Privacy Policy
Last updated: October 2025
Entity: SharePath AI, Inc. (Delaware C Corp)
Address: 2500 2nd Street, Unit 401, Long Beach, California, USA
Contact: dev@sharepath.ai
1. Who We Are
SharePath AI is a Software-as-a-Service (SaaS) company that helps marketing and SEO teams build and automate AI-powered workflows and measure their performance across large language models (LLMs).
We act as a data controller under GDPR/UK GDPR and as a business under the California Privacy Rights Act (CPRA).
If you have any questions, contact us at dev@sharepath.ai.
2. What Data We Collect
We may collect the following categories of data:
Account & Identity Data
- Name, email, password, company, role, workspace, billing contact, and plan details
- Used to create and manage your account, provide access, and send service-related notices
Usage & Activity Data
- Feature usage, clicks, pages viewed, timestamps, IP, browser type, and crash logs
- Used to improve performance, security, and product reliability
Content & Workflow Data
- Inputs, drafts, prompts, uploaded files, and task metadata (e.g., region, language)
- Used to generate and deliver workflow outputs to you
Analytics & Performance Data
- Aggregated SEO/LLM visibility data (citations, sentiment, share-of-voice)
- Used to generate reports and improve features
Payment & Billing Data
- Processed by our payment provider (we don't store full card details)
- We retain transaction IDs and invoices for accounting and compliance
Support & Communication Data
- Messages, support tickets, and feedback you send us
- Used to respond to your requests and improve customer support
Marketing & Website Data
- Analytics, cookies, and pixels to measure site traffic, user journeys, and marketing performance
- Used to understand and improve engagement with our website and emails
You can control cookies and marketing preferences anytime (see Section 9).
3. How We Use This Data
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:
- Provide and maintain the SharePath AI platform
- Secure accounts and prevent abuse
- Respond to inquiries and provide support
- Improve features and fix bugs
- Send product updates and marketing emails (if you opt in)
- Comply with legal obligations (tax, accounting, security)
We do not sell or share personal data for advertising or profiling as defined under the CPRA.
4. Legal Bases for Processing (EU/UK only)
Under GDPR Articles 6(1)(a–f):
| Purpose | Legal Basis |
|---|---|
| Account creation, billing, platform use | Contract (Art. 6(1)(b)) |
| Analytics and service improvement | Legitimate Interests (Art. 6(1)(f)) |
| Marketing emails | Consent (Art. 6(1)(a)) |
| Legal compliance (e.g., tax retention) | Legal Obligation (Art. 6(1)(c)) |
You can withdraw consent at any time by clicking "unsubscribe" or emailing dev@sharepath.ai.
Sources:
5. How Long We Keep Data
We retain data only as long as needed for the purposes above or as required by law:
- Account & identity data: up to 12 months after closure
- Workflow data: deleted or anonymized within 90 days of termination
- Analytics: 24 months (rolling)
- Billing: 7 years (tax law)
- Logs: 12 months
- Marketing: up to 13 months (based on cookie settings)
- Support records: 24 months
After these periods, data is deleted or anonymized.
6. Who We Share Data With
We may share your information in the following situations:
- Cloud hosting: Microsoft Azure (U.S.)
- AI infrastructure: OpenAI
- Payments: Stripe
- Analytics & session tools: Generic third-party analytics and tracking providers
All vendors are contractually bound to data protection and confidentiality standards and meet SOC 2 or ISO 27001-level controls.
7. International Data Transfers
We host data primarily in the U.S. (Microsoft Azure). When EU/UK data is transferred internationally, we rely on:
Azure also participates in the DPF and implements the SCCs.
8. Your Rights
Depending on where you live, you may have the right to:
- Access a copy of your personal data
- Request correction or deletion
- Object to certain processing (e.g., marketing)
- Request data portability
- Withdraw consent at any time
EU/UK users: You can exercise these rights by emailing dev@sharepath.ai. If unresolved, you can contact your national data protection authority (see EDPB list).
California residents: You may request access, correction, or deletion at dev@sharepath.ai and opt out of any data "sharing." Global Privacy Control (GPC) browser signals are honored. (References: CPRA ; CPPA regulations)
9. Cookies and Similar Technologies
We use functional, analytics, and advertising cookies to:
- Remember your preferences
- Measure website usage
- Improve performance
- Track aggregated campaign metrics
Non-essential cookies are only placed after consent (EU/UK users). You can manage your choices anytime through our Cookie Preferences panel. For details, see our separate Cookie Policy.
Guidance:
10. Security Practices
We use administrative, technical, and physical security measures to protect your personal information:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access control (RBAC) and MFA
- Continuous monitoring, backups, and audit logs
- Subprocessor security reviews aligned with SOC 2/ISO 27001
While we work to protect your data, no online system is 100% secure. If we detect a data breach affecting you, we'll notify you and relevant authorities within 72 hours (as required by GDPR Art. 33).
11. Children's Data
SharePath AI is not directed to or intended for use by children under 16. We do not knowingly collect children's data. If you believe a child's data has been submitted, please contact us for deletion.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When changes are significant, we'll notify users by email or in-app notice at least 7 days before they take effect. Continuing to use the platform after that means you accept the new version.
13. Contact Us
Email: dev@sharepath.ai
Address: SharePath AI, 2500 2nd Street, Unit 401, Long Beach, CA, USA
14. Regional Add-Ons
A. EU/UK Add-On
Representative: SharePath AI will appoint an EU/UK Article 27 representative before launch.
Complaints: You may contact your national data protection authority (see list).
Transfers: Conducted under DPF or SCCs + UK IDTA, as described above.
B. California Add-On (CPRA)
We do not sell or share personal data as defined by the CPRA.
You have the right to:
- Know what categories of data we collect
- Request deletion or correction
- Opt out of "sale" or "sharing" (not applicable)
“Do Not Sell or Share My Personal Information” requests may be sent to dev@sharepath.ai.
