Privacy Policy

Effective Date: October 11, 2026

Spotlight AI ("Spotlight AI," "we," "us," or "our") respects your privacy and is committed to providing clear information about how we collect, use, disclose, and protect personal information.

Spotlight AI is a California-based business that provides AI search marketing software, AI visibility analytics, automated content creation, and managed knowledge base websites for businesses.

This Privacy Policy explains our privacy practices when you visit our marketing website, communicate with us, create an account, subscribe to our services, or use the Spotlight AI application.

1. Websites and Services Covered

This Privacy Policy applies to:

• Marketing Website: https://tryspotlight.ai
• Spotlight AI Application: https://app.tryspotlight.ai
• Knowledge Base Hosting: https://hubs.tryspotlight.ai and the related infrastructure Spotlight AI operates to host and deliver customer knowledge base websites.
• Related Services: Account onboarding, AI visibility analytics, business research, automated content generation, knowledge base publishing, customer support, and associated services operated by Spotlight AI.

The marketing website is primarily designed to introduce our software, explain its features, provide pricing information, and allow visitors to contact us or schedule a consultation.

The Spotlight AI application is a separate software environment where registered users can manage subscriptions, submit business information, review analytics, configure their knowledge base, and access our automated marketing features.

The marketing website, application, and knowledge base hosting may use different technical systems, service providers, security controls, and data-processing technologies.

This Privacy Policy covers all of these environments unless a supplemental notice or agreement expressly applies to a particular feature or service.

2. Information We Collect

We collect information that you provide directly, information generated through your use of our websites and services, information obtained from connected third-party services, and certain publicly available business information.

Information You Provide Directly

Depending on how you interact with Spotlight AI, we may collect:

• Your name and professional contact information.
• Email address and telephone number.
• Business name, website address, industry, and location.
• Business products, services, service areas, and target markets.
• Information submitted through contact forms, consultation requests, scheduling tools, or support communications.
• Account registration information, including your email address and password if you sign up with email, or your Google account information if you sign up with Google.
• Subscription selections, billing information, and transaction records.
• Business descriptions, instructions, preferences, and other information provided during onboarding.
• Content, documents, or other materials you choose to submit through the application.
• Feedback and communications with our team.

Please avoid submitting sensitive personal information that is not necessary to operate your account or deliver the requested services.

Contact Form and Consultation Scheduling

When you submit our contact form, the information you provide (such as your name, email address, phone number, business details, and message) is processed by our form-processing provider and delivered to our team.

If you choose to schedule a consultation, the scheduling tool embedded on our website collects the information needed to book the meeting, such as your name, email address, selected time, and time zone. The scheduling provider may also set its own cookies to operate the booking tool.

Information Collected Automatically

When you access our websites or application, we and our technology providers may collect:

• IP address and approximate geographic location derived from the IP address.
• Browser type, operating system, and device information.
• Pages visited and features used.
• Referring websites and traffic sources.
• Dates, times, and duration of visits.
• Website interactions, clicks, and navigation events.
• Advertising identifiers, cookie identifiers, and related tracking information.
• Error reports, diagnostic information, and security logs.
• Account activity, application usage, and technical performance information.

We may collect this information through cookies, pixels, browser storage, server logs, and similar technologies.

Business Information and Publicly Available Data

Spotlight AI may research information about a business and its market to provide our services.

This may include:

• Publicly available website content.
• Company descriptions and business contact information.
• Products, services, and geographic service areas.
• Publicly available information about competitors.
• Business categories, industry information, and customer search topics.
• Public information relevant to content generation and AI visibility measurement.

Some publicly available business information may also qualify as personal information when it identifies an individual.

Information From Connected Services

If you sign in with Google or connect an external account, we receive information from that service according to the permissions you approve. Section 10 describes exactly what we receive from Google.

We do not obtain unrestricted access to external accounts merely because you use Spotlight AI.

3. How We Use Information

We use information for the following purposes:

Providing our services: Creating accounts, authenticating users, managing subscriptions, operating the application, supporting customers, and delivering the features customers request.

AI visibility analytics: Generating and tracking relevant queries, measuring brand mentions in AI-generated answers, evaluating competitors, and displaying performance over time.

Knowledge base generation: Researching business topics, preparing content, creating pages, publishing approved or automatically scheduled content, and maintaining knowledge base websites.

Service improvement: Troubleshooting errors, improving performance, evaluating system reliability, and developing or refining application features.

Communications: Responding to inquiries, scheduling consultations, providing customer support, sending requested information, and delivering account-related notices.

Marketing and advertising: Measuring advertising campaigns, understanding website traffic, and presenting relevant advertisements where permitted.

Security and compliance: Preventing fraud and abuse, protecting accounts, maintaining security, and complying with legal obligations.

Billing and administration: Processing subscriptions, maintaining financial records, and addressing payment-related issues.

We use personal information only for appropriate business purposes, subject to applicable law and the choices available to you.

4. Marketing Website Analytics and Advertising

The Spotlight AI marketing website uses third-party services to understand website performance, measure advertising campaigns, and reach prospective customers.

These services may collect information through cookies, tracking pixels, tags, and related technologies.

Google Analytics

We use Google Analytics to understand how visitors find and interact with our website.

Google Analytics may process information such as page views, session activity, device information, browser characteristics, approximate geographic location, referral sources, and website interaction events.

We use this information to understand website performance and improve the visitor experience.

Google Analytics is provided by Google and is subject to Google's applicable privacy practices and contractual terms.

Google Ads

We use Google Ads to advertise Spotlight AI and measure advertising performance.

Google Ads technologies may help us:

• Measure visits and actions resulting from advertisements.
• Understand advertising campaign effectiveness.
• Attribute conversions to advertising campaigns.
• Reach or remarket to relevant audiences where permitted.
• Improve advertising targeting and campaign performance.

Google may use cookies, advertising identifiers, and other technologies in connection with these functions.

Meta Ads and Meta Pixel

We use Meta advertising technologies, including the Meta Pixel, to measure and improve advertising on Facebook, Instagram, and related Meta services.

These technologies may collect or receive information about website visits, browser activity, device characteristics, advertising identifiers, and interactions with our marketing pages.

Depending on our advertising configuration and your privacy choices, this information may be used for conversion measurement, audience creation, remarketing, and advertising optimization.

Google Search Console

We use Google Search Console to monitor our website's performance in Google Search.

This may include search impressions, clicks, search queries, indexing information, and technical website performance.

Google Search Console is a search-performance and webmaster reporting service. Its use does not, by itself, place a behavioral advertising pixel on your device.

Bing Webmaster Tools

We use Bing Webmaster Tools, provided by Microsoft, to monitor indexing, search visibility, website performance, and related technical information associated with our website.

This may include search impressions, clicks, search queries, crawling information, and indexing reports.

Bing Webmaster Tools is a search-management service rather than a behavioral advertising platform.

Third-Party Advertising and Cross-Site Tracking

Some advertising technologies allow third-party companies to recognize or associate activity across different websites, applications, or devices.

Depending on the applicable privacy law, these activities may be classified as sharing personal information for cross-context behavioral advertising or, in certain circumstances, selling personal information.

We provide privacy rights and opt-out options as described below.

We do not sell personal information to data brokers for money.

5. Cookies, Pixels, and Tracking Technologies

Our websites and application may use the following categories of technologies:

Essential technologies: Required for site operation, account authentication, security, fraud prevention, and core application functionality.

Analytics technologies: Used to understand website usage, traffic patterns, feature adoption, and technical performance.

Advertising technologies: Used for conversion measurement, remarketing, advertising attribution, and audience analysis.

Preference technologies: Used to remember settings and user preferences.

Third-party embedded tools: Our consultation scheduling tool may set its own cookies when it loads, and it provides its own cookie settings within the embedded tool.

You can manage or block cookies through your browser settings. Blocking certain cookies may affect website functionality, account sessions, or the accuracy of analytics.

Disabling personalized advertising does not necessarily prevent all advertising, essential cookies, or ordinary website data collection.

Do Not Track

Some browsers offer a "Do Not Track" setting or similar browser-based privacy signals. Because there is no consistent industry standard for responding to these signals, our websites do not currently respond to them.

You can still use the opt-out choices described in Section 6, including contacting us directly.

6. Advertising, Analytics, and Privacy Opt-Outs

You can control certain advertising and analytics activities directly through the providers listed below.

Google personalized advertising:
https://myadcenter.google.com/

Google Analytics opt-out browser add-on:
https://tools.google.com/dlpage/gaoptout

Meta advertising preferences:
https://accountscenter.facebook.com/ad_preferences/

Meta Privacy Center:
https://www.facebook.com/privacy/center/

Microsoft personalized advertising controls:
https://account.microsoft.com/privacy/ad-settings

Digital Advertising Alliance WebChoices:
https://optout.aboutads.info/

Network Advertising Initiative privacy choices:
https://thenai.org/how-to-opt-out/

You may also adjust the privacy settings on your browser, device, Google account, Meta account, or other relevant platform.

These provider-level choices are separate from any privacy rights you may exercise directly with Spotlight AI.

To request that Spotlight AI stop selling or sharing your personal information for targeted advertising, email us at support@tryspotlight.ai with the subject line "Privacy Request: Opt Out."

An opt-out may apply to a specific browser or device unless we can reasonably associate it with your account or otherwise apply it more broadly.

7. Spotlight AI Application and Account Information

When you sign up for the Spotlight AI application, additional information is collected to provide the software.

Account Sign-Up Methods

You can create an account in one of two ways:

• Email and password: We collect your email address and the password you choose. Passwords are stored using one-way hashing and are not stored in readable form.
• Sign in with Google: We receive basic profile information from your Google account, as described in Section 10. We do not receive your Google password.

Information Stored in the Application

The application may also collect, generate, or store:

• Your name, business contact details, and company information.
• Subscription details and information submitted during onboarding.
• Business research and company profiles.
• AI search queries and measurement configurations.
• AI-generated responses and brand mention results.
• Competitor and visibility analytics.
• Page ideas, publishing schedules, and drafts.
• Published knowledge base content and page metadata.
• Application settings and account activity.
• Technical logs and service-performance information.

This information is used to operate the services you subscribe to, maintain your knowledge base, generate analytics, and support your account.

8. Subscription Billing and Payment Information

Paid subscriptions require billing and payment information.

Payments are processed by Stripe, our third-party payment processor.

Depending on the billing method, information collected or processed may include:

• Billing name and address.
• Payment card or other payment-method information.
• Subscription plan and billing frequency.
• Transaction amounts and dates.
• Payment status and billing history.
• Tax-related or business billing information.

Complete payment card details are collected and processed directly by Stripe and are not stored in Spotlight AI's application database.

We may retain payment-related identifiers, transaction records, invoices, subscription information, and limited payment-method details (such as card type and last four digits) necessary for billing administration.

Stripe operates under its own privacy policy, contractual obligations, and security requirements.

Payment information is not included in prompts sent to AI models.

9. Artificial Intelligence and Third-Party Model APIs

Spotlight AI uses artificial intelligence technologies to deliver its core services.

Depending on the feature, Spotlight AI may use AI APIs or related services provided by companies including:

• OpenAI
• Google
• Anthropic
• Perplexity
• Other AI or infrastructure providers introduced as our services evolve

These technologies support functions such as business analysis, content planning, page generation, information extraction, structured content processing, AI search measurement, and analysis of generated answers.

Information Sent to AI Providers

To perform a requested operation, Spotlight AI may transmit relevant information to an AI provider.

Depending on the operation, this may include:

• Business names and website addresses.
• Business descriptions and publicly available website content.
• Products, services, and service locations.
• Industry information and target markets.
• Competitor names and business comparisons.
• Customer search topics and generated AI queries.
• User-provided content or business instructions.
• Page outlines, drafts, and content requiring analysis or formatting.
• AI-generated answers submitted for brand mention analysis.
• Other information reasonably necessary to perform the requested feature.

Information submitted to an AI provider may be processed on the provider's infrastructure, which may be located outside your state or country.

How AI Providers Process Information

AI providers may process and temporarily retain request data, generated responses, technical information, and service logs according to their agreements, product settings, and applicable policies.

Provider practices regarding retention, human review, safety monitoring, and model training can differ.

Where available and appropriate, we use API configurations and contractual protections intended to limit unnecessary retention, secondary use, and disclosure.

We do not represent that every AI provider uses identical privacy or data-retention practices.

We do not include payment card numbers, account passwords, or other unnecessary sensitive credentials in AI model prompts.

AI Outputs and Accuracy

AI-generated content and responses may contain errors, omissions, or inaccurate information.

We use automated processing and validation mechanisms as part of our services, but AI-generated content should not be treated as guaranteed accurate.

Customers remain responsible for reviewing information submitted to the platform and for using the service in compliance with applicable law and their contractual obligations.

10. Google Sign-In and Google API Services

Sign in with Google

If you choose to sign up or log in with Google, we request access only to your basic Google profile information:

• Your name.
• Your email address.
• Your profile picture.
• Your Google account identifier.

We use this information only to create and authenticate your Spotlight AI account, display your name and profile picture in the application, and communicate with you about your account.

We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or other Google account content through Sign in with Google.

If we introduce additional Google integrations in the future (for example, connecting Google Search Console), we will request those permissions separately through Google's authorization screen, explain how the data will be used, and update this Privacy Policy before the feature is available.

How We Handle Google User Data

We do not sell Google user data.

We do not use Google user data to serve advertisements.

We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

We do not allow humans to read Google user data except with your consent, for security purposes, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.

We share Google user data only with service providers that help us operate the application (such as our hosting and authentication providers), only as needed to provide the features you requested, and only as permitted by Google's policies.

Google user data is stored using the security measures described in Section 15.

You can revoke Spotlight AI's access to your Google account at any time through your Google Account settings:

https://myaccount.google.com/connections

You can also delete your Spotlight AI account at any time, as described in Section 14.

Spotlight AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:

https://developers.google.com/terms/api-services-user-data-policy

11. Knowledge Base Websites and Public Content

One of Spotlight AI's primary services is creating and maintaining a knowledge base website for a customer's business.

These websites are designed to make business information accessible to website visitors, search engines, and AI crawlers.

Information that may be published includes:

• Business descriptions.
• Products and services.
• Service areas and locations.
• Industry information.
• Guides, articles, answers, rankings, and comparisons.
• Other business-related content generated or authorized through the application.

Published knowledge base content is intended to be publicly accessible.

It may be visited, indexed, quoted, cached, summarized, or otherwise processed by third-party search engines, AI platforms, and web crawlers.

Once content has been made public, Spotlight AI cannot guarantee that external search engines, AI providers, archives, or third parties will remove every copy of that information if the original page is deleted.

Customers should avoid submitting confidential information, sensitive personal information, or information they are not authorized to publish.

Deleting an account or removing a page does not necessarily remove information already indexed, cached, or independently stored by third parties.

Visitors to Knowledge Base Websites

When someone visits a knowledge base website that Spotlight AI hosts, our hosting and infrastructure providers may automatically log technical information such as IP address, browser type, pages requested, referring URLs, and timestamps.

We use this information to deliver pages, maintain security, prevent abuse, and monitor performance.

12. How We Disclose Information to Third Parties

We may disclose information to third parties when reasonably necessary to operate our business and provide our services.

Service Providers We Use

The following table lists the main service providers we currently use and their purpose. This list may change as our services evolve.

Categories of Recipients

Categories of recipients may include:

Hosting and infrastructure providers: Companies providing cloud computing, data storage, website hosting, application hosting, databases, and related infrastructure.

AI technology providers: Companies processing business context, prompts, documents, search queries, or other information required to perform requested AI functions.

Analytics providers: Companies helping us understand traffic, technical performance, and application usage.

Advertising partners: Google, Meta, and related providers involved in advertising attribution, campaign measurement, and advertising personalization where permitted.

Payment processors: Companies processing payments, managing subscriptions, and supporting billing operations.

Communication and scheduling providers: Companies used to process contact form submissions, schedule consultations, deliver service-related email, provide customer support communications, or send authorized text messages.

Security and operational providers: Companies assisting with authentication, monitoring, logging, fraud prevention, and technical support.

Professional advisers: Legal, accounting, auditing, and other advisers when reasonably necessary.

We may also disclose information when required by law, to respond to lawful legal requests, to investigate fraud or security incidents, or in connection with a merger, financing, acquisition, or sale of business assets.

We do not authorize service providers to use personal information for unrelated purposes where prohibited by applicable contracts or law.

13. Communications and Marketing

If you submit a contact form or request a consultation, we may contact you by phone, email, or text regarding your request, consistent with the information you provide and applicable law.

If you create an account, we may send communications about:

• Account access and security.
• Billing and subscription status.
• Important service updates.
• Technical issues.
• Support requests.
• Material changes to our services or policies.

We may also send promotional communications where permitted by law.

You can opt out of promotional emails using the unsubscribe link included in those messages or by contacting us at support@tryspotlight.ai.

If you receive promotional text messages, you may opt out by following the instructions in the message, such as replying STOP where supported.

We obtain any additional consent required by law for automated or promotional calls and text messages.

We do not share mobile phone numbers or text messaging consent with third parties or affiliates for their own marketing purposes.

Opting out of marketing communications does not prevent us from sending necessary transactional, security, or account-related notices.

14. Data Retention and Account Deletion

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention depends on factors including:

• Whether an account remains active.
• The purposes for which the information was collected.
• The customer's subscription and service requirements.
• Legal, tax, accounting, or regulatory obligations.
• Fraud prevention, security, and dispute resolution needs.
• Technical backup and disaster recovery procedures.
• Applicable deletion requests and contractual commitments.

Contact form and consultation information may be retained for responding to inquiries and maintaining relevant business records.

Account information and application content are retained while your account remains active.

Financial records may be retained as required for tax, accounting, and legal compliance.

Analytics and security records may be retained according to operational requirements and applicable third-party service settings.

Deleting Your Account

You can delete your Spotlight AI account at any time from within the application, or by emailingsupport@tryspotlight.ai.

When you delete your account, your account and subscription are deleted right away. We then remove associated application content from our active systems, including knowledge base pages we host for you.

We may keep limited information after deletion when required for legal, tax, accounting, billing, security, fraud prevention, or dispute resolution purposes.

Backup copies may remain for a limited period after information is deleted from active systems.

Publicly published content may also remain accessible through third-party caches, archives, or search indexes beyond our control.

If you cancel your subscription instead of deleting your account, your plan stays active through the end of your current billing period.

15. Information Security

We use administrative, technical, and organizational measures intended to protect information against unauthorized access, disclosure, alteration, loss, and misuse.

These measures include access controls, authentication mechanisms, encrypted connections (HTTPS), hashed password storage, monitoring, restricted access to production systems, and other safeguards appropriate to our services.

No website, application, database, or internet transmission method can be guaranteed completely secure.

Users should maintain strong account credentials and notify us at support@tryspotlight.ai if they believe their account has been compromised.

16. California Privacy Rights

Spotlight AI is based in California.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, when those laws apply to the relevant business and processing activity.

These rights may include:

Right to Know and Access: Request information about the personal information we collect, use, disclose, sell, or share.

Right to Delete: Request deletion of personal information, subject to applicable exceptions.

Right to Correct: Request correction of inaccurate personal information.

Right to Opt Out: Direct us not to sell or share personal information for cross-context behavioral advertising.

Right to Limit Certain Sensitive Information Uses: Request limitations on qualifying uses or disclosures of sensitive personal information, where applicable.

Right to Non-Discrimination: Exercise applicable privacy rights without unlawful discrimination.

Categories of Personal Information

Depending on your interactions with Spotlight AI, the categories of personal information collected or processed during the preceding 12 months may include:

We use sensitive personal information only for purposes permitted by law, such as providing the services and keeping accounts secure, and not to infer characteristics about you.

Sources of Information

We may obtain information directly from individuals, automatically through website and application technologies, from service providers, from Google when you sign in with Google, from other connected accounts with authorization, and from publicly available business sources.

Business Purposes

We collect and use the categories above for service delivery, account administration, billing, analytics, marketing, security, support, and other purposes described in this Policy.

Sale and Sharing

We do not sell personal information in exchange for money.

However, advertising pixels, cookies, and similar technologies used with Google Ads and Meta Ads may disclose online identifiers, browsing activity, approximate location, and related information to advertising partners.

Depending on applicable law, these disclosures may qualify as a "sale" or "sharing" of personal information, including sharing for cross-context behavioral advertising.

We do not disclose payment card information, account passwords, or private application content to advertising partners for behavioral advertising.

Exercising Your Rights

To submit a privacy request, email us at:

support@tryspotlight.ai

Please use the subject line "Privacy Request" and specify the right you wish to exercise. You may also reach us through our contact page at https://tryspotlight.ai/contact.

We may need to verify your identity or authority before responding to certain requests. Verification information will be used only for that purpose.

We will respond within the timelines required by applicable law and explain when an exception applies.

Where applicable, authorized agents may submit requests on behalf of California residents, subject to verification and authorization requirements.

Opting Out of Sale or Sharing

You may request that Spotlight AI stop selling or sharing your personal information, as defined by applicable law, by emailing support@tryspotlight.ai with the subject line "Privacy Request: Opt Out."

Changing Google or Meta advertising preferences does not necessarily exercise your privacy rights directly with Spotlight AI. You may need to use our own opt-out method as well.

California Direct Marketing Disclosures

California residents may also have rights to request information about certain disclosures of personal information to third parties for their own direct marketing purposes.

Requests can be submitted to support@tryspotlight.ai, subject to applicable law.

17. Privacy Rights in Other Jurisdictions

Depending on where you live and which laws apply, you may have additional rights regarding your personal information.

These may include the right to:

• Access personal information.
• Request correction or deletion.
• Obtain a portable copy of eligible data.
• Object to or restrict certain processing.
• Opt out of targeted advertising or qualifying sales of personal information.
• Withdraw consent where processing depends on consent.
• Appeal certain privacy request decisions, where applicable.

If you are located in the European Economic Area or United Kingdom, Spotlight AI is the controller of your personal information described in this Privacy Policy. Applicable processing may rely on grounds such as performance of a contract, legitimate interests, compliance with legal obligations, or consent, depending on the processing activity.

We may transfer information to service providers located in the United States or other countries. Where required, we use appropriate legal transfer mechanisms and safeguards.

You may contact us at support@tryspotlight.ai to exercise applicable privacy rights. You may also have the right to contact a relevant data protection authority.

18. Children's Privacy

Spotlight AI is intended for businesses and professional users, not children.

Our services are not directed toward individuals under the age of 16, and we do not knowingly collect personal information from children for marketing or account registration purposes.

We do not knowingly sell or share the personal information of children under 16.

If we learn that we have collected personal information from a child in violation of applicable law, we will take appropriate steps to delete the information.

19. Third-Party Websites and Services

Our websites may link to or embed third-party websites, applications, advertising platforms, scheduling tools, payment processors, and other services.

These third parties may have their own privacy policies and data-handling practices.

This Privacy Policy does not govern third-party websites or services that operate independently of Spotlight AI.

We encourage users to review the privacy practices of third parties before providing information to them.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, business operations, legal requirements, or privacy practices.

When updates are made, we will revise the effective date at the top of this page.

If an update materially changes how we process personal information, we will provide additional notice or obtain consent when required by law.

Continued use of our services after a change does not eliminate any consent or notice rights provided by applicable law.

21. Contact Us

For privacy questions, account-related inquiries, or requests to exercise your privacy rights, please contact:

Spotlight AI
California, United States

Email:
support@tryspotlight.ai

Contact Form:
https://tryspotlight.ai/contact

Please include sufficient information for us to understand and respond to your request.

We will process privacy requests in accordance with applicable law.