What we collect, and what we do with it

Last updated 14 September 2026

aiSaysWhat makes one-off reports on how AI assistants describe a business. This page explains what we collect when you use the site, who we send it to, how long we keep it, and how to ask us to remove it. It is written in plain terms because there is not much to it: no accounts, no cookies, no advertising.

What we collect

What you type on the order form. The business name, its category, its website, the country or region, competitors, other names the business goes by, any custom questions you add, and a name for the order if you give one. We store all of it with the order, because the report is built from it and a delivered report has to say what was asked.

Your IP address. It is stored with the order and used to limit how many reports one address can start in an hour, which is how we keep the form from being used to run up our bills. Our host also keeps ordinary server logs, which include addresses and the pages requested.

Google Analytics, if you accept it. We use Google Analytics to see which pages are visited and how people reach the site. It runs only after you accept the banner, and it sets cookies only then. If you decline, or never answer, nothing is loaded and nothing is sent to Google. Your choice is remembered in your browser; clearing the site’s data asks again. Google’s handling of what it collects is described in its own privacy policy, and you can also block it with Google’s browser add-on. We do not use it for advertising.

Nothing else. The site loads nothing from advertising or other tracking services.

How we use it

To build the report you ordered: the questions are written from the business name, category and competitors you gave.
To screen what is submitted. Every free-text field is checked for abuse before an order is accepted, and an order that cannot be screened is refused.
To limit abuse of the form, as above.
To fix problems. If a report fails, the order record is how we find out why.

We do not sell what you submit, and we do not use it to advertise to you.

Who receives it

A report is made by asking other companies’ services questions built from what you typed. Those services receive the business name, its category, and the competitors you named, inside the questions we ask:

The AI assistants: OpenAI (ChatGPT), Google (Gemini), Anthropic (Claude) and Perplexity. Each is asked the same questions and each answer is stored with the report.
Screening: OpenAI’s moderation service reads every free-text field before an order is accepted, with Google as a fallback when OpenAI cannot answer.
Search and lookups: SerpAPI, for Google’s results and AI Overviews; Brave Search; Wikidata and Wikimedia, to find a business’s own website and logo; and icon services from DuckDuckGo, Google and logo.dev, to fetch a site’s icon. The business’s own website may be fetched to confirm it is the right one.
Hosting: the site and its files run on Railway. Reports may be copied to a separate backup store so they are not lost.
Analytics: Google, through Google Analytics, but only once you have accepted the banner — see above.

Each of those companies handles what it receives under its own terms. None of them is given your IP address by us.

How long we keep it

Reports and orders are kept for 6 months from the order, then the report file and its working data are deleted. The order record is kept so the link can say the report expired rather than fail without explanation.
Working caches that are shared between reports — AI judgements of answers, site icons, and which website belongs to which business — are kept for up to a year.
Server logs are kept by our host on its own schedule.

Your report link

A finished report lives at a private link. It is not listed anywhere and is marked not to be indexed by search engines, but anyone you give the link to can open it. If you want a link withdrawn, ask and we will take it down; the report itself stays until the retention window ends unless you ask for that too.

Your rights

You can ask what we hold about an order, ask for it to be corrected, or ask for it to be deleted, and we will do it. If you are in the EU or UK, we process what you submit because you asked for the report, and the address and screening on our legitimate interest in keeping the form from being abused. You can complain to your data protection authority if you think we have handled something wrongly.

Children

The site is for businesses and is not meant for anyone under 16.

Contact

Write to support@aisayswhat.com.

Changes

When the site changes what it collects or who it sends it to, this page changes with it, and the date at the top moves.