See your AI visibility score — free in 2 minutes

Privacy Policy | Sanbi.ai — How We Handle Your Data

Last Updated: 06/15/2026

1. Introduction

Sanbi.ai, LLC (“Sanbi,” “we,” “our,” or “us”) provides an AI-visibility analytics platform and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit sanbi.ai, use our applications, run audits, connect integrations, or engage our services. By using the Service, you agree to this Policy. This Policy does not cover third-party websites, platforms, or AI models we do not control.

2. Information We Collect

We aim to collect only what is needed to operate the Service.

  • Account Data: Your email address (and name, if provided) for account creation, login, and delivery of reports. We operate password-less login and do not collect or store passwords.
  • Business Data: Domain names, brand names, competitor names, prompts, and related inputs you submit for auditing and tracking.
  • Payment Data: Payments are processed by our payment processor (currently Stripe). We receive limited billing information (e.g., plan, status, last four digits); we do not store full payment card numbers.
  • Form Submissions: Information you submit through contact, audit, or application forms (e.g., name, company, email, website, message), processed via our form provider.
  • Connected Account Data: If you connect integrations such as Google Search Console, we access the data you authorize (e.g., clicks, impressions, queries) solely to provide analytics features you request.
  • Usage & Device Data: IP address, browser type, device information, pages viewed, and interactions with the Service, collected via cookies and similar technologies.

3. How We Use Your Information

  • Provide the Service: Authenticate you, run audits, query third-party AI models with synthetic prompts based on your submitted domains/brands, generate reports, and deliver results.
  • Billing: Process subscriptions, trials, and invoices.
  • Communications: Send audit results, service and security notices, and — where permitted — product updates and marketing (you may opt out of marketing at any time via the unsubscribe link or by emailing us).
  • Improve & Secure: Monitor performance, debug, prevent fraud and abuse, and develop features, including through aggregated or de-identified analytics.
  • Legal: Comply with law and enforce our Terms of Service.

4. Analytics, Advertising & Cookies

  • Analytics: We use Google Analytics 4 to understand site usage.
  • Advertising & Conversion Tracking: We use Google Ads conversion tracking. Where you submit your email in connection with a conversion (e.g., a free audit), we may share it with Google in hashed form for enhanced conversion measurement, per Google’s policies.
  • Cookies: We use cookies and similar technologies for authentication, preferences, analytics, and measurement. You can control cookies through your browser settings; disabling them may affect functionality. We do not currently respond to “Do Not Track” signals.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising except as described in Section 4. We share information only with:

  1. Service Providers: Vendors that host, process, or support the Service (e.g., cloud hosting, database/authentication, email delivery, form processing, payment processing, scheduling), bound to use data only to provide services to us.
  2. AI Model Providers: Your submitted domain/brand terms are included in synthetic queries sent to third-party AI models (e.g., OpenAI, Google, Perplexity, Anthropic) as a necessary part of auditing. We do not send your account email to AI models for auditing purposes.
  3. Advertising/Analytics Partners: As described in Section 4 (e.g., hashed email to Google for conversion measurement).
  4. Legal & Safety: Where required by law, legal process, or to protect rights, safety, or the integrity of the Service.
  5. Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. Google User Data (Limited Use)

Where the Service accesses data from Google APIs (e.g., Google Search Console), our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve user-facing features you request, do not sell it, do not use it for advertising, and do not allow humans to read it except with your consent, for security, to comply with law, or as part of aggregated/de-identified internal operations. You may revoke access at any time via your Google account permissions.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Audit and tracking history is retained according to your plan’s stated retention period, after which it may be deleted or de-identified. You may request deletion of your account data as described in Section 9.

8. Data Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit. Because we operate password-less login, the security of your account also depends on the security of your email account — we strongly recommend enabling two-factor authentication with your email provider. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, restrict or object to certain processing, and withdraw consent.

  • United States: Residents of certain states (including Texas under the Texas Data Privacy and Security Act, and California under the CCPA/CPRA) may have rights to know, access, correct, delete, and opt out of sale/sharing of personal information. We do not sell personal information. We will not discriminate against you for exercising your rights.
  • EEA/UK: Where GDPR/UK GDPR applies, our legal bases are contract performance, legitimate interests, consent, and legal obligation; you also have the right to lodge a complaint with your supervisory authority.

To exercise any right, email akshat@sanbi.ai. We may need to verify your identity (typically via the email associated with your account) and will respond within the time required by applicable law.

10. International Transfers

We are based in the United States and process data in the U.S. and in the countries where our service providers operate. Where required, we rely on appropriate safeguards for international transfers.

11. Children’s Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date reflects the latest revision, and material changes will be communicated by reasonable means (e.g., email or in-Service notice). Continued use after changes take effect constitutes acceptance.

13. Contact Us

If you have questions or requests regarding this Policy:

  • Email: akshat@sanbi.ai
  • Company: Sanbi.ai, LLC
  • Location: Dallas, Texas, USA