analytics, which use cookies to measure visits, pages viewed, and traffic sources. On the Intelligence Suite, a session cookie keeps you signed in. See our Cookie Policy for details.

Payment data

Purchases are processed by Stripe. We receive subscription status and billing metadata but never receive or store your full card number.

3. How we use information

• Provide, operate, and improve the Services, including generating audits, crawls, visibility scores, and reports;
• Send transactional email, such as verification links, password resets, and account notices, through our email provider Resend;
• Respond to your inquiries and provide support;
• Protect the security and integrity of the Services, and prevent fraud and abuse, including rate limiting and, on signup forms, Cloudflare Turnstile when enabled;
• Understand aggregate usage of our website to improve content and offerings;
• Comply with legal obligations and enforce our Terms of Service.

4. AI model providers

When you run an analysis or a visibility scan, text from the pages involved and the AI answers we retrieve are sent to AI model providers to generate recommendations, narratives, and scores. Our current providers are:

• Anthropic (Claude), Privacy Policy
• OpenAI (ChatGPT), Privacy Policy
• Perplexity (Sonar), Privacy Policy

These providers process your inputs to provide the service under their own policies and may retain data according to those policies. Do not submit content to the Services that you are not permitted to share with these providers.

5. How we share information

We do not sell personal information, and we do not share it with advertisers. We share information only with service providers that help us operate the Services, under agreements that limit their use to providing those services:

• DigitalOcean: hosting (data stored on servers in the United States);
• Resend: transactional email delivery;
• Google: Search Console API (when you connect a property), PageSpeed Insights API (performance measurements of crawled pages), Google Fonts, and Google Tag Manager / Google Analytics (website analytics);
• Anthropic, OpenAI, Perplexity: AI model providers as described above;
• SerpAPI: Google search results and AI Overview data used for visibility tracking;
• Stripe: payment processing when you purchase a paid plan;
• Cloudflare: Turnstile abuse protection on signup forms, when enabled.

We may also disclose information where required by law or to protect the rights and safety of VIR Insights, our users, or the public.

6. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal information on the following bases: performance of a contract (providing the Services you request), your consent (for cookies where required and for marketing, if you opt in), and our legitimate interests (improving and securing the Services, responding to inquiries, and understanding aggregate usage), balanced against your rights.

7. Cookies

See our Cookie Policy for which cookies we use and how to manage them.

8. Retention

We keep inquiry data while it is relevant to the business relationship, and account and usage data while your account is active, so your history and reports remain available. Google Search Console data is kept until you disconnect the property. You may request deletion of your account and its data at any time, and we will delete it within 30 days except where we are required to keep it by law.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal information, and to withdraw consent where processing is based on consent. California residents have additional rights under the CCPA/CPRA, including the right to know what we collect, to request deletion, and to correct inaccurate information. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, email info@virinsights.com. We will verify your identity before acting and will not discriminate against you for exercising your rights.

10. Security

We use industry-standard safeguards, including TLS encryption in transit, hashed passwords, encrypted storage of Google access tokens, restricted access controls, and a principle of least privilege for our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. International transfers

We operate in the United States, and the Services store data on servers in the United States. If you use the Services from outside the United States, you consent to the transfer and processing of your information in the United States. Where required, we rely on appropriate safeguards for transfers from the EEA or the UK.

13. Third-party links

Our websites may link to third-party sites, including AI provider policies and social platforms. We are not responsible for the privacy practices of those sites.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted with a new effective date, and where required we will notify you by email or through the Services.

15. Contact

Questions about this Privacy Policy or about your data: info@virinsights.com.