Legal

Privacy policy

Draft. To be reviewed by a lawyer before launch.

Last updated: 28 September 2026

This policy explains what AI Knows Us (Clyra Labs) stores about you, why, and how to remove it. Clyra Labs is a company in India.

It does not claim that we comply with any particular privacy law. Which data protection laws bind us, and on what basis, has not yet been settled with a lawyer, and we have not been assessed or certified by anyone. Rather than name a statute we have not been measured against, this page does two things it can stand behind: it describes accurately what we hold and where it goes, and it gives you rights we honour on request whether or not a law currently compels us to.

If you only run the free scan

A scan needs no account and we do not ask for your email to show you the result. What we keep is the website address you typed, the business name and category we read off your own public pages, and the answers the AI apps gave. No email address and no IP address is stored with a scan. The questions we ask the AI apps never name you.

Scans are kept so that a repeat request for the same website can reuse a recent result instead of paying to ask the same questions twice. If you would rather your scan were deleted, write to us and we will delete it.

If you ask to be told when paid plans open

We store your email address, which page you asked from, and the date. That is all. We use it for one thing: to tell you when there is something to tell you.

We have sent nobody anything yet. AI Knows Us has no mailbox configured, so no email of any kind leaves this product today. When that changes, every message will say who it is from and how to stop getting them, and a request to stop will be honoured.

What we store if you have an account

  • Account: your name, email, password hash, plan and credits.
  • Business profile: your website, fact sheet, competitors, cities, languages and buyer questions.
  • Uploaded documents: brochures, decks and other files you upload, and the text taken from them.
  • Check results: the AI answers we collect, the sources cited, and our scores.
  • Drafts and publishing: pages, outreach drafts, and your blog connection settings, including any auth header you enter.
  • Mailbox settings, if you connect one: the server, the username and the password, encrypted. We hold credentials to a mailbox you own, and we would rather say that plainly than bury it.
  • Chat messages: what you and the GEO copilot say to each other.
  • Technical data: basic logs such as IP address and request times, used for security and rate limits.
  • Billing records: none. We take no payment, so there is no payment history, no invoice and no card detail anywhere in this product.

People who never signed up with us

If you use the outreach and review features, AI Knows Us holds names and email addresses of people who are not our customers: editors and writers at websites we pitch on your behalf, and your own customers you ask for a review. We are telling you because it is the part of this product that touches other people's data, and because it is yours to use responsibly. Every message carries a way to opt out, an opt out is recorded and suppresses future messages, and outreach is sent from your own mailbox rather than ours.

Whether we are a controller or a processor for that data has not been settled, and we do not offer a data processing agreement yet. If you need one before you can use those features, ask.

Why we use it

To run the service you asked for, keep it secure, and answer support requests. We do not sell your data and we do not use it to advertise to you.

Who else processes it

Every outside company that receives anything is named, one by one, with what we send it, on who else handles your data. In short: the AI apps we ask your buyers' questions to, the model that reads your pages and writes drafts, a licensed provider for Google AI Overviews, and a fetcher for public web pages. The payment and email providers listed there are not switched on and have received nothing.

Answers to identical tracking questions may be pooled across customers. Only the AI app's answer is shared in the pool. Your business, fact sheet and scores are not.

Those companies are in several countries. We have not established which countries, or on what transfer terms, because that is written in each company's own agreement and nobody here has read them yet. Naming a country we have not checked would be worse than admitting this.

Cookies and what your browser keeps

  • One cookie, sl_session, and only after you sign in. It holds a session token, nothing else, and your browser will not let a script read it. Signing out deletes it.
  • One browser storage entry, ta-theme, remembering whether you chose the light or dark theme. It never leaves your browser.
  • No analytics, no advertising and no third-party tracker. There is no tracking script on any page of this site.

Your rights

You can ask to see, correct or delete your personal data, ask for a copy of it, withdraw consent, object to what we are doing with it, and complain to us about any of it. Ask at the address below and we will do it. These are offered as our practice, not as a summary of your rights under a particular law, because which law applies is one of the open questions above.

Deleting your data

With an account you can delete your data from settings in the app, including the whole account. Without one, write to us and say which website you scanned or which email you gave us. Deletion removes the data from our live systems. Backups are cleared on their normal cycle.

How long we keep things

We have not set retention periods yet, and this page will not invent them. In practice nothing is deleted automatically today: what you or we delete is gone, and the rest stays until you ask. Deciding how long each kind of record should live is on the list for the same legal review as the rest of this page.

Who to write to

hello@aiknowsus.com, for any privacy request or complaint. It reaches a person.

No data protection officer or privacy contact has been appointed by name, and no postal address is published. If you need the registered address for a formal notice, ask at that address and we will send it to you.

See also our terms, who else handles your data and how we measure.