Privacy Policy

Scope

Beyond Search is primarily a business-to-business service intended for companies, founders, professionals, marketing teams, technology companies, SaaS businesses, AI companies, fintech companies, and other organizations seeking to understand or improve their visibility across AI-powered search and discovery systems.

Our services are not directed toward children or individuals under 18. We do not knowingly solicit personal information from children.

This Privacy Policy applies to information processed through our website, consultations, audits, communications, and services.

Where Beyond Search processes personal information on behalf of a client as part of a specific engagement, the parties' respective roles and responsibilities may depend on the nature of that engagement and the applicable agreement between Beyond Search and the client.

Information We Collect

We collect information that is reasonably necessary to operate our business, communicate with prospective and existing clients, provide services, perform AI visibility analysis, conduct research, and maintain our systems.

Information You Provide

Depending on how you interact with us, this may include:

• Name
• Email address
• Phone number
• Company or organization name
• Job title or professional role
• Website URLs
• Business and project information
• Information provided when requesting an audit or consultation
• Meeting information and notes
• Billing and payment information
• Files you voluntarily upload
• Screenshots you voluntarily provide
• AI-search queries or prompts submitted as part of an engagement
• Competitor URLs
• Other business or technical information you voluntarily provide

Please avoid submitting passwords, payment-card credentials, government identification documents, health information, financial-account credentials, or other highly sensitive personal information unless we specifically request it for a legitimate purpose.

Information from Public and Third-Party Sources

As part of our AI visibility and technical analysis services, we may obtain information from publicly accessible sources, including:

• Public websites
• Search engines
• Public documentation
• Public company information
• Public product information
• Public competitor information
• AI search systems
• Generative AI systems
• Other publicly accessible digital sources

We may crawl, retrieve, transform, compare, or analyze publicly accessible website content and related information when performing research or providing our services.

Technical and Analytics Information

Beyond Search does not intentionally request or use IP addresses, browser fingerprints, or detailed device identifiers as part of its core customer-data collection.

However, hosting, CDN, infrastructure, security, analytics, and other technical providers may automatically process certain technical information when a visitor accesses our website.

We may also receive approximate geographic information through analytics or other technical services.

The specific technical information processed may depend on the configuration and operation of our website and third-party infrastructure.

How We Use Information

We may use information to:

• Respond to inquiries
• Communicate with prospective and existing clients
• Schedule and conduct consultations
• Provide AI visibility audits
• Analyze AI search visibility
• Analyze how AI systems discover, interpret, retrieve, compare, and represent information
• Conduct prompt experiments and model evaluations
• Conduct competitor and market analysis
• Crawl and analyze publicly accessible websites
• Transform raw information into structured information
• Generate reports, benchmarks, recommendations, and technical findings
• Evaluate agent and workflow behavior
• Measure visibility, share of voice, workflow success, and related metrics
• Improve our services and research methodologies
• Maintain, troubleshoot, and secure our systems
• Detect and prevent fraud, abuse, unauthorized activity, and security incidents
• Process payments and maintain appropriate financial records
• Comply with applicable legal obligations
• Establish, exercise, or defend legal rights
• Protect the security and integrity of our services

We do not intentionally use personal information for purposes materially incompatible with those described in this Privacy Policy without providing additional notice where required by applicable law.

AI Processing

AI systems are an integral part of Beyond Search's research and service workflow.

Depending on the service being provided, information may be processed through third-party AI services, including:

• OpenAI
• Anthropic
• Google AI / Gemini
• Perplexity

This processing may be used to:

• Analyze website or business information
• Evaluate AI search visibility
• Conduct prompt experiments
• Compare AI-generated results
• Generate analysis or summaries
• Transform raw information into structured outputs
• Evaluate model and agent behavior
• Support research and technical recommendations

Website and business information

Where necessary for an engagement, raw website content, publicly available information, URLs, screenshots, prompts, search results, or other business information may be provided to an AI provider for analysis.

This means that information submitted to Beyond Search may, depending on the service, be processed through one or more third-party AI systems.

We aim to provide AI systems with only the information reasonably necessary for the relevant task.

Beyond Search does not intentionally submit sensitive personal information to AI providers as part of its ordinary AI visibility workflow.

However, information supplied by a client may itself contain personal information. Clients should therefore avoid providing sensitive personal information unless it is necessary for the engagement and appropriate safeguards have been established.

Third-party AI providers may process information according to their own terms, privacy policies, security practices, and applicable contractual arrangements.

Beyond Search does not control the independent privacy practices of these providers.

Website Crawling, Search and Competitive Analysis

A core part of Beyond Search's services involves researching how companies, products, and information appear across AI-powered search and discovery systems.

For this purpose, we may:

• Crawl publicly accessible websites
• Retrieve publicly available information
• Query search engines and AI systems
• Analyze AI-generated responses
• Compare companies and products
• Analyze competitor visibility
• Process website and competitor URLs
• Analyze search and AI queries
• Conduct repeated prompt experiments
• Measure visibility and related performance metrics
• Transform research results into structured datasets and reports

Publicly accessible information may therefore be collected and processed even when it was not directly submitted to Beyond Search by the person or organization to whom the information relates.

Retrieving or analyzing publicly accessible information does not mean Beyond Search claims ownership of third-party content.

Service Providers

Beyond Search uses third-party services to operate its business and provide its services.

Depending on the service and configuration, these may include:

Business and Communication Services

• Google Workspace and Gmail
• Google Sheets and Google Docs
• Calendly
• Notion
• GitHub
• Discord

Infrastructure and Hosting

• Vercel
• Cloudflare
• Supabase
• Other infrastructure, database, storage, CDN, and hosting services used to operate our systems

AI and Research Services

• OpenAI
• Anthropic
• Google AI / Gemini
• Perplexity

These providers may process information as part of providing their services to Beyond Search or, depending on the service, may process information independently under their own terms and privacy policies.

Our technology providers may change as our business develops.

Where a material change affects how personal information is processed, we may update this Privacy Policy or provide additional notice where required by applicable law.

Calendly and Consultations

Beyond Search uses Calendly to schedule consultations and strategy calls.

When you schedule a meeting through Calendly, we may receive information such as:

• Name
• Email address
• Scheduling information

Additional information may be voluntarily provided during the consultation, including:

• Business requirements
• Project information
• Technical information
• Questions
• Meeting notes
• Other information relevant to the proposed engagement

Consultation and scheduling information may be stored in our business systems, including Google Workspace and related documents.

Calendly's own privacy practices may also apply to information processed through its platform.

Analytics and Similar Technologies

Beyond Search does not intentionally deploy cookies for advertising or behavioral tracking on its website.

We do not currently use session recording or session replay.

We may use Google Search Console and other technical measurement tools to understand search performance, website performance, traffic sources, and the effectiveness of our services.

Certain infrastructure or third-party services may use technical mechanisms necessary to provide their services.

Because third-party configurations can change over time, the presence and behavior of such mechanisms may depend on the current implementation of our website and service providers.

We do not sell personal information through cookies or similar technologies.

If our use of analytics, cookies, advertising technologies, or similar tracking technologies materially changes, we will update this Privacy Policy and implement any consent or choice mechanisms required by applicable law.

Payments and Billing

At present, Beyond Search primarily receives payments through direct bank transfers.

Beyond Search does not intentionally store full payment-card numbers, CVV numbers, passwords, or other payment credentials.

We may retain information reasonably necessary to document transactions, including:

• Client or payer name
• Transaction information
• Payment amount
• Invoice information
• Bank-transfer references
• Billing information
• Records necessary for accounting, tax, dispute resolution, or legal compliance

As our business develops, we may use third-party payment processors or payment gateways.

If such services are introduced, payment information may be processed by those providers in accordance with their own privacy policies, terms, and applicable legal requirements.

How We Share Information

We do not sell, rent, or trade personal information for monetary consideration.

We may disclose or provide access to information where reasonably necessary for:

Service Providers

Hosting, infrastructure, AI processing, scheduling, communications, storage, analytics, security, and other operational services.

Professional Advisers

Lawyers, accountants, auditors, consultants, insurers, or other professional advisers where reasonably necessary.

Legal Requirements

Where disclosure is required by applicable law, regulation, court order, legal process, governmental request, or other lawful authority.

Security and Protection

Where reasonably necessary to detect, investigate, prevent, or respond to fraud, abuse, security incidents, unauthorized activity, or threats to our systems, clients, users, or other persons.

Business Transactions

If Beyond Search undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

With Your Direction

Where you request or authorize us to share information.

We do not authorize service providers to use information obtained from Beyond Search for purposes unrelated to the services they provide to us, except where permitted by applicable law or separately authorized.

International Processing

Beyond Search serves businesses globally and may use service providers located in countries other than the country where information was originally collected.

Information may therefore be processed in India, the United States, Europe, Asia-Pacific, or other jurisdictions depending on the location of our service providers and infrastructure.

Where applicable law requires safeguards for international transfers, we intend to use legally recognized transfer mechanisms or other lawful safeguards appropriate to the relevant transfer.

The actual locations of processing may change as our service providers and infrastructure evolve.

Data Retention

We do not retain information indefinitely.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining business records, resolving disputes, preventing fraud and abuse, maintaining security, complying with legal obligations, and enforcing agreements.

Retention periods may vary depending on the type and nature of information.

Leads and Inquiries

Lead and inquiry information may be retained while it is reasonably useful for communication, sales, business development, or follow-up, after which it may be deleted or anonymized.

Client Project Information

Client information may be retained during an engagement and for a reasonable period afterward where necessary for service continuity, documentation, dispute resolution, security, or legitimate business records.

Audit Reports

Audit reports and related project information may be retained for as long as reasonably necessary to provide the service, support future work, maintain business records, or resolve disputes.

Website Crawl and Research Data

Crawled website content, search results, competitor information, and related research data may be retained for as long as reasonably necessary for the relevant audit, analysis, research, quality assurance, or business purpose.

AI Prompts and Results

AI prompts, generated responses, evaluation data, and structured outputs may be retained for as long as reasonably necessary for service delivery, quality assurance, debugging, research, documentation, or legitimate business purposes.

Emails and Communications

Business communications may be retained for as long as reasonably necessary for operational, contractual, legal, or business-record purposes.

Billing Records

Financial and billing records may be retained for periods required by applicable accounting, tax, financial, or legal requirements.

Security and Server Logs

Technical and security logs may be retained for as long as reasonably necessary for security monitoring, troubleshooting, fraud prevention, abuse prevention, and incident investigation.

When information is no longer reasonably required, we may delete, anonymize, aggregate, or otherwise dispose of it securely, subject to technical limitations and applicable legal obligations.

Data Security

We take reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, misuse, or destruction.

Depending on the system involved, these measures may include access controls, authentication controls, restricted administrative access, secure communications, infrastructure protections, backups where appropriate, and system monitoring.

However, no method of transmission, storage, or electronic processing is completely secure.

Accordingly, we cannot guarantee absolute security or guarantee that unauthorized parties will never defeat our security measures.

If we become aware of a security incident affecting personal information, we will assess and respond to it in accordance with applicable law and our incident-response procedures, including providing notifications where legally required.

Your Privacy Rights

Depending on your location and the laws applicable to your information, you may have rights relating to your personal information.

These may include, where applicable:

• Accessing personal information
• Requesting correction of inaccurate information
• Requesting deletion or erasure
• Requesting information about processing
• Objecting to certain processing
• Restricting certain processing
• Requesting portability of information
• Withdrawing consent where processing is based on consent
• Exercising other rights provided by applicable privacy laws

These rights are subject to applicable legal limitations and exceptions.

To submit a privacy request, contact:

We may need to verify the identity or authority of a person making a request before disclosing, modifying, or deleting information.

We aim to respond to valid requests within the periods required by applicable law.

India — Digital Personal Data Protection Framework

Where applicable, Beyond Search processes digital personal data in accordance with India's applicable data-protection requirements, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent applicable and in accordance with their respective commencement and implementation requirements.

We aim to process personal data for specified purposes and to provide appropriate information regarding the personal data being processed and the purposes for which it is processed.

Individuals may contact our Privacy Contact regarding questions or requests relating to personal-data processing.

The application of particular obligations, rights, mechanisms, and enforcement provisions may depend on the relevant provisions having commenced and on the circumstances of the processing.

European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies to our processing, Beyond Search will process personal information in accordance with applicable requirements.

Depending on the circumstances, processing may be based on an applicable legal basis such as:

• Performance of a contract or steps taken at your request before entering into a contract
• Compliance with a legal obligation
• Legitimate interests, where those interests are not overridden by applicable rights and freedoms
• Consent, where consent is required or relied upon

Where we rely on consent, you may withdraw that consent where permitted by applicable law.

Where GDPR or UK GDPR applies, individuals may have additional rights including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a competent supervisory authority.

Where Beyond Search processes personal information on behalf of a client, the parties may establish appropriate contractual arrangements governing that processing where required by applicable law.

International transfers will be handled using mechanisms permitted under applicable law.

United States and California

Beyond Search is primarily a B2B service and does not specifically target California consumers.

Where US state privacy laws apply to Beyond Search, we will comply with applicable obligations.

We do not sell personal information for monetary consideration.

We do not intentionally provide personal information to third parties for cross-context behavioral advertising.

Where applicable law provides rights such as access, correction, deletion, portability, or the ability to opt out of certain forms of processing, individuals may contact us at:

The applicability of specific US privacy laws may depend on factors including the nature and volume of information processed, revenue, geographic activity, and other statutory requirements.

We may update this section as our business, customer base, processing activities, and applicable US privacy laws develop.

Sensitive Personal Information

Beyond Search does not intentionally seek sensitive personal information as part of its ordinary AI visibility services.

Please do not provide sensitive personal information unless it is reasonably necessary for the service and we have specifically requested or authorized you to provide it.

If sensitive information is inadvertently submitted, we may delete or restrict its processing where reasonably appropriate and legally permitted.

Nothing in this section limits any rights or obligations arising under applicable law.

Third-Party Websites and Services

Our website and services may contain links to third-party websites, platforms, AI systems, scheduling services, or other resources.

We are not responsible for the privacy practices, security, content, or policies of third-party services that we do not control.

You should review the privacy policies of third-party services before providing them with personal information.

AI and Search Output Limitations

Beyond Search analyzes AI-generated and search-generated information as part of its services.

AI and search systems are dynamic and probabilistic. Their outputs may vary based on factors including:

• Model version
• Query wording
• Location
• Language
• User context
• Account configuration
• Search history
• Available source material
• Indexing changes
• Model updates
• System configuration
• Time of the query

Accordingly, AI-generated responses, rankings, recommendations, visibility measurements, competitive comparisons, and related outputs may change and may contain inaccuracies, omissions, or inconsistencies.

Beyond Search's analyses and reports are intended as research, diagnostic, and strategic information and should not be treated as guarantees of how a third-party AI system or search engine will behave in the future.

Additional limitations, warranties, disclaimers, liability provisions, and client responsibilities are governed by our applicable Terms of Service or client agreement.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services
• Our technology
• Our business operations
• Third-party providers
• Applicable laws
• Data-processing practices
• Security practices

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

Where required by applicable law, we may provide additional notice or obtain consent for material changes.