Privacy policy

Who we are

AGI Search Labs ("we", "us") is operated by Grecu Digital, registered at Timisoara 57, Bucharest, Romania, company number 50724719. We are the controller of the personal information described in this policy. You can reach us about privacy at [email protected].

What we collect

Information you give us

• Contact and audit requests: your name, work email, company website, company size, optional average deal size, the reason you're contacting us, and anything you type in the message field.
• Emails and calls: what you send us, and notes from calls or meetings you book with us.
• Client engagements: the business contact details and account access you share so we can do the work.

Information collected automatically

• Campaign attribution: when you arrive from an ad or a tagged link, we store the UTM parameters and Google Ads click ID (gclid) from the URL with your form submission. This tells us which campaigns bring in requests.
• Instant AI check: when you use the free checker, we receive the domain you enter. Our server fetches that site's public robots.txt, llms.txt, sitemap and homepage. Standard server logs (IP address, time, domain checked) are kept by our hosting provider for security and abuse prevention.
• Browser storage: we store your light/dark theme choice in your browser's local storage. It never leaves your device.
• Analytics: we measure how the site is used with Cloudflare Web Analytics, Netlify Analytics and Google Analytics. This covers pages viewed, referring sites, device and browser type, and approximate location. Where the law requires it, Google Analytics runs only after you consent to analytics cookies. We use this data only in aggregate, to improve the site and our marketing.

How we use it and our legal basis

• To answer your request and deliver the free audit: to take steps at your request before a contract, and our legitimate interest in responding to business inquiries.
• To deliver paid services: performance of our contract with your company.
• To measure and improve our marketing: our legitimate interest in understanding which campaigns work, or your consent where the law requires it.
• To keep the site secure and prevent abuse: our legitimate interest.
• To meet legal obligations: for example tax and accounting records.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We don't use remarketing or advertising audience lists. We send you follow-up emails about your request. You can ask us to stop at any time.

Who we share it with

We only share personal information with service providers who process it for us under contract:

• Netlify, Inc.: website hosting, form handling and email notifications of form submissions, spam filtering, and the instant-check function.
• Google LLC: Google Workspace (email and documents) and Google Analytics (website analytics).
• Stripe, Inc.: invoicing and payment processing for clients.

We may also disclose information if the law requires it, or as part of a merger or acquisition, subject to this policy.

International transfers

We are based in the European Union (Romania). Some of our providers, including Google, Stripe and our hosting provider, may process data in the United States and other countries. When personal data from the EEA, UK or Switzerland is transferred, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, where the provider participates.

How long we keep it

We keep inquiry and audit-request data for up to 24 months after our last contact, unless you become a client. Client records are kept for the life of the engagement plus the period required for tax and legal purposes. Hosting logs are kept according to Netlify's retention settings.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct their information, and the right not to be discriminated against for exercising these rights. EEA and UK residents can also complain to their local data protection authority.

To make a request, email [email protected]. We'll verify the request and respond within the time the law requires (usually 30 or 45 days).

Security

We use reputable providers, encrypted connections (HTTPS) and access controls. We limit access to the people who need it. No method of transmission or storage is completely secure.

Children

Our services are for businesses. We don't knowingly collect information from anyone under 16.

Changes

If we change this policy, we'll update the date at the top of this page. If the changes are significant, we'll tell clients directly.