This Privacy Policy describes how we collect, use, and share your personal information and helps you understand and exercise your privacy rights.
Effective date: August 15, 2024
At a glance: - We do not sell your personal information. - We do not collect personal information from members of the general public using AI platforms (e.g., ChatGPT, Perplexity). - We do not use your personal information to train general‑purpose AI models. - We are SOC 2 Type II compliant. For details, visit our publicly accessible Trust Center.
This Privacy Policy applies to personal information processed by us via our website, applications, and services (collectively, “Services”). This Privacy Policy does not apply to content that we process on behalf of customers of our commercial offerings. Our use of that data is governed by our customer agreements covering access to and use of those offerings.
Important note: This Privacy Policy does not apply to any personal information that our customers may collect and process using the Services (“Customer Data”). Our customers’ respective privacy policies govern their collection and use of Customer Data. Our processing of Customer Data is governed by the contracts that we have in place with our customers, not this Privacy Policy. Any questions or requests relating to Customer Data should be directed to our customer.
The categories of personal information we collect depend on how you interact with us, our Services, and the requirements of applicable law. We collect information that you provide to us, information we obtain automatically when you use our Services, and information from other sources such as third-party services and organizations.
We may collect: - Account creation details such as your full name, email address, company name, and password. - Information you choose to provide through the Services. - Purchase information and payment details (processed by third-party payment processors). - Your communications with us (e.g., when you request support or information, apply for a job, or otherwise contact us). - Survey responses. - Information collected at conferences, trade shows, and other events. - Information collected for business development and partnerships. - Job application materials (e.g., resume/CV, cover letter).
Customer-provided data used to configure the Services may include: - Email addresses and brand names. - Optional: Names for user accounts/authentication. - Optional: Descriptions of a brand’s products and services. - Optional: Descriptions of key customer or audience personas. - Optional: List of key competitors. - Optional: List of prompts to monitor for, which can be associated with personas if desired. - Optional: Public URLs for webpages a customer is targeting for inclusion in AI search results.
Customers can provide as much or as little of the optional data as they prefer; Scrunch can generate optional data to speed onboarding.
We may collect geolocation data and internet or other electronic network activity information such as IP addresses, device and browser information, pages viewed, links clicked, time spent, and similar usage data.
Technologies we use: - Cookies, local storage, pixel tags/web beacons, and similar technologies for operationally necessary, performance-related, functionality-related, and advertising/targeting-related purposes. - Analytics tools to help us understand how individuals use our Services. - Social media features (e.g., LinkedIn, X) that may collect your IP address and page visits; your interactions with these platforms are governed by their privacy policies.
You can adjust browser/device settings to manage cookies and similar technologies, though some features may not function properly if disabled.
We may obtain information about you from third-party services and organizations where permitted by law.
Scrunch collects AI responses (including citations and search results) from consumer AI platforms through integrations, partnerships, APIs, and similar methods. We do not collect or expose the personal information of the individuals who ask questions on those AI platforms.
Example: If a prompt such as “What’s the best project management software for remote teams?” is tracked, Scrunch collects the AI-generated response text, which brands were mentioned, and website citations—not the identity of the person who asked the question.
We use your information for business purposes, including to provide our Services, for administrative purposes, and to market our products and Services.
We use information to: - Manage your information and accounts. - Operate and maintain the Services. - Provide access to features and functionality. - Respond to customer or technical support requests. - Communicate about your account, activities, and policy changes. - Process payments for products or Services purchased. - Process job applications. - Allow event registration.
Product analytics context: To help customers understand and improve visibility across AI platforms, Scrunch aggregates AI responses, brand mentions, and citations to deliver insights such as which prompts and platforms reference a brand and where web citations originate. When customers provide competitor lists, analytics can be used to compare brand visibility indicators (e.g., mentions and citations) across tracked prompts and platforms.
We use information for: - Legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention. - Detecting and preventing malicious, deceptive, fraudulent, or illegal activity. - Measuring interest and engagement in our Services. - Short-term, transient use (e.g., contextual customization of content). - Improving and enhancing the Services and developing new features. - Internal quality control and safety. - Authenticating and verifying identities, including rights requests. - Debugging and error repair. - Auditing and compliance. - Enforcing agreements and policies. - Complying with legal obligations.
We may use personal information to analyze our customer base, products, services, trends, and traffic and to provide tailored content and advertisements, as permitted by law. This may include email campaigns, custom audiences, and interest‑based advertising, potentially using cross‑device tracking. You can opt out of marketing communications as described in Your Privacy Choices and Rights.
Scrunch is an AI search product, not a consumer-facing AI assistant. We use AI in two ways: - Indirectly: We simulate consumer interactions with AI platforms (e.g., ask a question on Perplexity) and record the resulting responses to monitor brand presence and citations. - Directly: We use AI models for inference tasks such as sentiment analysis, topic classification, entity extraction, and comparing factual content. Direct model usage occurs within our production cloud environment or via commercial inference providers (e.g., OpenAI, Google Cloud Platform Vertex AI, Together) under configurations and terms that prohibit using interactions for training or fine‑tuning.
Learn more in our FAQ on how Scrunch uses AI.
We do not sell your personal information.
We disclose personal information to third parties for business purposes, including to provide our Services, protect us or others, or in the event of a business transaction such as a merger or acquisition.
We may access, preserve, and disclose information if we believe it is required or appropriate to comply with law or legal process; protect rights, property, or safety; enforce our policies or contracts; collect amounts owed; or assist with investigations of illegal activity.
If we undergo a merger, acquisition, financing, reorganization, bankruptcy, or sale/transfer of assets, your information may be transferred as permitted by law and/or contract.
Your privacy choices: - Email communications: Use the unsubscribe link in marketing emails to opt out. You will continue to receive transactional and certain non‑promotional communications related to the Services and policy updates. - Do Not Track: We do not respond to or honor DNT signals. - Cookies and interest‑based advertising: Manage cookies and similar technologies via your browser/device settings. Some features may not function properly if disabled.
Your privacy rights (subject to applicable law) may include: - Access: Confirm whether we process your personal information and obtain access/copies, including data portability. - Correction: Request correction of inaccurate or incomplete information. - Deletion: Request deletion of personal information we have collected. - Restrict/object: Request restriction of or object to our processing or disclosure. - Withdraw consent: Withdraw your consent where processing is based on consent.
To exercise your rights, contact us as described in Contact Us. We will process requests in accordance with applicable laws.
We take steps to ensure your information is treated securely and in accordance with this Privacy Policy. No system is 100% secure, but we require our service providers and partners to maintain appropriate safeguards.
Scrunch has successfully completed a SOC 2 Type II audit conducted by an independent third‑party auditor. For audit scope, controls, and documentation, visit our Trust Center and see our Security FAQ on SOC 2 Type II compliance.
We may communicate with you electronically regarding security, privacy, and administrative issues. If we learn of a security breach, we may notify you by posting a notice on our Services, by mail, or by email.
Information we process may be transferred, processed, and stored outside your country, including in the United States, where data protection laws may differ. We endeavor to safeguard your information consistent with applicable laws.
We retain personal information for as long as needed to provide the Services or for other legitimate purposes described in this policy, including legal obligations, dispute resolution, security, auditing, and enforcing agreements.
This section applies to personal information subject to the California Consumer Privacy Act (CCPA).
Categories collected and disclosed for a business purpose in the preceding 12 months: - Identifiers (e.g., name, postal address, IP address, email, account name): Service providers - California Customer Records information (e.g., name, address, employment, payment details): Service providers - Commercial information (e.g., records of products/services purchased or considered): Service providers - Internet or other electronic network activity (e.g., browsing history, interactions with websites/apps/ads): Service providers - Geolocation data: Service providers - Professional or employment-related information: Service providers
Sales of personal information: We do not sell personal information and have no actual knowledge of selling personal information of minors under 16.
California privacy rights include the right to know, correct, delete, opt‑out of sale (we do not sell personal information), limit the use/disclosure of sensitive personal information, and freedom from discrimination for exercising these rights.
Authorized agents and verification: You may designate an authorized agent to make a verifiable request on your behalf. We will verify your identity prior to fulfilling requests.
Accessibility: This Privacy Policy uses industry‑standard technologies and aligns with WCAG 2.1. You may print or save this policy from your browser.
Under California Civil Code sections 1798.83–1798.84, we do not share personal information with third parties or affiliates for their direct marketing purposes.
Our Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us as described below. We will delete such information unless we have a legal obligation to keep it and will terminate the child’s account.
Third‑party websites/applications: Our Services may contain links to or be referenced by third‑party sites or apps. We are not responsible for their privacy practices or content. Providing personal information to third parties is at your own risk.
Supervisory authority: If you are in the EEA, Switzerland, the UK, or Brazil, you have the right to lodge a complaint with a supervisory authority if you believe our processing violates applicable law.
Changes to this policy: We may update this Privacy Policy from time to time. If there are material changes, we will notify you as required by law. Your continued use of the Services after the effective date of the updated policy constitutes acceptance. Please review periodically for the latest information.
If you have questions about our privacy practices or this Privacy Policy, or to exercise your rights, contact us at:
Scrunch AI
50 W Broadway, Suite 333 PMB 76690
Salt Lake City, UT 84104
Email: privacy@scrunchai.com
Learn more about our security program, data handling, retention procedures, and subprocessors in our Trust Center.
Related resources: - FAQ: Does Scrunch collect personal information from people using AI platforms like ChatGPT? - FAQ: Does Scrunch use AI in its platform? - FAQ: Is Scrunch SOC 2 Type II compliant and what security standards does it meet?