Compliance FAQ

Do I need a cookie consent banner for AI Search Index?

No. AI Search Index does not use cookies. The tracking pixel operates without storing any data on the user's device, so cookie consent is not required under GDPR, ePrivacy Directive, or similar regulations.

Do I need to mention AI Search Index in my privacy policy?

Recommended but often not required. Since we focus on bot detection rather than tracking individual users, and we don't collect personally identifiable information, many privacy policies won't need to specifically mention us. However, for transparency, you may want to mention that you use bot analytics.

Do you store IP addresses?

For bots only. For human visitors, we derive the country/region and then discard the IP address. For confirmed bot visits (via CDN integrations), we may temporarily store IP addresses for verification purposes, as bot IPs are not considered personal data.

Is AI Search Index collecting personal data?

No. We don't collect names, email addresses, or other personally identifiable information. Our focus is on aggregated bot traffic analytics, not individual user tracking.

Where is my data stored?

European Union. All data is processed and stored in EU data centers. We do not transfer data outside the European Economic Area.

Do you offer a Data Processing Agreement (DPA)?

Yes. We provide DPAs for customers who need them for GDPR compliance. Contact us at support to request one.

What subprocessors do you use?

We use a minimal number of subprocessors, all EU-based or with appropriate data protection safeguards. Our current subprocessors include:

• • Hetzner (EU hosting)
• • Supabase (database, EU region)
• • Vercel (CDN/hosting, with DPA)

Is AI Search Index HIPAA compliant?

Since AI Search Index doesn't collect protected health information (PHI), HIPAA typically doesn't apply. However, if you have specific HIPAA requirements, please contact us to discuss your use case.

Are you SOC 2 certified?

We're currently working towards SOC 2 compliance. Enterprise customers can request our security documentation. Contact us for more information.

Can I request data deletion?

Yes. You can delete your data at any time from your account settings. For complete account deletion, contact support. We process deletion requests within 30 days as required by GDPR.