Privacy Policy

PeakPick (peakpick.ai) shows companies how AI assistants find, describe and recommend them. It is operated by Mondas Ltd., the controller of the personal data described here. For anything about your data, email hello@peakpick.ai.

You sign in to PeakPick with your Sebtember account; signing up creates one if you don’t have it yet. That account, and the files you keep in sebtember.app, are covered by Sebtember’s privacy policy.

• Your account. When you sign in with Google through Sebtember, we receive your name, email address, whether that address is verified, your account ID and a link to your profile photo. We keep your name, email address, account ID and when you last signed in with your PeakPick profile. The photo link is kept only in your session cookie.
• Your preferences. The country your new projects start with, your preferred language, which kinds of email you want, and, if you said yes to PeakPick news, when and where you said it.
• Your organization. Its name, and its members’ email addresses and roles.
• What you tell us about your company. Its name, website, description, markets, languages, products and competitors, and the questions, reviews and decisions you make in PeakPick.
• Your public website. Our crawler, PeakPickBot, reads up to 20 public pages of your company’s website (in Pro, up to 150 pages and 20 PDF files it links to), respecting its robots.txt, and we keep a copy of the pages it reads, and of the robots.txt, to tell you whether AI assistants may read the site.
• Accounts you connect, in Pro. If you connect your company’s Facebook Page, Instagram professional account, LinkedIn company page, Google Business Profile or Bing Webmaster Tools, PeakPick reads, and only reads: the latest 20 posts and the about text; the profile’s services, service area, hours and reviews with your replies; which of your website’s pages Bing has found. It never posts, replies or changes anything. We keep what it found (counts, what it added to your profile, the pages Bing hasn’t found) and the sign-in, encrypted, until you press Disconnect on More details, delete the project, or remove PeakPick in that account’s settings. Disconnecting deletes the sign-in and asks the provider to forget PeakPick’s access where it offers that.
• Your files, through Sebtember. If you link Sebtember catalogues, PeakPick searches them with a read-only key limited to those catalogues, and keeps the passages it quotes as evidence. The files themselves stay in Sebtember.
• AI questions and answers. The buyer questions we generate or you add, the AI assistants’ answers and the sources they cite, and our analysis of them: mentions, recommendations, claims and findings.
• Usage records. Which operations ran, when, what they cost and whose Sebtember tokens paid for them, so we can apply limits and charge the right balance.
• Technical logs. Our hosting providers log requests, such as the IP address, time and page, to run and protect the service.

• To provide PeakPick: signing you in, running your organization, asking the buyer questions, analysing the answers and showing you what to fix. This is necessary to perform our contract with you.
• To email you: when your profile or a check is ready, what a refresh found and news from it (a fix that worked, a new wrong claim, a competitor that passed you), a monthly report, and reminders before a scheduled check or when a step waits for you, with the switches on your Profile; and about your account. News only if you say yes. Every email but the account ones has a link that stops its kind.
• To run the checks you schedule: on the day you set, or weekly or monthly, paid from the tokens of whoever set it. This is part of our contract with you; you can change or stop it on What to do.
• To keep it secure and working: preventing abuse, fixing faults and enforcing plan limits. This is in our legitimate interest in running a safe, reliable service.
• To bill usage and keep required records, as part of our contract with you and to meet our legal obligations.

We don’t sell personal data, and we don’t use it for advertising or to profile you.

To do its job, PeakPick sends data to OpenAI, and to Google when you ask Gemini:

• buyer questions, which can name your company and products, sent to OpenAI’s API with web search to get the answers you see, or, in Pro, to Google’s Gemini on Vertex AI with Google Search;
• your website’s text and your company details, to work out what your company offers, and in Pro, the posts, about texts and reviews of the accounts you connect;
• AI answers for analysis and, for claim checks, the relevant passages from the catalogues you linked.

Some of these calls go through Vercel’s AI Gateway, which routes them to OpenAI. Under OpenAI’s business terms, data sent to its API isn’t used to train its models; OpenAI may keep it for a limited time to monitor abuse. Google doesn’t use data sent to Gemini on Vertex AI to train its models either. Nor do we.

These providers process personal data for us, on our instructions and under data-protection terms:

Google Cloud

Database, file storage, background jobs and secrets (Firestore, Cloud Storage, Cloud Run, Cloud Tasks, Secret Manager), and Gemini on Vertex AI when you ask Gemini in Pro.EU: Belgium and the Netherlands; Gemini: Google’s global network

Vercel

Hosts the website and the app, and runs the AI Gateway that routes some model calls to OpenAI.App servers in Frankfurt, Germany; pages served worldwide

Resend

Sends PeakPick’s emails: about your projects, as you choose, and about your account.EU: Ireland

OpenAI

Answers buyer questions with web search, and analyses answers, websites and claims.United States

Sebtember

Your sign-in (with Google, through Firebase Authentication), your token balance, which PeakPick charges for the work you start, and searching the catalogues you link.See Sebtember’s privacy policy

PeakPick’s database, stored files and background jobs run in Google Cloud’s EU regions. OpenAI and Vercel are US companies, so some data is processed outside the EU and the UK. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We set two cookies, both for signing in. pp_session is a secure, HTTP-only cookie that keeps you signed in for up to 5 days. pp_signed_in holds no personal data: it only tells the home page you’re signed in, so “Continue with Google” takes you straight to the app. While you sign in, Google’s sign-in window and Firebase Authentication briefly store sign-in data in your browser; PeakPick clears it as soon as your session is set up. Your colour theme is saved in your browser’s local storage, and never sent to us.

We don’t use analytics cookies, advertising pixels or any other tracking. Because we use only strictly necessary cookies, there is no cookie banner.

• Account and organization data: for as long as your account exists.
• Company data (questions, runs, answers, stored pages, findings): until you delete the company. PeakPick keeps every run so you can see how things change over time. Deleting a company deletes all of this.
• Usage records: for as long as we need them for billing and to meet our legal record-keeping obligations.
• The sign-in cookies: 5 days, or until you sign out.

You can delete your PeakPick account yourself, on your Profile page. To delete only an organization, or for anything else, email hello@peakpick.ai.

Depending on where you live, including under the EU and UK GDPR, you can ask to access, correct, delete or export your personal data, and to restrict or object to how we use it. Email hello@peakpick.ai; we answer within one month. You can also complain to your local data protection authority.

PeakPick is a business service. It isn’t meant for children under 16, and we don’t knowingly collect their data.

When we change this policy, we update this page and the date at the top. We tell signed-in users about significant changes in the app.