Data handling, in plain language.
This policy covers igniteaihq.com and the IGNITE AI product. The short version: we collect what the scan and your account need, we keep audit evidence where the product can function, and we don't sell data or run ad trackers. Questions go to reports@igniteaihq.com.
What the free scan stores
When you run the free 16-check scan, the domain you submit is stored with its score and the structured result (issues, timestamps). Results are cached so returns to the same domain serve the stored report, and rate-limit windows (per IP) keep the public endpoint available for everyone. If you include an email address for email delivery, it is stored with your scan and used only to send the result and, where you opted in, the monitor you chose.
Accounts
- Accounts store your email, a salted password hash (never the password), and your organization membership.
- Sessions use an opaque, server-side token in an HttpOnly, SameSite=Strict cookie. Nothing of the session is stored in the browser.
- Password reset and signup verification use one-time codes with a short expiry, sent by email; codes expire and are throttled per address.
Audit content and providers
When you run a paid AI-visibility audit, the buyer-intent prompts and business facts you enter are forwarded to the AI providers you select (ChatGPT/OpenAI, Gemini, Perplexity, Grok/xAI, Claude/Anthropic) to produce real answers. Those calls cost money and are recorded with their original responses — that record is the product: the audit's evidence trail. Provider responses are stored with your audit so every reported point can be traced to the answer that earned it. Audit records are write-once: they cannot be silently edited or deleted by the application.
Cookies and tracking
igniteaihq.com sets one cookie: the session cookie for signed-in users. There are no advertising trackers, no third-party analytics beacons, and no cross-site ad pixels. The marketing pages render everything locally; the theme preference on tool pages lives in your browser's localStorage.
Payments
Subscriptions are processed by Stripe. Card numbers go straight to Stripe from your browser — IGNITE AI's servers see only the subscription status, never the card number or CVC.
Data retention
Scan results for the public tool are kept with their timestamps so historical scores stay comparable; accounts keep their audit history while the subscription is active. You can ask for an account's deletion at reports@igniteaihq.com — the account, its sessions, and its future deliveries are removed, while the write-once audit evidence remains as the record of what was measured (this immutability is a product guarantee, not an accident).
Who we are
IGNITE AI is a product of AIO Inc., Dallas–Fort Worth, Texas. Contact: the contact page.
Last updated: October 2026.