Privacy Policy

1. Introduction

Welcome to imvisible.ai ("we," "us," "our," or "Service"). imvisible.ai is operated by ToolRouter Inc, a Delaware corporation ("Company"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection, usage, and your rights when using our Service.

imvisible.ai is a platform that enables professionals to create AI-optimized profiles, track visibility in AI-powered search systems, and enhance professional discoverability. By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password (hashed), and authentication credentials
• Profile Information: Professional experience, education, skills, work history, portfolio links, and other resume/CV data
• Contact Information: Email address, phone number (if provided), and social media links
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Content: Documents you upload (resumes, CVs), profile descriptions, customizations, and any other content you create
• Communications: Messages you send to us, support requests, and feedback

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, time spent on pages, clicks, and navigation patterns
• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers
• Location Data: General geographic location based on IP address (country, city level)
• Log Data: IP address, access times, dates, referring URLs, and error logs
• Cookies and Tracking Technologies: Cookies, web beacons, pixels, and similar tracking technologies (see Section 7)

2.3 Profile Analytics and Engagement Data

For published profiles, we collect:

• Profile Views: Number of views, view timestamps, and visitor information
• Bot Tracking: Identification of AI crawlers and bots (ChatGPT, Perplexity, Claude, etc.) that access your profile
• Engagement Metrics: Interactions with AI chat features, job evaluation tool usage, and other engagement data
• Referral Sources: How visitors found your profile (direct, search engines, social media, etc.)
• Geographic Distribution: Locations of profile viewers

2.4 Discovery Test Data

When you run discovery tests, we collect:

• Search queries tested
• Test results (whether you appeared in results, ranking positions)
• Competitor information (other profiles appearing in similar searches)
• Visibility scores and metrics

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our Service, including profile creation, AI content generation, and analytics
• Account Management: To create and manage your account, authenticate users, and process transactions
• Profile Display: To create and display your AI-optimized profile on public pages
• AI Processing: To generate narrative content, suggestions, and recommendations using artificial intelligence
• Discovery Testing: To test your visibility in AI-powered search results and provide visibility metrics
• Analytics: To track profile views, engagement, bot crawls, and provide analytics dashboards
• Communication: To send service-related notifications, updates, support responses, and marketing communications (with your consent)
• Security: To detect, prevent, and address security issues, fraud, and abuse
• Legal Compliance: To comply with legal obligations and respond to legal requests
• Research and Development: To analyze usage patterns, improve our algorithms, and develop new features
• Personalization: To personalize your experience and provide relevant content and recommendations

4. Information Sharing and Disclosure

4.1 Public Profile Information

When you publish your profile, the following information becomes publicly accessible:

• Your profile content (experience, education, skills, etc.)
• Your profile URL (e.g., imvisible.ai/as/your-name)
• Links to your portfolio, LinkedIn, GitHub, and other verified sources
• AI-generated narrative content

Published profiles may be:

• Indexed by search engines (Google, Bing, etc.)
• Crawled by AI systems (ChatGPT, Perplexity, Claude, etc.)
• Viewed, shared, and linked to by anyone
• Cited by AI systems in search results

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud Hosting & Infrastructure: Cloudflare (CDN, security, and DDoS protection), Supabase (database, authentication, and backend services)
• Payment Processing: Stripe (payment processing, subscription management, and billing) - we do not store full payment card details
• Company Services: Firstbase (company compliance, registered agent services, and corporate governance)
• AI Services: Exa API and other third-party AI APIs for content generation and discovery testing
• Analytics: Google Analytics, Cloudflare Analytics, and other analytics providers to track usage and performance
• Email Services: Email delivery and marketing platforms for transactional and marketing communications
• Authentication: OAuth providers (Google, GitHub, etc.) if you use social login

These service providers are contractually obligated to protect your information and use it only for the purposes we specify. We carefully select service providers that meet high standards for data protection and security.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (subpoenas, court orders, etc.)
• Government requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Protection of users' rights, property, or safety

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption: Data encryption in transit (TLS/SSL) and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Authentication: Password hashing and secure authentication mechanisms
• Regular Security Audits: Ongoing security assessments and vulnerability testing
• Infrastructure Security: Secure cloud infrastructure with industry-standard security practices
• Data Backup: Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain analytics and historical records

When you delete your account:

• We will delete or anonymize your personal information within 30 days
• Published profiles will be removed from public access
• Some information may be retained in backups for up to 90 days
• Aggregated and anonymized data may be retained indefinitely

Note: Cached versions of your profile may continue to exist in search engines and AI systems for some time after deletion.

7. Cookies and Tracking Technologies

7.1 Types of Cookies

We use cookies and similar tracking technologies, including:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

7.2 Third-Party Tracking

We use third-party analytics and tracking services that may use cookies and similar technologies. These services include:

• Google Analytics
• Cloudflare Analytics
• Other analytics and marketing platforms

7.3 Cookie Controls

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

8. Your Rights and Choices

8.1 Access and Portability

You have the right to:

• Access your personal information
• Request a copy of your data in a portable format
• View your profile analytics and engagement data

8.2 Correction and Deletion

You can:

• Update your account and profile information at any time
• Correct inaccurate information
• Delete your account and request deletion of your personal information
• Unpublish your profile to remove it from public access

8.3 Opt-Out Rights

You can opt out of:

• Marketing emails (use unsubscribe links in emails)
• Analytics tracking (adjust cookie preferences)
• Certain data processing activities (contact us to exercise these rights)

8.4 Data Processing Restrictions

You may have the right to:

• Restrict how we process your information
• Object to certain processing activities
• Withdraw consent where processing is based on consent

8.5 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law).

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. By using our Service, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure your information receives adequate protection, including:

• Standard contractual clauses
• Privacy Shield frameworks (where applicable)
• Other legally recognized transfer mechanisms

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at [email protected].

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

13. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Third-party services we integrate with include:

• Infrastructure: Cloudflare, Supabase
• Payment Processing: Stripe
• Company Services: Firstbase
• Authentication: Google, GitHub, and other OAuth providers
• AI Services: Exa API and other AI search APIs
• Analytics: Google Analytics, Cloudflare Analytics, and other analytics services
• Social Media: Integration with various social media platforms

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website
• Sending an email to the address associated with your account
• Displaying a notice within the Service

The "Last Updated" date at the top of this page indicates when the Privacy Policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days (or as required by applicable law).