Privacy Policy.

1. Information We Collect

When you use Greater Than Services, we collect:

• Brand workspaces: For each brand you track, the domain, the market you select, the buyer questions you want asked, the competitors you name, the pages you nominate for weekly re-reading, and the keywords you track on Google.
• Email address: To send your weekly report and account notifications.
• Account information: If you sign up, your email, name, and profile picture (if provided via Google sign-in).
• Support chat: If you use the chat on this site, we keep what you asked and which of our published answers came back. If you are not signed in we also ask for your first name, last name and email address before the chat starts, and a phone number if you choose to give one, so that a person can follow up when the chat cannot help. These are used to answer you and to see which questions our documentation is missing. They are not used for marketing. Chat transcripts are deleted after 24 hours and the contact details you give are deleted after 7 days, both automatically.
• Payment information: Processed entirely by Dodo Payments (our Merchant of Record). We never store your card or bank details.
• Subscription data:Your plan, billing period, usage against your plan's allowances, and white-label branding settings (company name, logo, brand colour).
• Page content: The HTML of the pages you track, read each week to score them. We keep the scores rather than the pages, so you can see what moved between one week and the next.
• Weekly run history: Every run is kept against your workspace: which questions were asked, which engines answered, whether your site was named or cited, which competitors were named instead, which sources each answer drew on, and your Google position for each tracked keyword. The history is the product, so it is retained for the life of the workspace.
• API keys: If you generate API keys (Agency plan), we store a hashed version of the key. The plaintext key is shown once at creation and never stored.
• Google Search Console (only if you connect it): On plans that include it, you can link a Search Console property. We ask Google only for read access (webmasters.readonly), and nothing we do can write to your Google account or your site. We store the clicks, impressions, average position and queries Google returns, so they can sit beside your AI results. The token that lets us refresh that access is stored encrypted; the short-lived access tokens are never written down. Disconnecting from console settings deletes the token.
• WordPress or Shopify (only if you connect one): To send a draft to your own site you can connect WordPress with an application password, or Shopify with an Admin API access token you create in your own store. Either credential is encrypted before it is stored and is never shown again or sent back to your browser. We use it for one thing: creating an UNPUBLISHED draft. Nothing we send can go live on your site without you opening it and publishing it yourself. Revoke it from your own WordPress or Shopify admin at any time, or disconnect from console settings, which deletes it here.
• Market you select: The country you choose for a workspace, stored so the buyer questions and the Google results reflect the market you operate in. This is a choice you make, not a detection of where you are.
• Usage & advertising data (with your consent): Standard analytics such as pages visited, approximate region, and device type. If you arrive from one of our Google ads, the click identifier (gclid) is stored in your browser so a later purchase can be attributed to that ad. See section 6.

2. How We Use Your Data

• To run your workspace each week and build the report
• To send you that report and account notifications
• To process payments (via Dodo Payments)
• To manage your subscription, meter usage against your plan, and apply white-label branding to exported reports
• To ask the AI engines your questions, check your Google positions, and re-read your tracked pages, once a week
• To work out what to recommend changing, and to write the fix code that comes with it
• To improve our scoring algorithms (in aggregate)
• To respond to support inquiries
• To measure how our advertising performs, if you consent, we report to Google Ads that a purchase happened, its value, and a scrambled (hashed) version of your email address, so we can tell which ads are worth running. See section 3

We never sell or rent your data. Apart from the advertising measurement above, which you can decline, we do not share your data with third parties for marketing purposes.

3. Third-Party Services

We work with carefully selected third-party providers to operate our platform. These providers handle functions including authentication, secure database storage, payment processing, transactional email delivery, website analysis, and cloud hosting. A list of the specific providers we use is available on request.

Where your data is processed. We are based in India and our providers operate in India, the United States, the European Union and the United Kingdom, so your personal data is processed outside your own country and, if you are in the EEA or the UK, outside it. Where that happens we rely on the safeguards permitted by applicable law, including the European Commission and UK Standard Contractual Clauses with providers not covered by an adequacy decision. You can ask us which safeguard applies to a particular provider.

To measure your AI search visibility we put your buyer questions to OpenAI, Anthropic, Google and Perplexity, the same assistants your customers use, with live web search enabled, and record whether your site is named or cited in each answer. What we send is the question and, where the question names it, your brand or domain. We do not send your email address, your account details, or any other personal information to these providers.

We also use Google Analytics 4 to measure how the site is used, Microsoft Clarity to understand how visitors interact with pages (heatmaps and session recordings, with keystrokes masked), and Google Ads to advertise the service. When you complete a purchase after arriving from one of our ads, we report that a purchase occurred, its value, and an order reference to Google so we can tell which ads work.

With that purchase we also send a scrambled (hashed) version of your email address to Google Ads, a feature Google calls enhanced conversions. It lets Google recognise that a purchase belongs to someone who clicked one of our ads, even when cookies alone cannot show it. The scrambling happens in your browser before anything is sent, so Google receives a fixed-length code rather than your address, and it cannot be turned back into your email. We do not send your name, and we never send the contents of your audits to any advertising provider. If you decline cookies, we do not send this at all.

Each provider is bound by their own privacy policy and data processing agreements. We share only the minimum data necessary for each provider to perform their function. We never sell your data. No provider uses your audit content to train AI models, and apart from the advertising measurement described above, we do not share your data for advertising purposes.

4. Data Retention

Workspace data is retained for as long as the workspace exists and your plan is active. Delete a brand and its runs, questions, competitors, tracked pages, keywords and recommendations go with it. Close your account and everything under it is removed. The run history is the whole point of a workspace, so we do not expire it while the workspace is open and paid for.

If a subscription ends, we keep everything for 7 more days and then delete it. That window exists so a lapsed payment, a failed card or a change of mind does not cost you the history you have built. Once it passes, the workspace and its stored runs are removed and cannot be recovered. Export anything you want to keep before then.

You can request deletion of your data at any time by emailing contact@greaterthanservices.com.

5. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your audit data
• Opt out of marketing communications
• Withdraw your consent to analytics and advertising cookies at any time, by clearing this site's data in your browser so the consent banner reappears
• Object to, or request restriction of, how we process your data

To exercise any of these rights, email contact@greaterthanservices.com.

6. Cookies & Similar Technologies

We use three categories:

• Essential: required for authentication, session management, and remembering your cookie choice. These cannot be switched off.
• Analytics: Google Analytics 4, used to understand aggregate site usage, and Microsoft Clarity, which records anonymised sessions and heatmaps to show us where pages confuse people. Clarity masks keystrokes and sensitive fields.
• Advertising: we advertise on Google, and use Google Ads cookies to measure which ads lead to sign-ups and purchases. If you arrive from one of our ads, your browser stores the Google click identifier (gclid) locally so a later purchase can be attributed to that ad. When you buy, a hashed version of your email address is sent with the purchase so Google can match it to your ad click (see section 3).

Analytics and advertising cookies are set only with your consent. We use Google Consent Mode v2: if you are in the EEA, the UK, or Switzerland, these are denied by default until you accept. Elsewhere they default to granted, and declining turns them off.

To change your choice later, clear this site's data in your browser and the consent banner will appear again. Analytics and advertising cookies are never used on preview or development builds of the site.

7. Security

All data is encrypted in transit (HTTPS) and at rest. Payment data is handled by a PCI DSS-compliant payment processor. We never store card or bank details on our servers. Authentication tokens are managed securely and never exposed.

8. Browser Extension

Our Chrome browser extension ("AI Readiness Check by GTS") computes a website's AI-readiness score entirely on your device. When you click the extension icon, it reads the content of the page you are viewing (its HTML and text) and the browser's own performance timings solely to calculate the score. This page content is processed locally in your browser and is never transmitted to our servers, stored, or shared. The extension does not collect personal information, track your browsing history, or access any tab other than the one you explicitly run it on. The only data that leaves your browser is if you choose to click through to our website to run a full audit.

9. Children's Privacy

Greater Than Services is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy occasionally. Material changes will be communicated via email. Continued use of Greater Than Services constitutes acceptance of the updated policy.

11. Contact

Greater Than Services is a product of Velcro Ventures (OPC) Pvt Ltd., incorporated in India. We are the data controller for information collected through this Service.

For privacy concerns, contact us at contact@greaterthanservices.com.