This policy explains what personal data Variask collects when you visit our website, use our free tools or use the Variask service, why we collect it, and the choices you have. We collect only what we need to run the service, and we never sell personal data.
1. Who we are
Variask ("Variask", "we", "us") provides software that shows how AI assistants talk about brands. For the account data of our customers and the visitors to our website, we are the controller. For data our customers send us through the Visitors pixel or the crawler snippet on their own websites, we act as a processor on their behalf.
For any privacy question, write to hello@variask.com.
2. What we collect
Account data. Your name, email address, a hashed password, your team members and their roles, and settings you choose.
Workspace data. The brands, domains, competitors, prompts, facts, content drafts and agent chats you add, and the results we produce for them, such as AI answers, scores, sources and audits.
Billing data. Your plan, billing country and payment status. Card details are handled by our payment processor and never reach our servers.
Connected apps. When you connect Google Analytics, Search Console, Slack or a publishing platform, we store the access tokens needed for that connection and the reports we pull, such as AI referral visits and search queries. You can disconnect at any time.
Free tools and contact forms. The website or domain you check, and, when you send a contact or sales request, your name, email, company and message.
Technical data. Basic logs such as IP address, browser type and the pages requested, kept for security, abuse prevention and troubleshooting.
3. The Visitors pixel and crawler snippet
Customers can add a small Variask snippet to their own websites. It is built to count visits, not to follow people.
- It sets no cookies and does not build profiles of visitors or follow them across websites.
- It records the page path (without query strings), the website name that referred the visit, and the time. Visits from bots are ignored.
- IP addresses are turned into a one way hash that changes every day, used only to stop floods of fake visits. We do not store the raw IP address.
- It only counts visits loaded from the customer's own verified domain.
- The crawler snippet records only the name of each AI crawler and the page it requested. It does not record anything about human visitors.
Customers who use the snippet are responsible for telling their own visitors about it in their privacy notice.
4. How we use data
- To provide the service: run prompts, produce reports, send alerts and power the agent.
- To keep accounts secure, prevent abuse and fix problems.
- To send service emails, such as email verification, alerts, digests and billing notices. You can turn off alerts and digests in settings.
- To reply to sales and support requests.
- To understand how the product is used, in aggregate, so we can improve it.
- To meet legal, tax and accounting duties.
5. AI processing
To measure visibility, we send the prompts you track to AI models and search services and read their answers. When you use the agent or the content studio, the text you write and the relevant parts of your workspace are sent to AI models to produce a reply.
We do not use your workspace data to train our own models, and we use providers whose terms do not allow them to train on data sent through their business services. Please do not put sensitive personal data into prompts, facts or drafts.
6. Legal basis
Where laws like the GDPR apply, we process account and workspace data to perform our contract with you, technical and usage data under our legitimate interest in running a secure and useful service, billing data to meet legal duties, and marketing emails only with your consent.
8. International transfers
Our providers may process data in countries other than yours, including the United States and India. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
9. How long we keep data
We keep account and workspace data for as long as your account is active. After you close your account, we delete or anonymise it within 90 days, except where we must keep records longer for legal, tax or security reasons. Contact and sales requests are kept for up to two years. Hashed pixel data is kept while the brand stays in your account.
10. Security
All connections are encrypted with TLS, passwords are hashed, access tokens for connected apps are kept server side and never shown in the browser, and access to production systems is limited to people who need it. No system is perfectly secure, so if you find a weakness, please tell us at hello@variask.com.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. Residents of California also have the right to know what we collect and not to be discriminated against for using their rights. We do not sell or share personal data for cross context advertising.
To use any of these rights, write to hello@variask.com. We reply within 30 days. You may also complain to your local data protection authority.
13. Children
Variask is a business service and is not meant for anyone under 16. We do not knowingly collect data from children.
14. Changes to this policy
We may update this policy as the service grows. We will change the date above, and for important changes we will email account owners before they take effect. See also our terms of service.