Privacy policy

This policy explains how Visibli Ltd (“Visibli”, “we”, “us”) handles personal data when you use visibli.co.uk, our website audit and AI visibility tools, and our automation services.

Who we are

Visibli Ltd is the data controller for the personal data described here. We are a company registered in England & Wales (company no. 17521385) with our registered office at 66 Paul Street, London, EC2A 4NA. You can contact us about privacy at info@visibli.co.uk.

What we collect

• Account details: your email address and sign-in information when you create an account.
• Websites you audit: the URLs you submit, the publicly available content we fetch from those pages, and the audit results, scores and suggested improvements we generate.
• AI visibility settings: the prompts, competitors and business details you set up for AI visibility checks, and the results of those checks.
• Enquiries: what you send us when you email us or book a call, including your name, business details and anything you choose to share.
• Technical data: basic server logs such as IP address, browser type and request times, kept for security and troubleshooting. Authentication diagnostics use a protected account identifier in place of your email address and are kept for up to 30 days, with daily deletion of older records. We do not include passwords or email-link tokens in these diagnostics.

We don’t sell personal data and we don’t use advertising trackers.

How we use it and our lawful basis

• To provide the service you sign up for: running audits, saving your history and showing reports (performance of a contract).
• To keep the service secure and working: preventing abuse, fixing problems and improving the product (our legitimate interests).
• To reply to enquiries and deliver services you ask us for (legitimate interests, or steps before entering a contract).
• To meet legal obligations such as keeping tax and accounting records.

Who we share it with

We use trusted service providers that process data on our behalf, under contracts that require them to protect it:

• Supabase: authentication and database hosting.
• Vercel: website and application hosting.
• Anthropic, OpenAI and Google: AI models that analyse website content and run AI visibility checks. We send them website content and the prompts needed for each check, not your account details.
• Stripe: payment processing, if you buy a paid plan.

Some of these providers are based in, or process data in, the United States. Where personal data leaves the UK, we rely on UK adequacy regulations or safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

If you choose to share a report using a share link, anyone with that link can view the report until you revoke it.

Cookies

We only use cookies that are strictly necessary to keep you signed in and keep the service secure. We don’t use advertising or analytics cookies, so we don’t ask for cookie consent.

How long we keep it

• Account data and audit history: while your account is open, and deleted within 90 days of you closing it.
• Audits run without an account: up to 12 months.
• Enquiries: up to 2 years after our last contact, unless you become a customer.
• Billing records: 6 years, as required by UK tax law.

Your rights

Under UK data protection law you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email info@visibli.co.ukand we’ll respond within one month.

If you’re unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If we make significant changes, we’ll update the date above and tell account holders by email.