Privacy Policy

Brand: Visible AI Site Website: https://visibleaisite.com Company: Holy River for digital marketing technologies Location: Amman, Jordan Contact email: hello@visibleaisite.com Effective date: June 7, 2026

1. Introduction

This Privacy Policy explains how Holy River for digital marketing technologies, operating the Visible AI Site brand, collects, uses, stores, and shares information when you use https://visibleaisite.com, the AI Visibility Checker, the scan result page, the detailed report request flow, email report links, and related services.

Visible AI Site helps website owners and online store owners run an automated first-look scan of selected public technical signals that may affect how clearly AI-assisted search, answer engines, shopping tools, and browsing agents can access, read, and understand a website or online store.

This Privacy Policy is written for visitors, people who submit websites for scanning, people who request detailed reports, and people who receive or open report links.

2. Important note about the automated scan

The AI Visibility Checker is an automated public-signal scan. It checks selected public technical signals that can be inspected from publicly available website responses, public HTML, metadata, robots.txt files, sitemaps, structured data, public links, sampled pages, product/page signals, and basic crawl evidence.

The scan is not a full AI visibility audit, legal audit, compliance audit, accessibility audit, security audit, SEO audit, or ecommerce audit.

Some results may be affected by redirects, region rules, crawler limits, JavaScript rendering, target-site settings, sampling limits, temporary website errors, or platform configuration.

3. Who is responsible for your information

For this Privacy Policy, the responsible company is:

Holy River for digital marketing technologies Amman, Jordan Email: hello@visibleaisite.com

Visible AI Site is the public brand and website used for the AI Visibility Checker and related report and follow-up services.

4. Information we collect when you submit a website URL

When you submit a website or online store URL for scanning, we may collect and store:

the website URL you submitted;
the normalized website URL;
the normalized domain;
confirmation that you accepted the Terms of Use;
the Terms version accepted;
the timestamp of Terms acceptance;
the scan request status;
the checker status;
the scan result summary;
checker response data;
artifact path information returned by the checker;
score and score label, when available;
public error messages or error codes when a scan fails;
browser referrer information, when available;
campaign attribution values, when present;
a hashed requester IP address used for technical, security, abuse-prevention, troubleshooting, and operational purposes.

The current MVP application is designed not to store the clear requester IP address in the website database. Instead, it stores a hashed version of the IP address for technical and abuse-prevention purposes.

5. Information collected from the submitted website

When you submit a website URL for scanning, the checker may fetch and analyze public information from that website.

Depending on the site type and what is publicly available, this may include:

the homepage;
robots.txt;
sitemap files and sitemap-listed URLs;
public same-host HTML pages discovered from sitemaps or crawlable links;
public product pages, category pages, collection pages, or policy pages where applicable;
page URLs;
page types;
crawl depth;
HTTP status codes;
response timing;
HTML size;
page titles;
meta descriptions;
canonical URLs;
robots meta tags;
noindex indicators;
JSON-LD or other structured data summaries;
headings;
link metadata;
image counts;
script counts;
product, offer, price, availability, policy, and ecommerce signals where publicly detectable;
accessibility and semantic-HTML indicators;
crawlability and indexability indicators;
evidence summaries used to generate findings.

The checker does not need access to your website admin panel, private dashboard, customer database, payment processor account, Google Search Console, Shopify admin, WooCommerce admin, or other private accounts to perform the public MVP scan.

The checker is intended to inspect public website signals only. You should not submit private, restricted, paywalled, confidential, or access-controlled URLs.

6. Report request information

When you request the detailed AI Visibility Readiness Report, we collect and store:

your name;
your email address;
your normalized email address;
your website URL;
your normalized domain;
your optional role, if provided;
the scan ID and scan context;
the report request status;
timestamps related to the report request.

We use this information to generate, send, track, and follow up about the requested report.

7. Report tokens and report access links

When a detailed report is requested, we may create a tokenized report access link. This link allows the recipient to view the report without creating an account.

Report tokens are bearer-style access links. This means anyone with a valid report link may be able to access the report until the link expires or is revoked.

For the current MVP, report tokens expire after 90 days. We store hashes of report tokens rather than storing the clear token value in the database.

You should treat report links as sensitive and avoid sharing them with people who should not access the report.

8. Email delivery information

When we send a report email, we may store email delivery records such as:

recipient email address;
subject line;
delivery status;
attachment status;
error codes, if delivery fails;
sent timestamp;
related lead, report request, and scan references.

Report emails may include your name, the scanned website URL, the score, score label, highlights, key issues, a tracked report link, and a PDF attachment when available and within configured size limits.

We do not currently use email open pixels in the MVP runtime.

9. Email link click tracking and report view tracking

Report email links may route through a tracking link before redirecting to the report. When you click a report email link or view a tokenized report, we may record:

that the link was clicked;
click count;
last clicked timestamp;
report viewed timestamp;
related lead, scan, and email-send references;
technical event details needed for delivery, security, troubleshooting, and follow-up.

We use this information to confirm that reports are being accessed, support follow-up, understand the report request flow, and troubleshoot delivery or access issues.

10. First-party events

We may record first-party funnel events related to use of the checker and report flow, such as:

URL scan submitted;
scan failed;
scan completed;
report requested;
report sent;
email report link clicked;
report viewed.

These events may include related scan, website, lead, hashed IP, normalized domain, and event-detail information.

11. Cookies, browser storage, analytics, and advertising pixels

Visible AI Site may use Google Analytics to understand website traffic, page views, and broad funnel interactions such as scan starts, report requests, and contact requests.

Google Analytics may use cookies or similar browser technologies and may receive browser, device, page, referrer, and interaction information according to Google's terms and policies.

We do not intentionally send lead names, email addresses, submitted website URLs, scan IDs, report tokens, contact messages, or detailed scan findings to Google Analytics.

At the current MVP stage, Visible AI Site does not use:

localStorage;
sessionStorage;
Meta/Facebook Pixel;
third-party advertising pixels;
email open pixels.

If we later add advertising pixels, CAPTCHA, additional analytics tools, or other tracking or processing tools, this Privacy Policy should be updated before those features are launched or deployed.

12. How we use information

We use the information described in this Privacy Policy to:

receive and validate scan requests;
confirm Terms acceptance;
run automated public-signal scans;
generate instant scan summaries;
generate detailed AI Visibility Readiness Reports;
send report emails;
provide report links and report downloads;
track report email link clicks and report views;
troubleshoot failed scans, report delivery, or report access;
prevent abuse, unauthorized use, and technical misuse;
improve the checker, report structure, and website experience;
sync report request and engagement events to internal workflow tools;
follow up about practical implementation help related to the scan, when appropriate;
maintain operational logs and business records.

13. Follow-up communication

When you request a detailed report, Visible AI Site may follow up with you by email about the report, scan findings, practical next steps, and possible implementation help related to the scanned website.

Requesting a report does not create a paid service agreement, support contract, or guaranteed response obligation unless a separate agreement is accepted.

You can contact us at hello@visibleaisite.com if you want to stop receiving follow-up related to your report request.

14. Service providers and external processors

We may use service providers and external systems to operate the checker, generate reports, send emails, store artifacts, and manage follow-up.

These may include:

a private checker API that receives the submitted URL and scans public website signals;
SMTP infrastructure used to send report emails;
n8n for workflow automation and lead/event routing;
ClickUp for lead follow-up and internal task management;
CDN, hosting, or artifact storage systems for report artifacts such as result files and PDF reports;
hosting, database, and infrastructure providers used to run the website and checker.

These providers may process information such as your name, email address, website URL, normalized domain, scan ID, detected platform, score, score label, highlights, key issues, and event details where needed for the service flow.

We do not intentionally send requester name, requester email, public report tokens, ClickUp task IDs, or funnel-event details to the private checker API for the scan itself.

15. Artifact storage

Completed supported scans may generate report artifacts such as:

result.json;
report.pdf;
optional internal scan.json.

The website backend may fetch these artifacts server-side. When signed URLs are used for artifact access, they should be short-lived and should not be stored in long-term lead records.

16. Retention

Current MVP records may be retained indefinitely unless they are manually deleted or a later retention policy is implemented.

This may include:

leads;
scan records;
scan metadata;
checker page metadata;
funnel events;
sync logs;
email send records;
generated artifacts.

Report access tokens currently expire after 90 days and may be revoked through database state.

Because automated deletion jobs are not currently implemented for all record types, this Privacy Policy does not claim that all personal data or scan data is automatically deleted after a fixed period.

You may contact us at hello@visibleaisite.com to request deletion or review of information associated with you or your report request. We will review requests based on the information available, operational requirements, legal requirements, abuse-prevention needs, and technical feasibility.

17. Security

We use technical and operational measures designed to protect the checker and report flow, including:

server-side validation of scan URLs and report request fields;
server-side validation of Terms acceptance;
HMAC-SHA256 signing for certain internal service-to-service requests;
checker source validation;
optional checker IP allowlisting;
tokenized report access;
storage of report token hashes rather than clear report tokens;
noindex settings on dynamic result and tokenized report pages;
server-side artifact fetching rather than direct public browser access to checker artifacts;
separation between public website requests and the private checker API.

No website, system, transmission, or storage method can be guaranteed to be completely secure.

18. User responsibilities

You should not submit URLs that include secrets, credentials, tokens, session identifiers, private customer data, personal data, confidential data, or any information that should not be processed by an automated public-signal checker.

You should only submit websites that you own, manage, or have permission to scan.

You should control access to report links and avoid sharing them with anyone who should not view the report.

19. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for certain personal information.

To make a privacy request, contact us at hello@visibleaisite.com and include enough information for us to identify the relevant report request, email address, scan, or website URL.

We may need to verify your identity or authority before fulfilling a request. Some information may be retained where needed for security, abuse prevention, legal compliance, operational records, dispute handling, or legitimate business purposes.

20. International users

Visible AI Site is operated by Holy River for digital marketing technologies in Amman, Jordan. If you access the website from outside Jordan, your information may be processed in Jordan and in other countries where our hosting, infrastructure, email, workflow, storage, or service providers operate.

Those countries may have data protection laws that differ from the laws in your location.

21. Children

Visible AI Site is intended for business and professional use. It is not directed to children. We do not knowingly collect personal information from children.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, especially if we add new features, analytics, cookies, advertising pixels, CAPTCHA, contact forms, processors, retention rules, account features, paid services, or other material changes.

The updated version will be posted on this page with a new effective date.

23. Contact

For privacy questions, requests, or concerns, contact:

Holy River for digital marketing technologies Amman, Jordan Email: hello@visibleaisite.com