Privacy Policy

Last updated October 30, 2026

Who we are

NodellGraph is operated by NeuraCue LLC (“we”, “us”). This policy explains what personal information we collect when you use the NodellGraph website and service, why, and what control you have over it.

Questions or requests: .

What we collect

  • Account information — your name, email address, and the organizations you belong to, collected through our sign-in provider when you create an account or accept an invitation.
  • Billing information — handled by Stripe. Card details are entered on Stripe-hosted pages and never reach our servers. We store only Stripe's customer and subscription identifiers and your plan status.
  • What you track — brand names, domains, competitors, and the prompts you configure. This is business information about companies and products, not about you. Please don't put personal information about individuals into prompts.
  • Measurement results — the answers AI engines give to your prompts, and the mentions, rankings, sentiment, and citations we extract from them.
  • Usage information — pages you visit and features you use, collected by our product analytics provider. Once you're signed in, this is linked to your user ID, email, and organization.
  • Technical information — IP address, browser type, and error details, collected by our hosting and error-monitoring providers to run and secure the service. Our host also derives an approximate city from your IP address, which we show only as the example in a location field; it isn't stored.

How we use it

  • To provide the service: run your tracked prompts, compute visibility scores, and show you results.
  • To send you service email: run results, weekly digests, alerts, and billing notices.
  • To bill you for your subscription.
  • To understand how the product is used and improve it.
  • To keep the service secure, prevent abuse, and fix errors.
  • To comply with legal obligations, such as tax and accounting records.

We don't sell your personal information, share it for cross-context behavioral advertising, or use it to train AI models.

What AI providers receive

Measuring AI visibility means sending your tracked prompts to the AI engines being measured, through their official APIs. To analyze each answer, we also send it — along with the brand and competitor names you track — to an AI model that extracts mentions and rankings.

For Google AI Overviews and AI Mode, which Google offers no API for, we send your tracked prompts and your project's location (a city or ZIP code, if you set one) to a third-party search-data provider, which returns Google's results. It receives no customer personal information.

We don't send your name, email address, or billing details to AI providers. Their handling of API data is governed by their own commercial API terms.

Service providers

We rely on these providers to run NodellGraph. Each processes data only as needed for the purpose listed.

ProviderPurposeData involved
VercelApplication hostingAll data in transit through the app
SupabaseDatabaseAccount, project, and measurement data
ClerkSign-in and team managementName, email, organization membership
StripePayments and billingBilling contact, payment method, invoices
Trigger.devBackground job processingPrompts, brand names, AI answers
OpenAIAI engine measuredPrompt text
AnthropicAI engine measured; answer analysis; setup suggestions; writing starting promptsPrompt text, brand and competitor names, website, business description, product profile
PerplexityAI engine measuredPrompt text
GoogleAI engine measured (Gemini), when selectedPrompt text
DataForSEOGoogle search data (AI Overviews and AI Mode), when selectedPrompt text, project location
ResendTransactional emailEmail address, report contents
SentryError monitoringError details, browser type, and page URL
PostHogProduct analyticsPages viewed, user ID, email, organization

These providers are based in, or process data in, the United States.

Cookies and local storage

  • Essential — sign-in session cookies, required for the service to work.
  • Analytics — cookies and browser storage our product analytics provider uses to count visits and tell returning visitors apart. If you're in the European Economic Area, the UK, or Switzerland, none of this is stored or sent until you accept the analytics banner, and you can change that choice at any time:
  • Preferences — your light/dark theme choice, the product category you last picked (so onboarding can start from it), and your region for the analytics banner, stored only in your browser.

How long we keep it

  • Full AI answer text — 90 days, then deleted automatically. The mentions, rankings, and citations extracted from it stay with your project history.
  • Account, project, and measurement data — for as long as your organization exists. When an organization is deleted, we keep its data for 28 days in case the deletion was a mistake, then delete it automatically, including its stored reports.
  • Records of deletions and brand changes — when a project, prompt, or competitor is deleted, or a project's brand is changed, we record who did it, when, and enough to identify what changed (names, domains, and counts — never the text of your prompts). We keep these records for 2 years, or until your organization's data is deleted, if that's sooner.
  • Billing records — as long as tax and accounting law requires, even after your account is closed.
  • Backups — deleted data remains in our database provider's daily backups for up to 7 more days, until those backups expire.

When you ask us to delete your account, or delete your organization yourself, we delete your account and project data within 30 days, except records we're legally required to keep. If a legal claim or dispute involving your organization is pending, we may keep the related data until it's resolved.

Your choices and rights

You can ask us to access, correct, export, or delete your personal information by emailing . We'll respond within 30 days and may need to verify that the request comes from you.

Depending on where you live, you may have additional rights under laws such as the GDPR or California's CCPA — including the right to object to or restrict processing and to complain to your local data protection authority. We won't treat you differently for exercising any of them.

If you belong to an organization on NodellGraph, the organization's admins control its projects and membership. Requests about an organization's data may be referred to its admins.

Security

Data is encrypted in transit, access to production systems is restricted, and each organization's data is isolated from every other organization's. No system is perfectly secure; if a breach affects your personal information, we'll notify you as the law requires.

Children

NodellGraph is a business service and isn't directed to anyone under 18.

Changes to this policy

If we make a material change, we'll email account owners and update the date at the top of this page before it takes effect. See also our Terms of Service.