Privacy policy

Who is responsible

Procurato Legal UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany, is responsible for this processing. Registered with Amtsgericht Charlottenburg under HRB 270181. Contact us at info@golongtail.ai for privacy questions or requests.

Information we process

• Submitted content: website and competitor URLs, product descriptions, audience details, facts, research inputs, and any other information you choose to provide.
• Page-review evidence: public page text, screenshots, technical measurements, generated recommendations, implementation briefs, verification results, and before-and-after comparisons.
• Account and connection information: account identity and email, authentication records, authorized OAuth clients, scopes, tokens, and service activity needed to operate authenticated features.
• Technical information: request time, IP address, browser and device information, requested URLs, errors, and usage records used to deliver, protect, and troubleshoot the service.
• Correspondence: your email, message, and contact or company details you supply when requesting help or a demo.

Submit public pages you are entitled to analyze. Do not put passwords, access tokens, confidential documents, or sensitive personal information into research inputs or page reviews.

How we use information

We use these records to run requested analyses, save and retrieve results, manage accounts and connections, respond to support requests, prevent abuse, and diagnose failures. Where the GDPR applies, providing requested services and handling pre-contract enquiries rely on Article 6(1)(b). Security, troubleshooting, and ordinary business correspondence rely on our legitimate interests under Article 6(1)(f). Required business records are retained under Article 6(1)(c). Where consent is the applicable basis, you can withdraw it for future processing.

Automated scores and recommendations evaluate pages. They are not decisions producing legal or similarly significant effects about individuals.

AI, measurement, and infrastructure providers

Page review sends relevant page text, screenshots, and submitted context to Google Gemini for AI analysis. Other research features may use Google, OpenAI, or Mistral models and search or keyword providers such as DataForSEO and Exa. Depending on the configured model, requests may pass through Vercel AI Gateway. The requested page domain is sent to ora.ai for AI-readiness measurements; Lighthouse measurements run in our service infrastructure.

Vercel provides hosting, workflow execution, and file storage; Prisma/PostgreSQL supports account and service records. Resend delivers emails to our email inbox. These providers receive the information needed for their part of the service. Provider processing and retention depend on the service configuration and applicable provider terms; this policy does not promise that every third-party AI service has identical retention or training rules.

When you use ChatGPT, Claude, or another MCP client, that host processes your conversation under its own terms and privacy policy. GoLongtail receives tool arguments and returns results, rather than receiving your entire chat automatically. Returned results become part of your conversation with that host. Disconnecting a client stops future authorized access but does not erase past conversations or stored GoLongtail reports.

Reports, sharing, and retention

Page-review links are shareable: anyone who obtains a review link may be able to read its results and artifacts. Treat the link as information you choose to share. Changes to a review require the relevant browser credential or authenticated authorization.

We retain account records while needed to provide the account and keep saved analyses available while needed for the service. There is no automatic short-lived expiry promised for saved page reviews. Support messages are kept as needed to resolve enquiries and follow-up. Security and diagnostic records are kept as needed to investigate incidents and operate the service. Legal obligations and the establishment or defence of legal claims may require longer retention.

To request deletion, email info@golongtail.ai with your account email or review link. We may need to verify your authority. Deletion from our service cannot remove copies already exported, shared, or held by your chat provider.

Website analytics and browser storage

The marketing website uses Vercel Web Analytics and a Google Ads tag. These services receive website usage and technical information; Google advertising services may use cookies or other identifiers according to your browser and Google settings. Authenticated features use browser storage or cookies for sign-in and security. Some application features may record product usage through PostHog. These public privacy, terms, and support pages do not load our marketing analytics or advertising scripts.

You can manage cookies and site storage in your browser and advertising preferences in your Google account. Blocking authentication storage may prevent sign-in. The local text-redaction tool processes pasted text on your device; model/runtime downloads still contact their hosting providers.

International processing

Our providers may process information outside the European Economic Area, including in the United States. Applicable transfer arrangements depend on the provider and service used. Contact us for details of the safeguards relevant to your use, or to request a copy of applicable safeguards. Provider notices include Google, OpenAI, Vercel, and Resend.

Your rights

Subject to applicable law, you can request access, correction, deletion, restriction, or portability of personal data. You can object to processing based on legitimate interests, and withdraw consent where processing relies on it. Email info@golongtail.ai. You may complain to a data protection authority, including the authority where you live or work; see the European Data Protection Board’s list of authorities.

Changes

We update this page when our practices change and revise the date above. Material changes will be communicated where required by applicable law.