Privacy Policy
Last updated: April 7, 2026
1. Introduction
Welcome to Gendelion ("we", "our", or "us"). We operate the Gendelion platform available at gendelion.com (the "Service"), an Answer Engine Optimization (AEO) analytics platform. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.
By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information you provide to us
- Account information: name, email address, and password when you register.
- Waitlist information: name, email, company name, and intended use case when you join our waitlist.
- Workspace data: domain names and competitor domains you add to your workspace.
- Communications: any messages you send us via email or support channels.
2.2 Information collected automatically
- Usage data: pages visited, features used, analysis runs initiated, and timestamps.
- Device & technical data: browser type, operating system, IP address, and referrer URL.
- Cookies & session tokens: we use secure HTTP-only cookies to maintain your authenticated session.
2.3 Third-party analysis data
When you run an AEO analysis, we query third-party AI services (OpenAI, Anthropic, Google, xAI, and Perplexity/OpenRouter) with your domain name and generated questions. We store the responses, scores, and derived metrics associated with your workspace. We do not share your workspace data with other customers.
3. How We Use Your Information
- Provide, operate, and improve the Service.
- Authenticate your identity and maintain your session.
- Run AEO analyses on domains you add and display results to you.
- Send transactional emails (invite links, analysis completion notifications).
- Monitor platform health, detect abuse, and ensure security.
- Comply with legal obligations.
We do not sell your personal data to third parties. We do not use your workspace analysis data to train AI models.
4. Data Sharing and Disclosure
We share data with the following categories of third-party processors:
- Database & hosting: Neon (serverless Postgres), Vercel (hosting and edge compute).
- AI providers: OpenAI, Anthropic, Google, xAI, OpenRouter — your domain name is sent as part of analysis prompts.
- Domain enrichment: WhoisJSON and IPinfo — your target domain names are queried.
- Queue & cache: Upstash (Redis and QStash) for background job processing.
- Object storage: Cloudflare R2 for storing analysis report files.
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Gendelion, our users, or others.
5. Data Retention
We retain your account data for as long as your account is active. Analysis results and workspace data are retained for the lifetime of your account plus 90 days after deletion. Waitlist entries are retained for up to 24 months. You may request earlier deletion at any time (see Section 7).
6. Security
We implement industry-standard security measures including TLS encryption in transit, bcrypt-hashed passwords, HTTP-only session cookies, and access controls. However, no system is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate personal data.
- Erasure: request deletion of your account and associated personal data.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing in certain circumstances.
To exercise any of these rights, email us at privacy@gendelion.com. We will respond within 30 days.
8. Cookies
We use only essential cookies required to operate the Service (authentication session tokens). We do not use third-party tracking or advertising cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Service.
9. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date at the top. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or requests, contact us at: privacy@gendelion.com