Privacy Policy

1. Introduction

Normal People Solutions, LLC (“we”, “our”, “us”) operates SourceRank (sourcerank.app), an AI Engine Optimization (AEO) platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring the security of your personal information. Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

Register for an account: Name, email address, password
Use OAuth authentication: Basic profile information from Google (name, email, profile picture)
Add domains: Domain names you want to monitor
Submit support requests: Contact information and issue details
Subscribe to paid plans: Payment information (processed by Stripe; we do not store credit card details)
Participate in surveys or feedback: Your responses and opinions

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

Usage Data: Pages visited, features used, time spent, interaction patterns
Device Information: Browser type and version, operating system, device type
Log Data: IP address, access times, referring URLs
Cookies and Tracking: Session tokens, authentication cookies, preferences

2.3 Information from Third Parties

We collect data from public sources and third-party services:

AI Engine Responses: Publicly available responses from ChatGPT, Perplexity, Claude, and other AI engines mentioning monitored domains
Technical Scans: Publicly accessible website data (meta tags, headers, performance metrics)
OAuth Providers: Profile information when you sign in with Google

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

Create and manage your account
Authenticate and authorize access
Monitor domains you specify
Perform technical scans and AI visibility checks
Generate reports and analytics
Provide customer support

3.2 Communication

Send service-related notifications (scan results, AI mentions, alerts)
Respond to your inquiries and support requests
Send important updates about the Service
Provide marketing communications (with your consent; you can opt out anytime)

3.3 Service Improvement

Analyze usage patterns and trends
Develop new features and enhancements
Improve service performance and reliability
Conduct research and create industry benchmarks (using anonymized data)

3.4 Security and Compliance

Detect and prevent fraud and abuse
Monitor for security threats
Enforce our Terms of Service
Comply with legal obligations

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

Amazon Web Services (AWS): Cloud hosting, database storage (DynamoDB), email service (SES)
Stripe: Payment processing
OpenRouter: AI engine API access
Google: OAuth authentication

These providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it.

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to:

Provide you with the Service
Comply with legal obligations
Resolve disputes and enforce agreements

Specifically:

Account Data: Retained while your account is active, plus 30 days after deletion
Scan Results: Retained for 90 days (configurable per your plan)
AI Mentions: Retained for 90 days
Email Logs: Retained indefinitely for compliance and support purposes
Billing Records: Retained for 7 years for tax and accounting purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

Encryption: Data in transit is encrypted using TLS/SSL; data at rest is encrypted using AWS encryption
Access Controls: Strict access controls and authentication requirements
Regular Audits: Security assessments and vulnerability testing
Secure Infrastructure: AWS infrastructure with industry-standard security practices
Employee Training: Regular security awareness training for our team

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

Request a copy of your personal information in a structured, commonly used format.

7.2 Correction

Request correction of inaccurate or incomplete information. You can update most information through your account settings.

7.3 Deletion

Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations).

7.4 Objection and Restriction

Object to or request restriction of processing of your personal information.

Withdraw consent for processing that is based on your consent (does not affect the lawfulness of processing before withdrawal).

7.6 Opt-Out of Marketing

Unsubscribe from marketing emails by clicking the “unsubscribe” link in any marketing email or updating your preferences in account settings.

To exercise these rights, please contact us at privacy@sourcerank.app. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Essential Cookies: Required for service functionality (authentication, session management)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Understand how users interact with our Service

You can control cookie settings through your browser. However, disabling certain cookies may limit your ability to use some features of the Service.

9. Children’s Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 18, we will delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We primarily use data centers in the United States (AWS US regions). When we transfer information internationally, we implement appropriate safeguards, including:

Standard contractual clauses approved by regulatory authorities
Ensuring service providers have adequate data protection measures
Compliance with applicable data transfer regulations

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to request deletion of your personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at privacy@sourcerank.app or call us at the contact information provided below.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Right of access, rectification, erasure, and data portability
Right to restrict or object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your personal information based on:

Contract: To provide the Service you requested
Legitimate Interests: To improve our Service, prevent fraud, and ensure security
Consent: For marketing communications and optional features
Legal Obligations: To comply with applicable laws

13. Third-Party Links

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties.

We encourage you to read the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected through our Service.

14. Do Not Track Signals

Some browsers have a “Do Not Track” feature that lets you tell websites you do not want to have your online activities tracked. We currently do not respond to Do Not Track signals.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on this page
Updating the “Last Updated” date
Sending an email notification to your registered email address
Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@sourcerank.app

We will respond to your inquiry within 30 days.