The short version: buying a scan needs no account, no email and no password. We never publish or sell your report. We ask AI assistants about your business through their official interfaces - we never scrape a consumer app, and we never hand them anything about you that you did not type in.
Who is responsible for your data. The Katana Connection Pte Ltd, 68 Circular Road, #02-01, Singapore 049422, trading as AI Reputation App (“we”, “us”) is the data controller for the personal data described here. Contact us any time at [email protected].
1. What we collect
1.1 What you type in
To run a scan we ask for a Business Profile: business name, what you sell, where you operate, your website address, and optionally the competitors you already know about. This is business information, not personal information, unless you choose to enter personal details into those fields - please don't.
1.2 Your account
An account is created for you automatically the first time you use the service. It is an anonymous random identifier. It carries no name, no email address and no password. It exists so that a scan you paid for is still yours when you come back.
You may optionally add an email address after a purchase. Its only purpose is to send you the report and to let you get back into it from a different device. We do not require it and we do not use it to email you marketing unless you separately ask us to.
1.3 Payment
Payments are processed by Stripe. Card numbers are entered on Stripe's own systems and are never sent to, seen by, or stored by AI Reputation App. We receive a transaction reference, the amount, the currency, and whether it succeeded. Stripe processes your payment data as its own controller under Stripe's privacy policy.
1.4 Scan results
A scan produces answers from AI assistants, the citations those answers were grounded on, and the analysis we compute from them. That is your Report. It is stored against your account so you can open it again.
1.5 Technical data
Our hosting provider records standard server request data (IP address, timestamp, requested URL, user agent) for security and abuse prevention. We run no analytics or advertising trackers on this site.
2. What we do not do
- We do not sell your data, to anyone, for any purpose.
- We do not publish your report or use it as marketing. Every example on our website is a business we invented.
- We do not run advertising trackers or advertising cookies on this website.
- We do not send your business details to any AI assistant beyond the wording of the buyer questions themselves.
- We do not scrape consumer AI apps. All scanning is done through official, paid interfaces under their terms.
3. Why we are allowed to process it (legal bases)
| Data | Purpose | Legal basis (UK/EU GDPR) |
|---|---|---|
| Business Profile | To generate and run your Question Set | Performance of a contract |
| Account identifier | To keep your purchase and report yours | Performance of a contract |
| Payment reference | To take payment, refund it, and keep tax records | Contract; legal obligation |
| Email address (optional) | To deliver the report and let you recover it | Consent - you choose to add it |
| Server logs | Security, fraud and abuse prevention | Legitimate interests |
4. Who we share it with
Only the processors we need to run the service:
- Stripe - payment processing.
- AI providers - OpenAI, Google, Anthropic and Perplexity receive the text of the buyer questions we ask on your behalf. Where a question names your business, that name is in the question. We use their business/API interfaces. We use their paid business and API interfaces, under which the questions we send are not used to train their models.
- Hosting and email delivery - Render (application hosting, servers in Frankfurt, EU) and Resend (email delivery).
We do not share your report with anyone else. There is no data broker in this list and there never will be.
5. International transfers
Our providers operate in the European Union (Germany) and the United States. Where personal data leaves the UK or EEA it is transferred under the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement where UK data is involved.
6. How long we keep it
| Data | Retention |
|---|---|
| Your report and Business Profile | Up to 24 months, or until you delete it |
| Account identifier | Until you delete it |
| Payment and tax records | As required by law - typically 6–7 years |
| Server logs | 90 days |
You can delete everything at any time. See Delete my data.
7. Cookies
This website sets no cookies for advertising or analytics. The application stores a single identifier on your own device so that your account and your purchases survive a page reload. That is strictly necessary to deliver something you asked for and paid for, so it does not require consent - and clearing your browser storage removes it, which will also make an anonymous account unrecoverable unless you attached an email address to it.
8. Your rights
If you are in the UK or the EEA you have the right to access, correct, delete, restrict, object to, and port your personal data, and to withdraw consent where consent is the basis. If you are in California you have the rights to know, delete, correct and opt out of sale or sharing - and we do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any of these, use Delete my data or email [email protected]. We respond within 30 days.
If you think we have got this wrong you can complain to your data protection authority - in the UK, the Information Commissioner's Office.
9. Children
AI Reputation App is a tool for business owners. It is not directed at children and we do not knowingly collect data from anyone under 16.
10. Security
Reports are private business intelligence. Account identifiers are long random strings, not sequential numbers, so a report cannot be found by guessing. Access to a report requires the account credential that owns it. Provider API keys live on our server and are never shipped inside any client application.
11. Changes
If we change this policy we will update the date at the top. If the change is significant and we hold an email address for you, we will tell you.