Privacy Policy

The Beyond Search is a business-to-business service. We help companies, founders, and marketing and technology teams understand and improve how their brands appear in AI-powered search and discovery, through visibility audits, generative search optimization, technical analysis, prompt experimentation, and agent and workflow evaluation.

Our services are not directed at children, and we do not knowingly collect personal information from anyone under the age of 18.

This policy applies to information processed through our website, consultations, audits, communications, and services. When we process personal data on behalf of a client during an engagement, our respective roles and responsibilities may depend on the nature of that engagement and the agreement between The Beyond Search and the client.

In the course of operating our business and delivering services, we collect information that is reasonably necessary to communicate with clients, perform AI visibility analysis, and keep our systems secure.

Information you provide (Depending on how you interact with us, this may include):

• Name
• Email address
• Phone number
• Company or organization name
• Job title or professional role
• Website URLs
• Business and project information
• Details provided when requesting an audit or consultation
• Meeting information and notes
• Billing and payment information
• Files you choose to upload
• Screenshots you choose to provide
• AI-search queries or prompts submitted as part of an engagement
• Competitor URLs
• Other business or technical information you voluntarily provide

Please avoid sending passwords, payment-card credentials, government identification documents, health information, financial-account credentials, or other highly sensitive personal information unless we have specifically requested it for a legitimate purpose. We do not intentionally seek sensitive personal information, and if it is submitted inadvertently, we may delete or restrict its processing.

We use information for purposes that are directly related to our services, including:

• Responding to inquiries and communicating with prospective and existing clients
• Scheduling and conducting consultations
• Providing AI visibility audits and analysis
• Analyzing how AI systems discover, interpret, retrieve, compare, and represent information
• Conducting prompt experiments and model evaluations
• Performing competitor and market analysis
• Crawling and analyzing publicly accessible websites
• Transforming raw information into structured findings, reports, benchmarks, and recommendations
• Evaluating agent and workflow behavior
• Measuring visibility, share of voice, workflow success, and related metrics
• Improving our services and research methodologies
• Maintaining, troubleshooting, and securing our systems
• Detecting and preventing fraud, abuse, and unauthorized activity
• Processing payments and maintaining financial records
• Complying with legal obligations and defending our rights

We do not use personal information for purposes that are materially incompatible with those described above, and we will provide notice where the law requires it.

Our work involves researching how companies and products appear across AI-powered search and discovery systems. For this, we may collect information from publicly accessible sources, including public websites, search engines, public documentation and company information, competitor sites, AI search systems, and generative AI systems.

We may crawl, retrieve, transform, compare, or analyze publicly accessible content when performing research or providing services. Publicly accessible information may be processed even when it was not submitted to us directly, and retrieving or analyzing it does not mean we claim ownership of any third-party content.

We do not intentionally collect IP addresses, browser fingerprints, or detailed device identifiers as part of our core customer data. Hosting, CDN, infrastructure, security, and analytics providers may, however, process technical information automatically when a visitor accesses our website, and we may receive approximate geographic information through analytics. The specific technical data processed depends on how our website and third-party infrastructure are configured.

AI systems are part of our research and service workflow. Depending on the service, information may be processed through third-party AI providers, including OpenAI, Anthropic, Google AI / Gemini, and Perplexity. This processing is typically used to:

• Analyze website or business information
• Evaluate AI search visibility
• Conduct prompt experiments and compare AI-generated results
• Generate analysis or summaries
• Transform raw information into structured outputs
• Evaluate model and agent behavior
• Support research and technical recommendations

Where an engagement requires it, raw website content, publicly available information, URLs, screenshots, prompts, and search results may be shared with an AI provider for analysis. We aim to provide only the information reasonably necessary for the task.

We do not intentionally submit sensitive personal information to AI providers. Information supplied by a client may itself contain personal data, so please avoid sharing sensitive information unless it is necessary for the engagement and appropriate safeguards are in place. AI providers operate under their own terms, privacy policies, and security practices, and we do not control their independent practices.

Output limitations:

AI and search systems are dynamic and probabilistic. Their outputs can vary with model version, query wording, location, and other factors, and may contain inaccuracies, omissions, or inconsistencies. Our analyses and reports are research and diagnostic tools, not guarantees of how any AI system or search engine will behave in the future.

We do not sell, rent, or trade personal information for monetary consideration.

We may share information where reasonably necessary for:

• Service providers - hosting, infrastructure, AI processing, scheduling, communications, storage, analytics, and security.
• Professional advisers - lawyers, accountants, auditors, consultants, and insurers, where reasonably necessary.
• Legal and security reasons - where required by law, regulation, court order, or legal process, or to detect, investigate, prevent, or respond to fraud, abuse, security incidents, or threats.
• Business transactions - if The Beyond Search undergoes a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.
• With your direction - where you request or authorize us to share information.

Service providers may process information on our behalf or independently under their own terms and privacy policies. We do not authorize them to use information for purposes unrelated to the services they provide to us, except where permitted by law.

We primarily receive payments through direct bank transfers and do not store full payment-card numbers, CVV codes, passwords, or other payment credentials. We may retain the information needed to document a transaction, including client or payer name, amounts, invoices, and bank-transfer references, for accounting, tax, dispute resolution, or legal compliance.

If we introduce third-party payment processors in the future, payment information will be handled under their terms and privacy policies.

We serve businesses globally and may use service providers located in countries other than where information was originally collected, including India, the United States, Europe, and Asia-Pacific. Where applicable law requires protections for international transfers, we intend to use legally recognized mechanisms or other lawful safeguards. The locations where processing happens may change as our providers and infrastructure evolve.

We do not retain information indefinitely. We keep information for as long as reasonably necessary to provide services, maintain business records, resolve disputes, prevent fraud, maintain security, comply with legal obligations, and enforce agreements. How long information is kept depends on its type:

• Leads and inquiries - kept while reasonably useful for communication, sales, or follow-up, then deleted or anonymized.
• Client projects and audit reports - kept during an engagement and for a reasonable period afterward where needed for service continuity, documentation, dispute resolution, or business records.
• Crawled and research data - websites, search results, competitor information, AI prompts, and outputs, kept as long as reasonably necessary for the relevant audit, analysis, research, or quality assurance.
• Emails and billing records - kept for operational, contractual, and legally required periods.
• Security and server logs - kept as long as reasonably necessary for monitoring, troubleshooting, and incident investigation.

When information is no longer reasonably required, we delete, anonymize, aggregate, or securely dispose of it, subject to technical limitations and legal obligations.

We take reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, misuse, or destruction. These may include access and authentication controls, restricted administrative access, secure communications, infrastructure protections, backups, and system monitoring.

No method of transmission, storage, or electronic processing is completely secure, and we cannot guarantee that unauthorized parties will never defeat our measures. If we learn of a security incident affecting personal information, we will assess and respond to it in line with applicable law and our incident-response procedures.

Depending on where you live and the law that applies to you, you may have rights over your personal information. Where applicable, these may include:

• Accessing your personal information
• Correcting inaccurate information
• Deleting or erasing information
• Receiving information about how we process it
• Objecting to or restricting certain processing
• Porting information to another provider
• Withdrawing consent where processing is based on consent
• Exercising other rights provided by applicable privacy laws

These rights are subject to legal limitations. To make a privacy request, email thebeyondsearch@gmail.com. We may need to verify your identity first, and we aim to respond within the periods the law requires.

India: To the extent India's Digital Personal Data Protection Act, 2023 and related rules apply, we process personal data for specified purposes and provide information about what is processed and why. Individuals can contact our Privacy Contact with questions or requests.

European Economic Area and United Kingdom: Where the GDPR or UK GDPR applies, we process personal information on a lawful basis such as contract performance, compliance with a legal obligation, legitimate interests, or consent. Where we rely on consent, you may withdraw it. Data subjects may have additional rights, including access, rectification, erasure, restriction, objection, and portability, and the right to complain to a supervisory authority.

United States and California: The Beyond Search is primarily a B2B service and does not target California consumers. Where US state privacy laws apply, we comply with them. We do not sell personal information and do not share it for cross-context behavioral advertising.

We do not deploy cookies for advertising or behavioral tracking, and we do not currently use session recording or replay. We may use Google Search Console and similar technical measurement tools to understand search performance, traffic, and the effectiveness of our services, and certain infrastructure providers may use technical mechanisms necessary to their services.

See our Cookie Policy for details on the cookies and similar technologies we use and how to manage them. If our use of cookies or tracking technologies materially changes, we will update this policy and implement any consent or choice mechanisms the law requires.

Our website and services may link to third-party websites, platforms, AI systems, and scheduling services. We are not responsible for their privacy practices or security, and we encourage you to review their policies before sharing personal information.

We may update this policy as our services, technology, or legal requirements change. When we do, we will update the last updated date at the top of this page, and where the law requires, we will provide additional notice or obtain consent for material changes.

For privacy questions, data-rights requests, or concerns, contact our Privacy Contact at thebeyondsearch@gmail.com.

Please use the subject line "Privacy Request" where possible, and include enough information for us to understand and act on your request. The Beyond Search does not currently maintain a separate statutory Data Protection Officer.