Privacy Policy

Who we are

Found Clearly is operated by SELFOIA SRL (VAT RO52628580), with registered office at Strada Gladiolelor 2, 040144 Bucharest, Romania. SELFOIA SRL is the controller of the personal data described here. Send questions through our contact page or by email (show the address).

What we collect

When you request a free AI visibility check

Your website, email, trade and city. With the request we also record which page and form you used, the page your visit started on, the page you first landed on and what brought you here: a referring site, an AI assistant such as ChatGPT or a campaign tag. We use your IP address to limit repeated submissions. To prepare the check, we review your public website and Google Business Profile listing.

When you request a strategy call

Your name, email, company, website, trade and city, and your answers about monthly revenue range, your role in the decision, budget, the problems you want to solve and how you heard about us. We use them only to prepare for your call. They don't go on a mailing list. The calendar on that page is provided by Calendly and loads inside a frame: the name, email and time you enter there go to Calendly, under its own privacy policy. The calendar's link also tells Calendly the plan you asked about and what brought you here (a referring site, an AI assistant or a campaign tag), never your name or email. Calendly then sends us the booking (your name, email, the time, your time zone, any answers you gave there and those tags) so we can prepare and spot a double booking. With the request we also record the page you first landed on and what brought you here: a referring site, an AI assistant or a campaign tag. After you book, your browser remembers for 7 days that a call was booked, when, and which plan you asked about (nothing you typed), so the page can point you to your reschedule link instead of a second booking.

When you ask for a free public website review

Your business name, website, trade, city and email, your consent to a public video, the words you agreed to and when. With the request we also record the page your visit started on and, if a link in an AI assistant such as ChatGPT brought you here, which assistant. We use your IP address to limit repeated submissions.

We then email you a link to confirm the request, and it counts only once you confirm. We record when you confirmed and whether your email address is on your website's domain. We review a site only for its owner: if your address isn't on that domain, we check that it's listed on your website or Google Business Profile before we record anything. A request you don't confirm is deleted when its link expires, after 7 days.

SELFOIA SRL, the controller named above, uses all this to decide whether to review your site, to email you before we record and once the video is live, and to keep a record of your consent. We don't send you a sales offer unless you ask for one, and your email doesn't go on a mailing list.

If we record a review, the video shows your public website and your business name, and we publish it on our YouTube channel and on this website. We blur the personal details of other people, such as customers in testimonials and the people who wrote your reviews, and other businesses that appear on screen. YouTube publishes the video under its own terms and privacy policy.

You can withdraw your consent at any time, before or after the video goes live, through our contact page or by email. We then take the video down from YouTube and from this website within 48 hours. Withdrawing doesn't change what was done with your consent before. If we don't record a review, we delete your request within 12 months. If we do, we keep it while the video is up and for 12 months after it comes down, as a record of your consent.

When you send a form or ask for our email address

Cloudflare Turnstile checks that a person, not a bot, is sending it. To decide, Cloudflare reads technical signals from your browser and your IP address, under its own privacy terms. We only get the result: pass or fail.

If you tick “Remember my answers on this device for 30 days” on our free check, strategy call, contact or report checkout form, your browser keeps what you enter in those forms for 30 days after you last change it (a contact message only until it is sent), so you don't have to type it again. One tick counts for all of these forms, including what you already typed in them on that page. Nothing is kept unless you tick it. The copy stays on your device, and unticking the box next to any of these forms deletes it for all of them. While you fill in the strategy call steps, the open tab keeps your answers so a reload doesn't lose them; that copy is gone when you close the tab. After you send the contact form, the open tab notes that it went out (not what you wrote) until you close the tab, so reloading the page doesn't delete a newer message you saved.

When you sign up for our weekly email

Your email, the page and block you signed up from, the page your visit started on and what brought you here (a referring site, an AI assistant or a campaign tag), and the wording you agreed to and when. We use your IP address to limit repeated submissions.

We use your email to send Who Gets Recommended, one email a week, and a welcome note when you join. Every email has an unsubscribe link. Unsubscribing from any of our emails also ends the weekly email, and asking for a free check, a call or a review never adds you to it.

If your address left the list or opted out of our emails before, a signup alone doesn't add it back: we email it one link to confirm, at most once a day, and add it only when you press the button on that page. If nobody does, the request is deleted after 7 days.

When you buy a report or a plan

Your contact and billing details (Stripe handles card payments; we never see your full card number), the email you sign in with, information about your business, and data we gather by crawling your public website. Where a report checks your Google Business Profile listing, that listing data comes from Google Maps Platform and is shown with the date it was retrieved. If you buy a report without an account, we set one up with the email you pay with, so you can find the report again.

When we email your business

We may email a business about its search visibility. Every email has an unsubscribe link, and we honor it.

Analytics and cookies

We use PostHog for product analytics: page views, clicks, and device and browser type. Once you sign in, PostHog links that activity to your account email. On our public pages, including the strategy call page, we use Microsoft Clarity for session replays and heatmaps so we can see where visitors get stuck. Clarity masks form input by default, and we don't run it on the customer portal, the admin console, or report and preview pages.

Visitors from the EEA, the UK and Switzerland are asked first. Until they say yes, PostHog counts visits without cookies or browser storage and Clarity sets no cookies. Elsewhere, both run in their normal mode with first-party cookies. We keep your choice in your browser's local storage. Signing in uses a strictly necessary session cookie. Where analytics runs in its normal mode, your browser also keeps a note of the page your first visit started on and what brought you here for 30 days; it reaches us only if you send a form or book a call (through Calendly, as above), and saying no deletes it.

How we use it, and on what legal basis

• Answering a free-check or call request and following up on it: steps you asked us to take before a possible contract.
• A free public website review on video: your consent, which you can withdraw at any time. Keeping a record of that consent after a video comes down: our legitimate interest in being able to show that you agreed.
• Who Gets Recommended, our weekly email: your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Delivering the reports and plans you buy and taking payment: our contract with you.
• Keeping invoices and accounting records: our legal obligations.
• Analytics cookies for visitors in the EEA, the UK and Switzerland: your consent, which you can withdraw below at any time.
• Cookie-free analytics, the bot check and the limit on repeated form submissions, and emails to businesses about their visibility: our legitimate interest in running and improving the site, protecting it from abuse and finding clients.

We don't sell your personal information, and we don't use it for advertising.

Who we share it with

• Vercel — hosts the website
• Cloudflare — Turnstile, the bot check on our forms
• MongoDB Atlas — stores our database
• Stripe — takes payments for reports and plans
• Resend — sends our emails
• PostHog — product analytics
• Microsoft Clarity — session replays and heatmaps on our public pages
• Calendly — books strategy calls
• Discord — internal alerts in our private server about requests, bookings, sign-ups, purchases and errors, which can include contact details and what was written in a form
• YouTube (Google) — hosts our public website review videos
• OpenAI, Anthropic and Perplexity — the AI assistants whose answers our reports check
• Google (Maps Platform, PageSpeed Insights) and a search-results provider — listing, location, page-speed and search data for reports

What we send the AI, Google and search providers is information about the business (its name, website, location and trade) and the questions we ask about it. Each provider processes data on our behalf or under its own terms. Most of them are based in the United States; where the GDPR applies, transfers rely on the safeguards the provider offers, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

Free-check and call requests: for as long as we're in touch about them. Ask, and we delete them. Public website review requests: 7 days if you don't confirm them; up to 12 months if we don't record a review; if we do, while the video is up and for 12 months after it comes down. The weekly email: while you're subscribed; after you unsubscribe we keep your address, when you joined and left, and the record of your consent, so we don't email you again. Account, report and billing data: while your account is active, and invoices for as long as tax law requires. Analytics data: under PostHog's and Clarity's retention settings. Our team's alerts in Discord: until we delete them. Ask, and we delete the ones about you.

Your rights

Depending on the law that applies, you may ask to access, correct, delete, restrict or port your data, or object to how we use it. Where we rely on consent, you can withdraw it at any time. Use our contact page or email us (show the address). You can also complain to a data protection authority (in Romania, that's ANSPDCP), or to the one where you live.