Last updated: 24 August 2026
Owlorai ("Owlorai," "we," "us," or "our") provides a software platform that tracks and analyzes how AI answer engines (such as Claude, Gemini, ChatGPT, and Perplexity) represent brands. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.
This policy applies to visitors to owlorai.com and to customers and authorised users of the Owlorai platform (together, "you").
Owlorai is currently operated by Dr. Nora Luu and Dr. Huy Nguyen, based in Brighton, United Kingdom. We are the data controller for the personal data described in this policy unless stated otherwise. If you have questions about this policy or how we handle your data, contact us at hello@owlorai.com.
Owlorai is a business-to-business (B2B) product. Our service is sold to and used by marketing, compliance, and communications teams at businesses ("Customers"), not offered directly to individual consumers. The personal data we collect is mostly limited to the business contacts who sign up for, administer, or use the platform on a Customer's behalf ("Users"), plus ordinary website-visitor data.
Account and contact information: name, work email address, company name, job role, and password (stored in hashed form) when you or your organisation registers for an account.
Usage data: information generated by your use of the platform, including the brand(s), competitors, and prompts you configure for tracking, the AI-generated results produced by the service, alerts you view or dismiss, and general interaction data (pages visited, features used, timestamps).
Billing information: if you subscribe to a paid plan, billing details (such as name, billing address, and payment card information) are collected and processed by our payment provider on our behalf. We do not store your full payment card details ourselves. We retain a record of your subscription plan, billing cycle, and payment history (amounts and dates, not card details) for account administration and legal/accounting purposes.
Connected third-party data: if you choose to connect a third-party account to the platform (for example, Google Analytics 4 for Referral Attribution), we access and process only the data you authorise us to access, solely to provide that connected feature.
Technical and device data: IP address, browser type, device type, and general location (derived from IP address) collected automatically when you use our website or platform, including via cookies and similar technologies (see Section 9).
Communications: records of correspondence if you contact us for support or sales.
We do not intentionally collect any special category data (as defined under UK GDPR, e.g. data about health, religion, or political opinions) and ask that you do not submit such data to the platform.
We use the data described above to:
Legal basis (UK GDPR):we rely on performance of a contract (providing the service you've signed up for), our legitimate interests (operating, securing, and improving the platform; direct marketing to existing business contacts), consent (where required, e.g. non-essential cookies or marketing to new contacts), and legal obligation (e.g. tax and accounting records).
Core to the service, the prompts and brand/competitor names you configure are sent to third-party AI providers to generate the tracking results you see. Depending on which engines you enable, this may include Anthropic (Claude), Google (Gemini), OpenAI (ChatGPT), and/or Perplexity (Sonar). These providers act as data processors on our behalf when handling this content, under their own data processing terms, which include appropriate safeguards for international data transfers (such as UK/EU Standard Contractual Clauses) where applicable. We do not send special category personal data to these providers, and you agree not to configure prompts containing personal data about identifiable individuals unless you have a lawful basis to do so.
Results returned by AI engines are third-party, AI-generated content. We do not control, and cannot guarantee, their accuracy — see the AI Accuracy Disclaimer in our Terms of Service.
We share personal data with the following categories of recipients, only as needed to run the service:
We do not sell personal data, and we do not share your Customer Data (the brand/competitor/prompt configurations and results specific to your account) with other customers. We may use aggregated, anonymised data derived from platform usage (which cannot identify you or your organisation) for analysis, benchmarking, and product improvement, as described in our Terms of Service.
Some of the providers listed in Section 6 are based outside the UK, including in the United States. Where we transfer personal data outside the UK, we rely on appropriate safeguards recognised under UK GDPR. Each of our AI providers (Anthropic, Google, OpenAI, and Perplexity) incorporates the UK International Data Transfer Addendum to the EU Standard Contractual Clauses into its data processing terms with us, covering transfers of the data these providers process on our behalf.
We retain personal data for as long as your account is active, and for a limited period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically: account and usage data is retained for 30 days after account closure, after which it is deleted or anonymised; billing and financial records are retained for 6 years from the end of the relevant tax year, in line with HMRC's record-keeping recommendation for sole traders (the statutory minimum is 5 years after the 31 January filing deadline, but 6 years is the commonly recommended safer margin); and usage logs not tied to billing are retained 6 months. You can request earlier deletion of your personal data as described in Section 10, subject to any legal retention requirements.
We use cookies and similar technologies on owlorai.com and the platform for the following purposes:
You can control cookies through your browser settings, or at any time via . Blocking strictly necessary cookies may prevent parts of the platform from working.
If you are located in the UK or EEA, you have the right to:
To exercise any of these rights, contact us at hello@owlorai.com. We will respond within the timeframes required by law (generally one month).
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level security at the database layer (Supabase RLS). No system is completely secure, and we cannot guarantee absolute security of data transmitted to or from the platform.
Owlorai is a B2B platform not directed at, or intended for use by, individuals under 18. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above, and for material changes, notify Customers by email or in-app notice.
Questions, requests, or complaints about this policy or how we handle your data can be sent to:
Owlorai
Brighton, United Kingdom
hello@owlorai.com
We use cookies to run Owlorai and, with your permission, to understand how the site is used. You can accept all, reject everything but the essentials, or choose exactly what's on.
