Privacy Policy

Last updated: October 2, 2026

We collect information you provide directly, such as when you fill out our contact form, request access to our AI Cookbook, or communicate with us via email.

Contact and request forms. When you use our contact form or our AI Rankings correction and removal form, we receive what you enter: typically your name, email address and message, plus, for a removal request, the company and ranking page it concerns. These forms are delivered to us through our form and email delivery providers.

AI Rankings report subscriptions. When you ask to watch a ranking report, we store your work email address, the company name if you give one, and which report you want to follow, in our own database. Update emails are sent through our email-sending platform.

Scheduling. When you book a call, our scheduling provider collects your name, email address and any meeting notes. On AI Rankings pages the notes may be pre-filled with the report you were viewing.

Webinar registration. When you register for a paid webinar, you pay on our payment provider's own hosted checkout page. We receive your name and email address to confirm your registration; we never see your card details.

Information collected automatically. When you visit the site, our analytics, advertising & retargeting and B2B visitor-identification providers collect page views, device and browser information, and an approximate location derived from your IP address (see "Cookies, Analytics and Your Choices" below). For most visitors, including those in the United States, they do this by default, and you can opt out through Your Privacy Choices, Global Privacy Control or Cookie settings. For visitors in the EU, the EEA, the UK or Switzerland, nothing is collected this way until you choose to allow it in our cookie banner. When another website displays one of our AI Rankings badges, we record only the host name of the page showing it, the company the badge belongs to, the date and the report it came from. We never record that visitor's IP address, browser details or the full page address.

Public business information. AI Rankings and our B2B outreach use publicly available business information: business names and websites, and publicly listed executive names, titles and business contact details. AI Rankings use public business information. Marketing and visitor identification may also use information supplied by the providers described below.

We get information directly from you, through the forms, subscriptions and bookings described above; automatically, through cookies and the analytics and identification scripts described below, when you browse the site and allow them; from our scheduling, payment processing, and form and email delivery providers, when you use a feature that runs through them; from ChatGPT's own published answers and public business records, for AI Rankings; and, for targeting B2B outreach to companies (never to individual consumers), from ProjectA's own CRM and from business data providers.

We use three non-essential tracking categories: analytics (site analytics), advertising & retargeting (ad conversion measurement and retargeting) and B2B visitor identification (identifying the companies that visit us, for our sales outreach). How they start depends on where you are. For most visitors, including those in the United States, all three run by default, and you can opt out at any time through Your Privacy Choices in the site footer, which also turns off the "sharing" described under your California rights. For visitors in the EU, the EEA, the UK or Switzerland, none of them loads until you choose: our cookie banner offers Accept all, Reject non-essential and Preferences, where you can allow analytics and advertising separately, and Google Consent Mode v2 keeps Google's analytics and advertising signals set to denied until you decide. We work out which of these applies from the country your connection comes from, and we do not store it. If we cannot tell, we treat you as a visitor who has to choose.

We treat the Global Privacy Control signal from your browser as an automatic opt-out of non-essential cookies. You can change your choice at any time through Your Privacy Choices in the site footer, which opens the page containing Cookie settings and our opt-out control. Our Cookie Policy lists every technology, what it does and how long it lasts.

We disclose information to form and email delivery providers, scheduling, payment processing, hosting and database, and outreach email platforms, and to analytics, advertising & retargeting and B2B visitor-identification providers. Their roles and permitted uses depend on the service and our agreement with them; marketing providers may also process information under their own privacy policies. Business contact information may come from public records, our CRM and marketing data providers. Visitor identification is described below. We may also disclose information where the law requires it.

We use third-party audience marketing and visitor-identification providers. Their pixels and related technologies may collect IP addresses, cookie or device identifiers, browser details, page visits and interactions, and match those signals with contact information or audience profiles from its data sources. This can identify a visitor or household, rather than only produce anonymous visit counts. We use these services to understand interest in ProjectA, build marketing audiences and measure campaigns.

Our audience marketing provider describes its data sources, matching, marketing uses and consumer choices in its Privacy Policy. To request access, correction, deletion or a stop to ProjectA marketing, email dev@projecta.ai. The provider lists its database opt-out page for requests concerning its marketing database. If that page is unavailable, email dev@projecta.ai for help with your ProjectA request and contact the provider using the details in its policy. Opening that link alone does not submit an opt-out or change your ProjectA browser settings. A browser preference stops future tracking by the technologies connected to that preference; it does not by itself delete data already held by ProjectA or a provider, or unsubscribe you from email. We have not confirmed a separate retention period for provider-held visitor-identification data under our account and do not promise one here.

ProjectA uses publicly available business contact information (a company's own listed executives' names and titles, business email addresses and business phone numbers) to run category-specific email and phone outreach related to AI Rankings. Every outreach email includes a way to unsubscribe. We also track whether our outreach emails are opened and whether their links are clicked, using our email-sending platform's own engagement tracking. A company can stop all of our outreach at any time by emailing dev@projecta.ai. Once we have verified the request, the stop is permanent, it is applied the same way for every company, and it is never tied to buying anything from us.

AI Rankings are a dated record of what ChatGPT's answers said about publicly known businesses. They are not a review, rating, recommendation or endorsement by ProjectA.

If you represent a company listed there and something is wrong, or you want your company removed, email dev@projecta.ai from an address at your company's website domain, or use the Request a correction or removal form. We act on verified requests within 5 business days, apply the same policy to every company, and never charge for it. A removed company's name is withheld from future snapshots and from quoted answers, and its position stays so other companies' ranks are not changed. A verified removal also stops that company from receiving our outreach emails or calls.

You can ask to know and access the personal information we hold about you, and ask us to delete or correct it, by emailing dev@projecta.ai. Before we act, we verify that the request comes from the email address on record.

We do not sell personal information for money. Some of the tools named above, our advertising & retargeting and B2B visitor-identification categories, may count as "sale" or "sharing" personal information with third parties for cross-context behavioral advertising under California law. You can opt out of that sharing with the Your Privacy Choices / Do Not Sell or Share My Personal Information link in the site footer, which takes you to the California section of our Cookie Policy, where one click opts you out. We honor the Global Privacy Control signal automatically as an opt-out of that sharing. If the link does not work for you, email dev@projecta.ai and we will help you stop ProjectA marketing and address the request with the relevant provider.

We will not discriminate against you for exercising any of these rights.

Retention of Google-connected data is governed entirely by the Google User Data section of this policy. AI Rankings subscription confirmation links expire after 24 hours, and we never email an unconfirmed signup again. Published ranking snapshots are kept as a dated historical record, except that a verified removal withholds the company's name. Contact-form submissions are retained by our form and email delivery providers under their own terms; we do not keep a separate copy.

We use reasonable technical and organizational measures to protect information, including encryption in transit and, for Google-connected data, the encryption at rest described in the Google User Data section. No service can guarantee absolute security.

This site is not directed to children under 13, and we do not knowingly collect their personal information.

The site and its systems are operated from the United States. If you use it from elsewhere, your information is processed in the United States.

Magnet is ProjectA.ai's AI and answer-engine visibility platform. It tracks how your brand appears across AI-generated answers, audits your site's SEO and AEO signals, and generates optimized content.

Magnet can optionally connect your Google Search Console and Google Analytics accounts to show you your own search performance and traffic data inside your workspace, and to ground its keyword analysis in your real search data instead of estimates. These connections are read-only and entirely optional.

Open Magnet  ·  Terms of Service

Scopes requested. When you choose to connect a Google account, Magnet requests two read-only scopes: Google Search Console (https://www.googleapis.com/auth/webmasters.readonly) and Google Analytics (https://www.googleapis.com/auth/analytics.readonly). Both are presented together in a single consent screen, but you may decline either one individually and continue using Magnet with only the other, or with neither.

What we access. With the Search Console scope we read performance data — clicks, impressions, click-through rate, average position, and your top search queries. With the Analytics scope we read reporting data — sessions, users, engagement, and the traffic-channel breakdown. In both cases we read only the specific property you select after connecting, and both scopes are read-only: Magnet cannot modify anything in your Google account.

How we use it. This data is rendered only inside the connecting workspace's own "Google Data" tab and, when that workspace runs an audit, inside that workspace's AEO Audit report and its print PDF. When a Search Console connection exists, the same read-only query data is also used as an input to Magnet's own keyword-traffic estimates for that workspace. Google user data is never used for advertising, never sold, never used to train AI or machine-learning models, and never transferred to third parties except to the infrastructure providers that host and operate Magnet on our behalf under contractual confidentiality and security obligations, or where required by law.

How we store it. OAuth access and refresh tokens are encrypted at rest with AES-256-GCM before being persisted. Periodic snapshots of the fetched metrics are stored in the application database, scoped to the connecting workspace only and never readable from another workspace.

Retention & deletion. A workspace member can disconnect the Google account at any time from the Google Data tab. Disconnecting immediately deletes the stored connection and its encrypted tokens, and Magnet stops fetching any further Google data. Metric snapshots collected before disconnection are retained for that workspace's own historical trend charts for up to 12 months, after which they are automatically deleted; they are deleted immediately if the workspace is deleted. You may request deletion of all Google-derived data for your workspace at any time by emailing dev@projecta.ai, and we will complete the deletion within 30 days. You can also revoke Magnet's access directly from your Google Account at https://myaccount.google.com/permissions.

Magnet's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use information to respond to inquiries, provide and improve our services, identify interest in ProjectA and market our services. Advertising and visitor-identification disclosures may constitute sale or sharing under some privacy laws, as described in the California notice above.

We may update this privacy policy from time to time. If we materially change how we access, use, store, or share Google user data, we will update the "Last updated" date above, notify affected users by email, and — where the change expands our use of Google user data — prompt you to review and consent to the updated policy before that use begins.

If you have questions about this privacy policy, please contact us at dev@projecta.ai.