Vantae Privacy Policy.

Vantae ("Vantae", "we", "us") provides software that measures how AI assistants describe, recommend, and link to your business. This page explains, in plain language, what data we collect, how we store it, what we do with it, and the rights you have over it.

This policy applies to vantae.ai, the Vantae web application, the AI discovery intelligence reports and dashboards we provide, and to data we collect on your behalf when you run scans against the websites and AI providers you've configured in the product.

Last updated: April 2026.

The Service stores the following categories of data:

• Account data. Your name, work email, the organization mode you selected, and the role granted to you in your organization.
• Access-request data. Information submitted through the access-request flow on /request-access (name, work email, company, role, qualifying questions) so we can review and respond.
• Organization & permissions data. Organization name, membership, role assignments (owner / admin / member / guest), and project-level access grants.
• Project configuration. The websites, brand names and aliases, competitors, tracked domains and queries, scan cadence, scoring weights, brand assets, and integration settings you configure inside the product.
• Scan results & analysis. Provider responses for your tracked queries, parsed brand mentions and citations, source URLs, the pages we crawled on your behalf, computed scores, and the recommendations and statuses your team has applied.
• Reports & share links. Generated scan reports and the tokenized public share links your team creates from them, along with non-content share-link metadata (view count, last-viewed time, and the originating IP address of each view) for security and audit purposes.
• Notification deliveries. Per-recipient delivery state for transactional emails we send on your behalf (sent, delivered, bounced, complained), so the product can surface delivery problems and avoid re-sending to known-bad addresses.
• Support communications. Messages, attachments, and ticket metadata you send to Vantae support so we can help you and improve the Service.
• Billing data. When billing is enabled, the order references, invoices, and payment metadata associated with your organization's subscription. Vantae does not store full payment-card numbers — those are handled by our payment processor.
• Technical & log data. IP address, device, browser, request and usage events, and security/audit logs generated by your use of the Service.

We do not collect end-user analytics on the websites you scan, and we do not associate scan data with the personal identities of your visitors.

Vantae is designed for B2B AI-discovery intelligence work on public-facing brand, website, and competitor data. The Service is not designed for, and you should not submit through it:

• sensitive personal data (race or ethnicity, religion, political views, sexual orientation, biometrics, precise geolocation);
• financial-account data (full payment-card numbers, bank-account credentials);
• health, medical, or insurance data;
• government-identifier data (Social Security numbers, passport numbers, driver's-license numbers);
• data of children under 16 (see the Children section); or
• any other regulated-category data subject to a specialized legal regime (HIPAA, PCI-DSS, FERPA, GLBA, etc.).

If your use case might require any of the above, contact us at support@vantae.ai before configuring it in the product so we can confirm whether the Service is an appropriate fit for your obligations.

Your data is used to operate the product you're paying for:

• To run the AI-provider queries and crawls you've scheduled.
• To compute scores, share-of-voice, and the prioritized fix list.
• To allow your teammates in the same organization to collaborate on the same projects, queries, recommendations, and reports.
• To send transactional emails (account, scan completion, alerts you've enabled, share-link notifications you've authorized).
• To respond to your support requests and access requests.
• To monitor the reliability, security, and integrity of the Service — including detecting abuse, prevented bypasses of rate limits or scan quotas, and unauthorized access.
• To meet our legal obligations and respond to lawful requests from authorities of competent jurisdiction.

We do not sell your data, and we do not share your scan results, brand list, or tracked queries with other Vantae customers.

To operate the Service, Vantae relies on a small set of third-party processors. The list below reflects the current production setup; we'll update this section if a processor is added or replaced.

AI providers. To produce the measurements that make the Service useful, Vantae sends the queries you configure and, when relevant, the public URL we're asking them about, to the third-party AI providers you've enabled — currently OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), and Perplexity, with additional providers possible as we add coverage. Each provider's own privacy policy and data-handling terms apply to data sent to them. Vantae does not pass user PII (your name, your visitors' identities) to these providers — only the configured prompts and, when relevant, the public URLs we're asking them about.

Operational processors.

• Supabase — managed Postgres database and authentication backend. Stores account, organization, project, scan, report, share-link, notification, and billing data described above.
• Resend (or a comparable transactional-email provider) — delivery of transactional emails such as account verification, scan completion, alerts you've enabled, and share-link notifications.
• Hosting / infrastructure. The Vantae web application is hosted on a managed cloud platform, which processes requests, serves the application, and provides supporting infrastructure such as logging and CDN edge caching.
• Payment processor. When billing is enabled, a regulated payment processor handles full payment-card collection, processing, and storage on our behalf. Vantae does not store full payment-card numbers.

Vantae does not sell your data. Vantae does not use Your Content to train third-party foundation models. AI providers may process the prompts and page content sent to them under their own terms.

The Vantae web app uses two categories of browser storage:

• Session. A first-party authentication cookie / token managed by our auth provider so you stay signed in between visits.
• Preferences. Local storage for non-sensitive UI preferences (e.g. theme, last-opened project). This data never leaves your browser.

We do not use third-party advertising cookies or cross-site trackers in the product.

Account and project configuration are retained for the lifetime of your subscription. Scan results are retained for the lifetime of the project so that trend lines and recommendation history remain meaningful scan-over-scan.

When an organization is closed, we delete account, project, and scan data within a reasonable window after the subscription ends. Backups are rotated on a fixed schedule and are purged within the same window.

Your order form may set stricter or specific retention timelines — including shorter retention windows, scoped data-deletion commitments, or export procedures — which override the defaults in this section for the data they cover.

You can, at any time:

• Request a copy of the personal data we hold about you.
• Export the data your organization has put into the Service in a machine-readable format.
• Request correction of inaccurate personal data.
• Request deletion of your account and personal data.
• Withdraw consent for any optional processing (for example, opting out of marketing emails — transactional emails required to operate your account are not opt-out).

Depending on where you live, you may have additional rights under regional data-protection law — for example, the EU/UK GDPR or the California Consumer Privacy Act. We honor those rights to the extent they apply to your relationship with Vantae.

To exercise any of these rights, email support@vantae.ai and we'll respond within a reasonable timeframe.

Vantae stores and processes data in the United States. If you use the Service from outside the United States, you understand that your data will be transferred to and processed in the United States, and you consent to that transfer.

Additional rights and protections may apply to you depending on your jurisdiction (see Your rights). Where Vantae is required to put in place data-transfer safeguards (such as Standard Contractual Clauses or a comparable mechanism), we will do so as part of the agreement covering your organization's use of the Service.

Vantae is a B2B product and is not directed to children. The Service is intended for use by adults working at a business. We do not knowingly collect personal data from children under 16.

If you believe a child under 16 has provided personal data through the Service, please contact us at support@vantae.ai and we will delete it.

Vantae uses commercially reasonable administrative, technical, and organizational safeguards to protect your data: encryption in transit (HTTPS), encryption at rest for our managed databases, role-based access inside the product, and audit logging for sensitive administrative actions.

You are responsible for managing your users, roles, credentials, and share links, and for promptly notifying us of suspected unauthorized access to your account or organization.

No system is perfectly secure. If we discover a security incident affecting your data, we will notify the affected organization as required by applicable law and any agreement in place with your organization, and provide the information reasonably available so you can meet your own notification obligations.

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top of the page and, for material changes, notify organization owners by email.

For privacy questions, data requests, to report a concern, account inquiries, or any other matter, email support@vantae.ai.

See also our terms of service.