Privacy Policy

Brytic (“Brytic”, “we”, “us”) helps marketing teams measure how AI engines mention their brand. Brytic is responsible for the personal information described here. This policy explains what we collect, why we collect it, and the choices you have. We aim for plain language; if anything is unclear, write to us at hello@brytic.com.

1. Information we collect

We collect only what we need to run the service.

• Account information. Your email address and name when you sign up. Authentication is handled through a trusted third-party identity provider.
• Brand information you provide. The company name, domain, aliases, description, competitors, and the prompts you choose to monitor.
• Scan results. The AI responses returned by ChatGPT, Gemini, Perplexity, Copilot, Grok, and similar engines for the prompts you track, together with the citations and metrics we derive from those responses.
• Site audit content. If you ask Brytic to audit a website you own, we crawl publicly available pages and store their rendered content and screenshots.
• Usage data. Basic technical information such as your IP address, browser, and timestamps of requests. We use this to diagnose problems and stop abuse.
• Optional integrations. If you connect Google Analytics 4, we store the OAuth refresh token needed to read the metrics you authorise. We do not have access to anything outside the property you connect.
• Cookie choices. When you make a choice in the cookie banner on brytic.com, including rejecting optional cookies, we keep a record of it: a random consent ID, your choice, the time, the site language, and a salted hash of your IP address that we use to stop abuse of the form.
• Marketing-site cookies. Google Analytics, Google Ads and Leadfeeder cookies on brytic.com. Depending on where you are, they load only if you allow them, or until you turn them off, as described in section 4.

2. How we use information

• To operate Brytic and run scans on the prompts you have set up.
• To authenticate you and keep your account secure.
• To send transactional email (sign-in links, invitations, billing receipts).
• To diagnose errors, improve performance, and prevent abuse.
• To measure how our marketing site is used, including whether a visit led to a sign-up or purchase, and for ads personalization on Google, such as showing Brytic ads to people who visited brytic.com and measuring those ads, with your consent where the law requires it. You can turn this off at any time.
• To document and administer your cookie choices.
• To comply with legal obligations.

We do not sell your personal information. We do not use it to train AI models. When advertising cookies are on, data about your visit to brytic.com is shared with Google for ads personalization, as described in section 4.

3. Service providers

We rely on a small number of trusted third-party service providers to operate Brytic. The categories of providers we use include:

• Authentication and identity management.
• Cloud hosting and content delivery.
• Database and storage infrastructure.
• Transactional email delivery.
• Large language model providers and search-data partners that power the scans we run on your behalf.
• Error monitoring and performance diagnostics.
• Web analytics and advertising (Google), and identifying the companies that visit brytic.com (Leadfeeder, by Dealfront), subject to your cookie choices.

Each provider processes personal information only on our instructions and only for the purposes described in this policy, with one exception: when analytics or advertising cookies are on, Google also uses the data it receives under its own terms and for its own purposes, as described on Google’s Business Data Responsibility site. We require our providers to apply security and confidentiality standards consistent with our own. We will provide a current list of named sub-processors on request for customers who need one for procurement or compliance purposes.

4. Cookies and similar technologies

We use a few cookies that the site needs to work. On our public marketing site, brytic.com, we also use analytics and advertising cookies from Google, and an analytics cookie from Leadfeeder. Whether we ask before using them depends on where you are, as described below. When they are on, data about your visit is shared with Google, which uses it for measurement and ads personalization as described on Google’s Business Data Responsibility site, and with Leadfeeder, as described below. The signed-in Brytic app sets none of the optional cookies, though it can report a sign-up or purchase to Google Analytics, as described below.

Strictly necessary

Cookieless analytics

On brytic.com we use PostHog and Cloudflare Web Analytics to understand aggregate traffic and referrals. They are configured to operate without cookies and without persistent cross-site identifiers, and they run for every visitor. They never run in the signed-in app.

Optional: analytics and advertising

If you visit from the European Economic Area, the United Kingdom, Gibraltar, the Channel Islands, the Isle of Man, Switzerland, Türkiye, Brazil, South Korea or Quebec, these cookies stay off until you allow them in the cookie banner. Everywhere else they are on by default, and you can turn either category off in Cookie settings. If your browser sends a Global Privacy Control signal, advertising starts off. We tell where you are from the country of your IP address each time you load a page; if it can’t be determined, we ask first.

These cookies are loaded through Google Tag Manager. Google may also set cookies on its own domains, such as google.com and doubleclick.net. If both categories are off, none of these tags load. If only one is on, only that category’s tags run.

Sign-ups and purchases

The signed-in app at app.brytic.com loads no Google tags. If analytics cookies are on for you on brytic.com, though, the app reads the Google Analytics ID they hold. When you create an account or buy a plan, our servers then tell Google Analytics, using that ID, so we can see which marketing led to it. We send how you signed up (email or Google) and, for a purchase, the plan, price, currency and Paddle transaction ID. We never send your name, email address or payment details. Without that cookie we send nothing.

Changing your choice

Use Cookie settings at the bottom of any page on brytic.com to turn either category on or off at any time. The page reloads so your new choice takes effect. When you turn a category off, we delete its cookies set on brytic.com, and Leadfeeder’s entries in your browser’s local storage. We cannot delete cookies Google sets on its own domains; you can clear those in your browser or manage ads personalization in Google’s My Ad Center.

We keep a record of each cookie choice for two years to document and administer consent choices.

5. Data retention

We keep your brand information and scan history for as long as your account is active. If you archive a brand it remains recoverable until you choose to permanently delete it. Permanent deletion removes the brand and every associated row — prompts, scan history, audits, screenshots — and is irreversible. If you delete your entire account, we remove your personal data within thirty days, except where law requires us to keep specific records longer. Records of cookie choices are deleted after two years.

6. Your rights

You can access, correct, export, or delete your information at any time from within the dashboard or by writing to hello@brytic.com. If you are in the EEA, the UK, or California, you have additional rights under GDPR / UK GDPR / the CCPA — we will honour requests of those rights at no charge.

You can withdraw consent to optional cookies, or turn them off where they are on by default, at any time using Cookie settings, as described in section 4. Doing so does not affect processing that happened before. You also have the right to complain to a data protection supervisory authority.

7. Security

Brytic uses TLS in transit, encryption at rest on our managed database, and short-lived authentication tokens. We restrict employee access to production data to the people who need it to operate the service. No service is perfectly secure; if we ever detect a breach that affects you, we will notify you without undue delay.

8. International data transfers

Brytic and several of our sub-processors are based in the United States. Your data may be processed in the US, the EU, or other regions where our providers operate. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms. When analytics or advertising cookies are on, Google may process data about your visit in the United States and other countries where it operates.

9. Children’s Data

Brytic is built for businesses and is not directed at children under sixteen. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take prompt steps to delete it.

10. Changes to this policy

If we make material changes we will notify you by email or via an in-app banner before they take effect. The “last updated” date at the top of this page always reflects the current version.

11. Contact

Questions, requests, or concerns: hello@brytic.com.