Privacy Policy

Last updated: September 2026

This Privacy Policy describes what information ority ("we", "us") collects when you use the Service, why we collect it, and how it's handled. See also our Terms of Service.

1. What we collect

• Account data: the email address used to log in, handled by Supabase Auth.
• Business profile data: whatever information you enter into your profile (business name, hours, products, contact details, FAQs, and so on). This is the content the Service is built to publish, so it is served to any AI agent that queries your profile.
• Basic request logs: for each request to your generated endpoints, we log which endpoint was hit, a coarse classification of the requesting AI agent (e.g. "Claude", "ChatGPT"), and a country derived from the request, so you can see usage in your dashboard. We do not log full IP addresses or full request bodies.

2. Why we collect it

Account data is used to authenticate you and control access to your dashboard. Business profile data is used to generate and serve the machine-readable formats the Service exists to produce — that is the core function of ority, not an incidental use. Request logs are used to show you basic analytics about who is querying your profile.

3. Third parties involved in providing the Service

We use Supabase (database and authentication) and Vercel(hosting) as infrastructure providers; both process data on our behalf to operate the Service. If you link an external MCP tool to your profile, requests and responses are relayed to and from that third-party service as you've configured it — we don't control what that service does with the data it receives.

4. Retention

Business profile data and account data are retained for as long as your account is active. If your account is closed, we will delete or anonymize this data within a reasonable period, except where we're required to retain records for legal or accounting reasons.

5. Your rights

Depending on where you're located, you may have the right to access, correct, export, or request deletion of your data. To exercise any of these rights, use the contact details provided on our website.

6. Cookies

The dashboard uses a session cookie (via Supabase Auth) to keep you logged in. This is functionally required for the Service to work and isn't used for tracking or advertising.

7. Changes to this policy

We may update this Privacy Policy from time to time. Continued use of the Service after a change constitutes acceptance of the updated policy.

8. Contact

Questions about this policy can be sent through the contact details provided on our website.