Privacy Policy

01 Scope

This Privacy Policy explains how superagnt (agntdata, inc., "we") collects, uses, discloses and protects personal information when you use supereo at supereo.app, create an account, contact us, or otherwise use the service.

supereo works on how AI engines such as ChatGPT, Gemini, Perplexity, Claude and Google's AI answers recommend a business. Its free audit reads a few public pages of a site and asks those engines buyer questions about it. On a paid plan, supereo tracks how often the engines recommend the business and who they pick instead, recommends changes, and on the Autopilot plan makes changes on the business's own website, through the website builder or GitHub repository the customer connects, then measures whether each change worked. supereo also publishes the supereo Index, the software those engines recommend in each category.

This Policy does not apply to third-party websites or services we do not control. They may have their own privacy notices and terms.

02 Information we collect

We collect information you give us, information generated by your use of the service, and information from third parties you authorize.

• Account information, such as your email address, authentication identifiers, the accounts you belong to, and your preferences.
• Billing information, such as your plan, subscription status, transaction details and payment processor identifiers. Card details are handled by our payment processor; we do not store them.
• Customer Data: what you submit to supereo or ask it to work on.
• Usage and device information, such as IP address, browser, request details, pages viewed, features used, errors, and approximate location derived from the IP address.
• Support and communications data, such as the messages you send us and your contact details.

03 How we use information

We use personal information and Customer Data to provide, secure, support and improve supereo.

• Provide the service, sign you in, and manage your account and the people in it.
• Check that sign-ins and sign-ups come from people, not automated abuse.
• Send account email, such as sign-in codes and notices about changes to your account.
• Process payments, prevent fraud, and keep billing records.
• Monitor reliability, fix errors, and understand how the service is used.
• Detect and prevent abuse, security incidents, violations of our Terms, and unlawful activity.
• Comply with the law and respond to lawful requests.

04 Who processes supereo data

These service providers process data for supereo, each only to provide its part of the service:

• Supabase hosts the account database and runs sign-in.
• Vercel hosts the site and the app, and builds previews of changes supereo makes in a GitHub repository.
• Cloudflare Turnstile checks that a sign-in or audit request comes from a person.
• Anthropic runs the AI models that read your site and the engines' answers, write recommendations and draft changes.
• superagnt's data API, run by us, and the providers it uses asks AI engines your questions, fetches public web pages, search results and SEO data, and looks up the company behind a work email address.
• Flywheel sends account email, such as sign-in codes and trial notices, and runs the live class, its registrations and its follow-up messages.
• Google (Gmail) and xAI (Grok) help our team write and send the first follow-up email to someone who ran a free audit.
• PostHog records how the site and the app are used, including session recordings with email addresses and credentials masked, and the errors they hit.
• Stripe processes payments.
• Whop measures which ads bring people to the class and the done-for-you offer.
• X measures which ads bring people to the free audit, the trial and a paid plan.
• Meta measures which ads bring people to the free audit, the trial and a paid plan.
• Cal.com schedules the calls you book.

05 Sites and accounts you connect

supereo works on your website only through the connections you make, and only within what you approve.

For a website builder and for AI read analytics, the access token, application password or API key is encrypted at rest, stored only on our servers, never sent to your browser, and read only by supereo's server code. Disconnect, in your dashboard's Settings, deletes the stored credential and, where the service allows it, revokes supereo's access there too. Changes supereo already made to your site stay until you undo them.

To remove GitHub, uninstall the supereo GitHub App in GitHub. To remove Slack, remove supereo's app from your Slack workspace: supereo stops posting, and the revoked token stays with your account until the account is deleted.

• Website builders (WordPress, Webflow, Wix, Framer and Shopify): supereo reads your site's pages and SEO settings. Within the site plan you approve, it changes page titles, meta descriptions, structured data, crawl files and redirects, adds the pages it may add, and on WordPress and Shopify changes page text, where each builder allows it. It never deletes a page and never changes prices, products, checkout or theme files. It saves each value it replaces, so Undo can put it back. When Shopify or Wix tells us you removed supereo's app, we delete the stored credential. If you revoke supereo's access inside another builder, supereo stops at once: the builder refuses its next call, nothing more is written or published, and Settings shows that the builder refused the connection until you connect it again or press Disconnect, which deletes the stored credential.
• GitHub: through the supereo GitHub App, installed on the repositories you choose, supereo reads their code and opens pull requests from branches of its own. Its changes reach your site only through pull requests that follow your repository's rules.
• Cloudflare, Vercel, or the capture file you add to your site, for AI read analytics: supereo receives the requests your site gets from AI crawlers, and visits referred by AI assistants. It drops every other request on arrival, never keeps cookies or authorization headers, keeps a query string only for its utm tags, and replaces each visitor's IP address with a hash under a key that changes daily, except an address it keeps to confirm a crawler's identity. To check which network an address belongs to, it looks up part of the address in public internet registries. Raw reads are kept for 90 days, and their daily totals with your account. Cloudflare's optional Worker needs permission to manage Workers in your Cloudflare account: supereo uses it only to run its own Worker, and removes it when you disconnect.
• Slack: when you add supereo to a Slack workspace, it posts in the channels you choose and reads messages in channels it's in and messages that mention it. It doesn't read direct messages or files.
• The free audit: supereo fetches a few public pages of the site you enter, such as its home, pricing and docs pages, and keeps their text with the audit.

06 AI models

We don't use your data to train AI models. The AI models that work on your account's data are Anthropic's, used under business terms that don't let Anthropic train on what we send. When you run a free audit, xAI's Grok also drafts the first follow-up email we send you, from the audit's results and your name, email address and site. The buyer questions supereo asks ChatGPT, Gemini, Perplexity, Claude and Google's AI answers are asked the way a buyer would ask them, so treat them like any question asked in public. supereo's own AI agents work on your account's data only to do what your plan and your settings ask, and every change they make to your site is recorded, with Undo.

07 Cookies

We use cookies to keep you signed in and to protect your account. Our sign-in cookies are set for supereo.app only, never for other sites or subdomains.

supereo also uses PostHog, which sets its own cookie, to understand how the site and the app are used. Session recordings mask email addresses and credentials.

A cookie on this host remembers, for 30 days, the browser that started a free audit, so that browser can see the audit and start its trial.

The pages of our live class (such as /class, /done-for-you and /book) load Whop's pixel on every visit, and send Whop the email address and phone number you enter there, so Whop can measure our class ads. When you arrive on any other page from one of our ads on X, Meta or Whop, the site loads that platform's pixel, which may set its own cookies. We tell the ad platforms when a visit leads to a class registration, an audit, a trial or a paid plan, sending the ad's click identifier where there is one and, where you gave them, your email address, name and phone number, with your IP address and browser, so the platform can measure the ad. Your browser keeps an ad click for 28 days, and during that time the free audit's pages (the home page, the checker, the audit and its report and plans) load that platform's pixel on later visits too. Otherwise, a visit that didn't come from one of our ads loads none of these pixels.

You can control cookies in your browser settings. Blocking them prevents signing in.

08 How we share information

We do not sell personal information. We share it only as needed to provide the service, at your direction, or as the law requires.

• With the service providers named above.
• With other members of your account, according to their role.
• With professional advisers, auditors and insurers where appropriate.
• With authorities or others when the law requires it, or to protect rights, safety, security or the integrity of the service.
• With a successor in a merger, acquisition, financing, reorganization or sale of assets.

09 Retention

We keep your account and the data it holds, such as your audits, tracked answers, and the changes supereo made and how they did, for as long as the account exists. To delete your account, email privacy@superagnt.com from the address you sign in with: we delete its data within 30 days, apart from what we must keep for legal, billing or security reasons. Public information we gathered, such as AI engines' answers and public web pages, may be kept to improve supereo's measurements and the supereo Index.

Some information may remain in backups, logs, billing records or security records for a limited period where necessary.

10 Undoing what we did

When supereo changes your site, it saves what each change replaced. Undo, on each change in your dashboard, puts the previous version back: on a website builder supereo writes the saved values back and publishes again, and on GitHub it opens a pull request that reverts the change. Disconnecting doesn't undo changes already made, so undo any you want gone before you disconnect.

11 Security

We use administrative, technical and organizational safeguards designed to protect personal information and Customer Data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

12 International processing

We and our service providers may process information in the United States and other countries whose data protection laws differ from those where you live. Where required, we use appropriate safeguards for international transfers.

13 Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict or object to the processing of your personal information, and to withdraw consent where processing is based on consent.

To make a request, email privacy@superagnt.com. We may need to verify your identity before acting on it.

14 Children

supereo is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

15 Changes to this Policy

We may update this Policy. We will post the new version with a new date and, where required, give you additional notice. Using the service after an update means the updated Policy applies.

Questions? Email privacy@superagnt.com.