Privacy Policy

Privacy Policy

AIShown · Last updated: April 2026

Who we are

AIShown is an AI Presence Management service operated from Portugal.

Data controller:
AIShown — Beta · [email protected]
Lisbon, Portugal

Contact for data protection matters: [email protected]

What data we collect

When you run a free audit: the name, handle, platform, website, niche, and description you enter in the form; your IP address (for rate limiting only — not stored permanently).

When you create an account: your email address, brand inputs, goal selection, and language preference.

When you subscribe: payment information is collected and processed by Stripe. We do not store credit card numbers or financial data. We receive only a Stripe customer ID and subscription status.

When our pipeline generates your report: AI-generated content (identity analysis, authority audit, articles, schema markup, tasks, social content), search data from Brave Search about your public web presence, and token usage metadata.

What we do NOT collect: advertising cookies or tracking pixels; data from your social media accounts via APIs; your private messages, analytics dashboards, or follower lists.

Cookies: one Supabase authentication token (strictly necessary to keep you signed in), and Cloudflare security cookies (__cf_bm) for bot protection. No analytics, advertising, or non-essential cookies.

Why we collect it (lawful basis)

Under the Regulamento Geral sobre a Proteção de Dados (RGPD / Regulation (EU) 2016/679), as implemented in Portugal by Lei n.º 58/2019 of 8 August:

Contract performance (Article 6(1)(b) RGPD): we process your data to deliver the service — generating your AIShown Score, reports, content, and tasks.

Legitimate interest (Article 6(1)(f) RGPD): for free audits and rate limiting. Our legitimate interest does not override your fundamental rights — you can object at any time.

We do not process data for marketing purposes. If we introduce marketing emails in the future, we will obtain your explicit consent first.

Where your data is stored

Your data is stored in the European Union. Database: Supabase, Paris, France (EU region). Email: Resend, for transactional messages. Website: Cloudflare, with EU processing where possible.

Third-party processors

ServiceRoleData sharedLocation
SupabaseDatabase and authenticationEmail, brand inputs, reports, tasksParis, France (EU)
Anthropic (Claude API)AI report generationBrand inputs, web search context (no email)US — SCCs
Brave SearchWeb search for public dataBrand name, handle, niche (no email)US — SCCs
StripePayment processingEmail, subscription dataUS, with EU processing
ResendTransactional emailEmail address, email contentUS — SCCs
CloudflareHosting, CDN, securityIP address, request dataGlobal, EU processing

US transfers are governed by standard contractual clauses (SCCs) included in each processor's data processing agreement, as required by RGPD Chapter V. When generating your report, we send brand inputs and public web search results to Anthropic — but not your email address. See anthropic.com/privacy for details.

How long we keep your data

Your rights under RGPD

Contact [email protected] to exercise any of these rights. We will respond within 30 days.

Data protection authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with Portugal's national data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º — 1200-651 Lisboa, Portugal
Tel: (+351) 213 928 400 · www.cnpd.pt

Children and minors

AIShown is a professional service for creators and brands, not directed at anyone under 18. Under Lei n.º 58/2019, Article 16, we do not knowingly collect data from minors. Contact [email protected] if you believe we have.

Changes to this policy

If we make material changes, we will notify you by email at least 30 days before the changes take effect.

Contact

Email: [email protected]

This Privacy Policy is governed by Portuguese law, the Regulamento Geral sobre a Proteção de Dados (RGPD / Regulation (EU) 2016/679), and Lei n.º 58/2019 of 8 August.

Help us improve — share your feedback