[{"data":1,"prerenderedAt":655},["ShallowReactive",2],{"legal-privacy":3},{"id":4,"title":5,"body":6,"description":646,"effective":647,"extension":648,"meta":649,"navigation":650,"path":651,"seo":652,"stem":653,"__hash__":654},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":7,"value":8,"toc":617},"minimark",[9,14,18,27,31,36,59,63,71,75,80,83,87,119,123,128,132,137,141,158,162,167,171,179,183,206,209,213,216,300,303,307,317,323,334,342,345,354,358,414,423,427,438,441,467,471,541,547,551,554,558,561,578,584,587,591,594,598,601,605,608,612],[10,11,13],"h2",{"id":12},"_1-who-we-are","1. Who we are",[15,16,17],"p",{},"Shruwd (shruwd.io) is operated by Lemon Tree Ventures, LLC (\"we\", \"us\"), 1111B S Governors Ave STE 55103, Dover, DE 19904, USA. This policy explains what personal information we collect when you use our website, dashboard, API, SDK or MCP server (together, \"the Service\"), what we do with it, and your choices.",[15,19,20,21,26],{},"Questions or requests: ",[22,23,25],"a",{"href":24},"mailto:info@shruwd.io","info@shruwd.io",".",[10,28,30],{"id":29},"_2-what-we-collect","2. What we collect",[32,33,35],"h3",{"id":34},"your-account","Your account",[37,38,39,47,53],"ul",{},[40,41,42,46],"li",{},[43,44,45],"strong",{},"Sign-up details:"," your name, email address and password. Passwords are handled by Firebase Authentication; we never see or store them.",[40,48,49,52],{},[43,50,51],{},"Google sign-in:"," if you sign in with Google, we receive your name, email address and profile photo. See section 5.",[40,54,55,58],{},[43,56,57],{},"Profile photo",", if you upload one.",[32,60,62],{"id":61},"your-workspace-and-team","Your workspace and team",[37,64,65,68],{},[40,66,67],{},"The name, email address and role of each member of your workspace, and the email address of each person invited.",[40,69,70],{},"A record of who changed what on a finding (for example, who marked a fix applied).",[32,72,74],{"id":73},"what-you-set-up","What you set up",[37,76,77],{},[40,78,79],{},"Brand names and domains, the prompts (questions) you track, competitor names, aliases and domains, and notes you add to findings.",[15,81,82],{},"Prompts are sent to our data provider as questions to AI search engines (section 4). Do not put personal information in them.",[32,84,86],{"id":85},"what-the-service-collects-for-you","What the Service collects for you",[37,88,89,95,101,107,113],{},[40,90,91,94],{},[43,92,93],{},"AI answers."," For your prompts, we collect the answers Google AI Overviews and ChatGPT give, through a third-party data provider, and record which brands they name and which sources they cite.",[40,96,97,100],{},[43,98,99],{},"Your public site."," We fetch your robots.txt, sitemap and public pages to check whether AI crawlers can reach them, and public third-party pages that AI answers cite, to compare them with yours.",[40,102,103,106],{},[43,104,105],{},"Crawler logs",", if you connect a log drain. We accept log lines from your server or CDN and keep only those whose user agent identifies an AI crawler. For each, we store the crawler, your host and path, the response status and size, the time, and whether the request was verified. The requester's IP address is used to verify the crawler against its operator's published addresses and is not stored. Lines from ordinary visitors are discarded on receipt.",[40,108,109,112],{},[43,110,111],{},"Search Console data",", if you connect it. See section 5.",[40,114,115,118],{},[43,116,117],{},"Setup suggestions."," If you ask for them, we read your brand's homepage and send a summary of it to Anthropic's Claude API, which drafts prompts and competitors for you to review. The draft is kept with your brand.",[32,120,122],{"id":121},"billing","Billing",[37,124,125],{},[40,126,127],{},"Payments are handled by Stripe. We receive your customer ID, plan, subscription status and billing email, never your card details.",[32,129,131],{"id":130},"email","Email",[37,133,134],{},[40,135,136],{},"We send account emails (verification, password reset), service notices (such as payment or log-drain problems, recheck results and access problems found on your site), team invitations, and a weekly digest you can unsubscribe from at any time. Resend delivers them and keeps delivery records.",[32,138,140],{"id":139},"the-free-scan-and-the-contact-form","The free scan and the contact form",[37,142,143,149,155],{},[40,144,145,148],{},[43,146,147],{},"Free scan:"," the domain you enter. We fetch that site's robots.txt and homepage, keep the result in memory for ten minutes and store nothing.",[40,150,151,154],{},[43,152,153],{},"Contact form:"," your name, email address and message.",[40,156,157],{},"Both forms use Cloudflare Turnstile, which processes technical signals such as your IP address and browser details to tell people from bots.",[32,159,161],{"id":160},"api-use","API use",[37,163,164],{},[40,165,166],{},"API keys, stored only as a hash, and counts of requests made with each key.",[32,168,170],{"id":169},"usage-data","Usage data",[37,172,173,176],{},[40,174,175],{},"We use Google Analytics on the website and dashboard to understand how they are used: pages viewed, device and browser type, approximate location derived from your IP address, and similar events.",[40,177,178],{},"Our hosting providers log requests (IP address, browser, time) for security and operations.",[10,180,182],{"id":181},"_3-how-we-use-it","3. How we use it",[37,184,185,188,191,194,197,200,203],{},[40,186,187],{},"To provide the Service: measure how your brand appears in AI answers, check your site and crawler logs, diagnose problems, recommend fixes and recheck them.",[40,189,190],{},"To run your account, workspace and team, and to bill you.",[40,192,193],{},"To send the emails described above.",[40,195,196],{},"To keep the Service secure and prevent abuse, including rate limits and bot checks.",[40,198,199],{},"To support you when you contact us.",[40,201,202],{},"To understand how the Service is used and improve it.",[40,204,205],{},"To comply with the law.",[15,207,208],{},"We do not sell your personal information, and we do not use it for advertising.",[10,210,212],{"id":211},"_4-who-processes-it","4. Who processes it",[15,214,215],{},"We share information only with the providers that run the Service for us, only what each task needs, and only for that task:",[217,218,219,232],"table",{},[220,221,222],"thead",{},[223,224,225,229],"tr",{},[226,227,228],"th",{},"Provider",[226,230,231],{},"What for",[233,234,235,244,252,260,268,276,284,292],"tbody",{},[223,236,237,241],{},[238,239,240],"td",{},"Google (Firebase Authentication, Cloud Firestore, Cloud Storage, App Hosting)",[238,242,243],{},"Sign-in, user records, profile photos, hosting the website",[223,245,246,249],{},[238,247,248],{},"Google Analytics",[238,250,251],{},"Usage analytics",[223,253,254,257],{},[238,255,256],{},"Supabase",[238,258,259],{},"The database for workspaces, brands, measurements and findings",[223,261,262,265],{},[238,263,264],{},"Cloudflare",[238,266,267],{},"Background processing, crawler-log intake, storage of collected AI answers, Search Console tokens, bot checks (Turnstile)",[223,269,270,273],{},[238,271,272],{},"DataForSEO",[238,274,275],{},"Collecting AI answers for your prompts",[223,277,278,281],{},[238,279,280],{},"Anthropic",[238,282,283],{},"Drafting setup suggestions from your homepage",[223,285,286,289],{},[238,287,288],{},"Stripe",[238,290,291],{},"Payments",[223,293,294,297],{},[238,295,296],{},"Resend",[238,298,299],{},"Sending email",[15,301,302],{},"We may also disclose information when the law requires it, to protect our rights, users or the public, in connection with a merger, acquisition or sale of assets, or with your consent.",[10,304,306],{"id":305},"_5-google-user-data","5. Google user data",[15,308,309,310,316],{},"Shruwd's use and transfer of information received from Google APIs adheres to the ",[22,311,315],{"href":312,"rel":313},"https:\u002F\u002Fdevelopers.google.com\u002Fterms\u002Fapi-services-user-data-policy",[314],"nofollow","Google API Services User Data Policy",", including the Limited Use requirements.",[15,318,319,322],{},[43,320,321],{},"Google sign-in."," We receive your name, email address and profile photo, and use them only to create your account, sign you in and contact you about your account.",[15,324,325,328,329,333],{},[43,326,327],{},"Search Console (optional)."," When a workspace admin connects Search Console for a brand, we request read-only access (",[330,331,332],"code",{},"webmasters.readonly","). We use it to:",[37,335,336,339],{},[40,337,338],{},"list the Search Console properties you can access, to find the one matching the brand's domain;",[40,340,341],{},"read that property's clicks and impressions per page over the last 30 days.",[15,343,344],{},"We use this data only to show search demand beside the brand's AI visibility and to decide which pages matter when we diagnose problems. We do not use it for advertising, we do not sell or transfer it except to the providers listed in section 4 to operate the Service, and we do not use it to train AI or machine-learning models. No person at Shruwd reads it, except with your permission, for security, to comply with the law, or in aggregated form for internal operations.",[15,346,347,348,353],{},"The access token Google issues is stored in our Cloudflare infrastructure and used only by our background jobs. Disconnecting Search Console in the brand's settings deletes the token and revokes our access. You can also revoke it at any time from your ",[22,349,352],{"href":350,"rel":351},"https:\u002F\u002Fmyaccount.google.com\u002Fpermissions",[314],"Google Account permissions",". Figures already read stay with the brand until you ask us to delete them or close your account and request erasure (section 8).",[10,355,357],{"id":356},"_6-cookies-and-browser-storage","6. Cookies and browser storage",[217,359,360,373],{},[220,361,362],{},[223,363,364,367,370],{},[226,365,366],{},"What",[226,368,369],{},"Set by",[226,371,372],{},"Purpose",[233,374,375,388,404],{},[223,376,377,382,385],{},[238,378,379],{},[330,380,381],{},"__session",[238,383,384],{},"Shruwd",[238,386,387],{},"Keeps you signed in. Essential.",[223,389,390,399,401],{},[238,391,392,395,396],{},[330,393,394],{},"_ga",", ",[330,397,398],{},"_ga_*",[238,400,248],{},[238,402,403],{},"Measures how the site and dashboard are used",[223,405,406,409,411],{},[238,407,408],{},"Browser storage",[238,410,384],{},[238,412,413],{},"Remembers preferences such as the colour theme and notices you dismissed",[15,415,416,417,422],{},"Stripe's checkout and billing pages are hosted by Stripe and covered by its own policy. You can block or delete cookies in your browser; without the session cookie you cannot stay signed in. Google offers an ",[22,418,421],{"href":419,"rel":420},"https:\u002F\u002Ftools.google.com\u002Fdlpage\u002Fgaoptout",[314],"opt-out add-on"," for Google Analytics.",[10,424,426],{"id":425},"_7-our-role-and-legal-bases","7. Our role and legal bases",[15,428,429,430,433,434,437],{},"We are the ",[43,431,432],{},"controller"," of the personal information about you as a user of the Service. For crawler logs and other data you send us about your own site, we act as your ",[43,435,436],{},"processor",": you decide what to send, and we process it only to provide the Service to you. A data processing agreement is available on request.",[15,439,440],{},"If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:",[37,442,443,449,455,461],{},[40,444,445,448],{},[43,446,447],{},"Contract:"," to provide the Service you signed up for.",[40,450,451,454],{},[43,452,453],{},"Legitimate interests:"," security, preventing abuse, understanding and improving the Service, and supporting you, where these are not overridden by your interests and rights.",[40,456,457,460],{},[43,458,459],{},"Legal obligation:"," for example, tax records.",[40,462,463,466],{},[43,464,465],{},"Consent:"," where we ask for it, which you can withdraw at any time.",[10,468,470],{"id":469},"_8-how-long-we-keep-it","8. How long we keep it",[217,472,473,483],{},[220,474,475],{},[223,476,477,480],{},[226,478,479],{},"Data",[226,481,482],{},"Kept",[233,484,485,493,501,509,517,525,533],{},[223,486,487,490],{},[238,488,489],{},"Account and profile",[238,491,492],{},"Until you delete your account",[223,494,495,498],{},[238,496,497],{},"Workspace data (brands, prompts, competitors, measurements, findings)",[238,499,500],{},"While your account is open",[223,502,503,506],{},[238,504,505],{},"Collected AI answers, in raw form",[238,507,508],{},"90 days",[223,510,511,514],{},[238,512,513],{},"Crawler detail per page",[238,515,516],{},"90 days; daily totals per crawler while your account is open",[223,518,519,522],{},[238,520,521],{},"Search Console figures",[238,523,524],{},"Until you ask us to delete them or close your account and request erasure",[223,526,527,530],{},[238,528,529],{},"Billing records",[238,531,532],{},"As long as tax and accounting law requires",[223,534,535,538],{},[238,536,537],{},"Feedback you give when closing your account",[238,539,540],{},"Kept to improve Shruwd",[15,542,543,544,546],{},"Deleting your account deletes your sign-in and profile, revokes your API keys, cancels any subscription and stops all measurement at once. To have your workspace's stored data erased as well, email ",[22,545,25],{"href":24}," and we will do it within 30 days.",[10,548,550],{"id":549},"_9-security","9. Security",[15,552,553],{},"We protect your information with encryption in transit (HTTPS), database rules that keep every workspace's data separate, hashed API keys and tokens, and access limited to the people who need it. No system is perfectly secure, and we cannot guarantee absolute security.",[10,555,557],{"id":556},"_10-your-rights","10. Your rights",[15,559,560],{},"Depending on where you live, you can ask us to:",[37,562,563,566,569,572,575],{},[40,564,565],{},"give you a copy of your personal information, in a portable format;",[40,567,568],{},"correct it;",[40,570,571],{},"delete it;",[40,573,574],{},"restrict or object to how we use it;",[40,576,577],{},"withdraw consent you gave.",[15,579,580,581,583],{},"You can change your profile, unsubscribe from the digest and delete your account in the dashboard. For anything else, email ",[22,582,25],{"href":24},"; we answer within 30 days. If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.",[15,585,586],{},"California and other US state residents: we do not sell personal information or share it for targeted advertising, and we will not treat you differently for exercising your rights.",[10,588,590],{"id":589},"_11-international-transfers","11. International transfers",[15,592,593],{},"We are based in the United States, and our providers process data in the United States and wherever they operate. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses for transfers out of the EEA, the UK and Switzerland.",[10,595,597],{"id":596},"_12-children","12. Children",[15,599,600],{},"The Service is for businesses and is not directed at anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.",[10,602,604],{"id":603},"_13-changes","13. Changes",[15,606,607],{},"We may update this policy. When we do, we change the effective date above, and if the change is material we tell account owners by email before it takes effect.",[10,609,611],{"id":610},"_14-contact","14. Contact",[15,613,614,615,26],{},"Lemon Tree Ventures, LLC, 1111B S Governors Ave STE 55103, Dover, DE 19904, USA. Email: ",[22,616,25],{"href":24},{"title":618,"searchDepth":619,"depth":619,"links":620},"",3,[621,623,634,635,636,637,638,639,640,641,642,643,644,645],{"id":12,"depth":622,"text":13},2,{"id":29,"depth":622,"text":30,"children":624},[625,626,627,628,629,630,631,632,633],{"id":34,"depth":619,"text":35},{"id":61,"depth":619,"text":62},{"id":73,"depth":619,"text":74},{"id":85,"depth":619,"text":86},{"id":121,"depth":619,"text":122},{"id":130,"depth":619,"text":131},{"id":139,"depth":619,"text":140},{"id":160,"depth":619,"text":161},{"id":169,"depth":619,"text":170},{"id":181,"depth":622,"text":182},{"id":211,"depth":622,"text":212},{"id":305,"depth":622,"text":306},{"id":356,"depth":622,"text":357},{"id":425,"depth":622,"text":426},{"id":469,"depth":622,"text":470},{"id":549,"depth":622,"text":550},{"id":556,"depth":622,"text":557},{"id":589,"depth":622,"text":590},{"id":596,"depth":622,"text":597},{"id":603,"depth":622,"text":604},{"id":610,"depth":622,"text":611},"What Shruwd collects, why, who processes it, how long it is kept, and how to have it corrected or deleted.","2026-09-19","md",{},true,"\u002Flegal\u002Fprivacy",{"title":5,"description":646},"legal\u002Fprivacy","9bY6PEFYwpqj3iW8gi6nf1ABfiFrRT_CKnJKWfUj5sg",1790003437298]