Privacy Policy — Jarvis Report

Privacy PolicyLast updated: August 3, 2026.This policy covers jarvisreport.com and the Jarvis Report service. It explains what we collect when you run a visibility report, what we send to third parties, how long we keep it, and how to make us delete it.1. Who we areJarvis Report is operated by The Titans App LLC ("we", "us"). We are the data controller for the information described here. For anything in this policy, including a request to access or delete your data, contact support@jarvisreport.com.2. What the service doesYou enter a business name and a city. We match that to a public business listing, check whether the business appears in public directories, and ask several AI answer engines the kind of question a customer would ask. We then report what each one said.We work from public information only. We do not ask for, and have no access to, a business's customer records, sales data, or internal systems.3. What we collectInformation you give us

Business details you enter — the business name and city, and any later corrections you make to the match.

Your email address — when you save a report, create an account, or ask us to send results.

Account credentials — a password, which is stored only as a hash, or a Google sign-in if you choose that.

Anything you send us — support messages and their contents.

Information collected automatically

Usage and device data — pages viewed, actions taken in the report flow, browser and device type, approximate location derived from IP.

A visitor identifier — a random ID stored in your browser so repeat visits can be counted without a login. It is not linked to your name.

Session recordings — see section 6. This is the disclosure people most often miss, so it has its own section.

Server logs — IP address, timestamp and request path, kept for security and abuse prevention.

What we do not collectWe do not collect special category data — health, biometrics, race, religion, political opinion or sexual orientation. Do not send it to us. We never see or store full card numbers; payments go directly to Stripe.4. Business information we processA report is built from information that is already public: listings on Google Business Profile, Yelp, Foursquare, Better Business Bureau, TripAdvisor, and the business's own website. If you run a report on a business, that business's public details, plus the results we obtained, are stored against the report.Where a business is a sole trader, its business contact details may also be personal data. We process it on the basis of legitimate interest in providing a visibility check on publicly listed businesses. Any business can ask us to delete its report data using the contact address above.5. What we send to AI providersRunning a report means sending prompts to third-party AI engines: ChatGPT (OpenAI), Claude (Anthropic), Gemini (Google), Perplexity. The prompt contains the business name and city you entered — the same question a customer might type. Your email address, account details and payment information are never included.Those providers process the prompt under their own terms and privacy policies. We do not control how they handle it, and we cannot influence or correct what they say about any business.6. Cookies, analytics and session replayWe use cookies and similar browser storage to keep you signed in, remember where to return you after sign-in, and measure how the site is used.We use Microsoft Clarity, which records your session. That means your clicks, scrolling and mouse movement on our pages are captured and replayed so we can see where the report flow confuses people. Keystrokes in form fields are masked by Clarity's default settings. We use it to fix usability problems, not to identify individuals.We also use Google Analytics 4 and Google Ads to measure traffic and attribute signups to advertising. You can opt out of Google Analytics with Google's browser add-on, and you can block analytics cookies in your browser without losing access to the report.7. Who we share data withWe do not sell personal data. We share it only with the providers below, each of which processes it on our instructions for a specific purpose:

Supabase — Account creation, sign-in and session tokens. Receives: Email address, hashed credentials, authentication metadata.

Stripe — Subscription checkout and billing portal. Receives: Email, billing details and payment method — card numbers never touch our servers.

Vercel — Website hosting and delivery. Receives: IP address and request metadata in standard server logs.

Google Analytics 4 and Google Ads — Traffic measurement and advertising attribution. Receives: Pseudonymous usage events, device and approximate location.

Microsoft Clarity — Session replay and heatmaps, to see where the report flow confuses people. Receives: Recordings of your interaction with the page — clicks, scrolls and mouse movement.

Google Places — Matching your business to its public listing. Receives: The business name and city you enter.

We will also disclose data where we are legally required to, or where it is necessary to investigate abuse of the service. If the business is ever sold or merged, data would transfer with it, and we would say so here first.8. Why we are allowed to process it

Contract — to give you the report and the account you asked for.

Legitimate interest — to keep the service working, prevent abuse, and understand how it is used.

Consent — for marketing email and non-essential cookies. You can withdraw it at any time.

Legal obligation — tax and accounting records for paid subscriptions.

9. How long we keep it

Report results — cached for about 24 hours so a repeat check does not re-run, then retained against your account so you can compare over time.

Account data — for as long as the account is open, and up to 24 months after the last sign-in, then deleted.

Billing records — as long as tax law requires, typically six to seven years.

Server and analytics logs — up to 14 months.

Ask us to delete sooner and we will, except where we are legally required to keep a billing record.10. Your rightsWherever you live, you can ask us to do all of the following, free of charge, by emailing support@jarvisreport.com. We answer within 30 days.

Access — get a copy of what we hold about you.

Correction — fix anything inaccurate.

Deletion — have it erased.

Portability — receive it in a machine-readable format.

Objection — object to processing based on legitimate interest, including profiling.

Restriction — have us pause processing while a dispute is resolved.

Withdraw consent — at any time, without affecting what happened before.

If you are in the UK or EEA and think we have got it wrong, you can complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right above.11. International transfersWe are based in the United States and our providers are largely US based, so data about visitors outside the US is transferred there. Where required, those transfers rely on Standard Contractual Clauses or an equivalent approved mechanism in the provider's own data processing terms.12. SecurityTraffic is encrypted in transit. Passwords are stored hashed, never in plain text. Card details never reach our servers. Access to production data is limited to people who need it.No service can promise perfect security, and we will not pretend otherwise. If a breach affects your data, we will tell you and the relevant regulator as the law requires.13. ChildrenJarvis Report is a tool for businesses and is not directed at anyone under 16. We do not knowingly collect their data. If you believe a child has given us information, email support@jarvisreport.com and we will delete it.14. Changes to this policyWe update the date at the top when this changes. If a change materially affects your rights, we will give notice by email or in the product before it takes effect, rather than quietly editing the page.15. ContactQuestions, requests or complaints: support@jarvisreport.com. We read everything sent there.

Acceptable Use Policy

Questions: support@jarvisreport.com.