Privacy policy

Last updated: 15 October 2026

This policy explains what personal data AEO Studio collects, why, who processes it, and the choices you have. AEO Studio is a Chrome extension and related online service. It is operated by:

REVIVAL d.o.o. Dr. A. Starčevića 15, 47000 Karlovac, Croatia Email: hello@revival.hr

REVIVAL d.o.o. is the controller of your personal data under the EU General Data Protection Regulation (GDPR). "We", "us" and "our" mean REVIVAL d.o.o.

The short version

• We collect your email address to sign you in, and the information you enter into AEO Studio (sites, client details, brand descriptions) to provide the service.
• When you scan or audit a public web page, we fetch it from our servers and store the results.
• Some features send page text and your brand descriptions to AI providers to generate results. We don't use your data to train AI models, and our providers don't either under our agreements with them.
• Payments are handled by Stripe. We never see your full card number.
• We use anonymous product analytics. We don't sell your data and we don't run ads.
• You can ask us to delete your account and data at any time: email hello@revival.hr.

What we collect

Account data

• Your email address. You sign in with a one-time code sent to it; there is no password.
• A user ID we generate, your plan and subscription status, and your timezone (so scheduled emails arrive at a sensible local time).

Information you enter

• Sites and clients you add: names, domains, site type.
• Brand context: what the business does, who it is for, offers, pricing, how to contact it, target questions, competitor domains, brand voice.
• Report branding (Agency): agency name, logo, accent colour, contact line.
• Plans, tasks, notes and reflections you write in the extension.

If you're an agency, this is mostly information about your clients' businesses. Please don't enter personal data about individuals beyond normal business contact details.

Pages you choose to check

• When you run a scan, audit, readback or tracking on a page, we store its address, the results (scores, checks, evidence and fixes), and up to 12,000 characters of the page's text so a readback doesn't need to fetch it again.
• To run a scan, our servers fetch the public page, identifying as common AI agents (for example GPTBot or ClaudeBot), the same way those agents would. We only fetch pages you ask us to check, plus the related public files of that site (robots.txt, sitemap, llms.txt, and pages such as /about, /contact and /privacy).
• When you run a scan or audit, the extension also reads the page in your active tab to compare what your browser shows with what an agent receives. It reads a page only when you use a feature on it.

Optional research features

Some Research tools open answer engines (such as Perplexity, ChatGPT or Google) in background tabs to record which sources they cite for your questions, and can record citations on answer-engine pages you visit. These run only when you start them or turn them on, and their results are stored in your browser.

Usage limits and logs

• Counts of the AI features you use, with the model used and token counts, to enforce plan limits and track our costs.
• A log of emails we send you (time and type, not the content you read).
• Technical logs kept by our providers for security and debugging, for short periods.

Analytics

Anonymous usage events, such as "agent scan started", with a random installation ID, the extension version and simple counts. They never include your email, account ID, page addresses, domains, queries or what's on the pages you check. We ask our analytics provider not to store IP addresses or derive location; it may still see your IP address briefly while receiving an event. You can turn analytics off in Settings › Account › "Share anonymous usage data".

Stored only in your browser

Your sign-in session, your last 50 audits, interface preferences and the analytics queue are kept in your browser's extension storage. Uninstalling the extension removes them.

Payments

When you subscribe, Stripe collects your payment details. We receive your Stripe customer and subscription IDs, your plan, status and billing period, but never your full card number.

Why we use it (legal bases)

• To provide the service you signed up for (contract): signing you in, running scans, audits, readbacks, tracking, briefs, drafts, reviews, reports, the weekly email (Agency) and billing.
• For our legitimate interests: keeping the service secure, preventing abuse and enforcing fair-use limits, fixing bugs, and understanding anonymously which features are used so we can improve them.
• To meet legal obligations: keeping billing and accounting records.
• With your consent, where we ask for it, for example optional research features.

We don't sell your personal data, don't use it for advertising, and don't use it to decide creditworthiness or for lending.

AI processing

Some features send content to AI providers to generate results:

• Page audits, agent readback, content briefs, drafts and monthly summaries send the relevant page text, your brand context and your instructions to Anthropic (Claude).
• AI visibility tracking sends your target questions (not your personal data) to Perplexity to see which sources AI answers cite.

These providers process the content to return a result to us. Under our agreements with them, they don't use API content to train their models. AI results can be wrong; check them before you rely on or publish them.

Who processes your data (our service providers)

When data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable to each provider.

Shared sign-in with Reddit Assistant Pro

AEO Studio and Reddit Assistant Pro are both operated by REVIVAL d.o.o. and use the same sign-in system. When you create an AEO Studio account, a basic user record (your user ID and email address) is also created in Reddit Assistant Pro's user table. It isn't used to market to you, and it's deleted when you ask us to delete your AEO Studio account.

How long we keep it

• Account and service data: while your account is active.
• When you ask us to delete your account: we delete your account, your sites and clients, scans, readbacks, audits, tracked pages, plans, reports and the linked Reddit Assistant Pro record within 30 days of your request.
• Billing records: kept as long as accounting and tax law requires, even after account deletion.
• Provider logs: kept by our providers for their standard short periods.
• Data in your browser: until you remove it or uninstall the extension.

Your rights

Under the GDPR you can ask us to:

• give you a copy of your personal data (access and portability),
• correct it,
• delete it,
• restrict or object to processing based on our legitimate interests,
• withdraw consent you've given, at any time.

To make a request, email hello@revival.hr from the address on your account. We reply within one month. There's no "delete account" button in the extension yet; email us and we'll do it within 30 days.

You can also complain to a data protection authority in the EU.

Emails

We email you sign-in codes and essential service messages (billing, important changes). On Agency, we send a weekly email when the automatic rescans find changes; you can turn it off in Settings › Email or with your mail app's Unsubscribe button. We don't send marketing emails without your consent.

Security

Data is encrypted in transit (HTTPS). Access to your data is restricted to your account by database rules, and our team's access is limited to what's needed to run and support the service. No system is perfectly secure; if a breach affects your personal data, we'll notify you and the authorities as the law requires.

Children

AEO Studio is a business tool and isn't intended for anyone under 16. We don't knowingly collect data from children.

Chrome Web Store user data policy

AEO Studio's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We use the data the extension handles only to provide and improve its single purpose — showing how AI agents read and cite web pages — and not for unrelated purposes.

Changes to this policy

If we change this policy in a way that matters, we'll update the date above and tell you in the extension or by email before the change takes effect.

Contact

REVIVAL d.o.o., Dr. A. Starčevića 15, 47000 Karlovac, Croatia — hello@revival.hr