Privacy Policy

Comly AI (“Comly”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website at trycomly.com and our AI visibility audit platform (collectively, the “Service”).

By using the Service you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Information you provide

• Account data — email address and password when you sign up.
• Brand profile — company name, website URL, category, competitors, and use-case descriptions you enter to configure an audit.
• Payment information — billing details processed securely through our payment provider (Stripe). We do not store full card numbers.

Information collected automatically

• Usage data — pages visited, features used, audit runs initiated, timestamps, and click interactions.
• Device & log data — IP address, browser type, operating system, and referring URLs.
• Cookies — session cookies required for authentication and preference cookies to remember your settings. See Section 6 for details.

Information from third parties

• Website content — when you submit a URL for an audit, we fetch publicly available content from that website to generate your AI visibility report.
• AI model responses — we send audit prompts to third-party AI APIs (OpenAI, Google Gemini) and store their responses as part of your audit results.

2. How We Use Your Information

• To create and manage your account and provide the Service.
• To run AI visibility audits and return results to you.
• To send transactional emails (audit completion, account notices, billing receipts).
• To improve the accuracy and features of the Service through aggregate analysis.
• To prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your brand profile data to train third-party AI models.

3. How We Share Your Information

We share information only in the following limited circumstances:

• Service providers — Supabase (database & auth), Stripe (payments), Firecrawl (web scraping), OpenAI and Google (AI inference). Each is contractually bound to use data only to provide services to us.
• Legal requirements — if required by law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• With your consent — for any other purpose with your explicit consent.

4. Data Retention

We retain your account data for as long as your account is active. Audit results are retained for 12 months from the date of the audit unless you delete them earlier. You may request deletion of your account and associated data at any time by emailing rayanebenchaalal@gmail.com.

5. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable steps to protect your data.

6. Cookies

We use the following types of cookies:

• Strictly necessary — session and authentication tokens required for the Service to function.
• Functional — remember your preferences (e.g. sidebar state, active filters).
• Analytics — aggregate, anonymised usage statistics to help us improve the product.

You can disable non-essential cookies in your browser settings. Doing so may affect certain features of the Service.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at rayanebenchaalal@gmail.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If we become aware we have collected such data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us at: