Politique de confidentialité

1. Who we are

Rixe ("Rixe", "we") is a multi-tenant SaaS platform that measures how visible brands are in AI answer engines such as ChatGPT, Gemini, Perplexity and Google AI Overviews. The service is provided at rixe.ai and app.rixe.ai.

This policy explains what data we process, why, and the rights you have.

2. Data we process

Account data: your name, e-mail address and a one-way hash of your password. We never store your password in clear text.

Your business data: the brand names, competitors and prompts you track, the answers engines give to those prompts, and the sources they cite.

Integrations you connect: Google services (Search Console, Analytics, Business Profile, Docs/Drive, Gmail) and other tools you choose to connect. What we access from Google, and why, is described in section 4. Access tokens are stored encrypted.

Usage and billing data: your plan, measurement counts and cost records.

3. What is sent to AI engines

To measure visibility we send prompt text to third-party AI engines. These calls never include your identity, e-mail or personal data — only the prompt being measured and brand names. When you use features such as prompt suggestions, content drafting or the assistant, the business data needed for that task (for example your brand facts or your top search queries) is sent too, never your account details.

4. Google user data

Rixe asks for access to your Google account only when you choose to connect a Google service, and each permission is used only for the feature you connected it for. You can see exactly what is requested on Google's consent screen before you agree.

Google Search Console (webmasters.readonly) — read-only: the search queries, clicks, impressions and positions for the sites you verified. We show them in your reports, compare them over time, and use your top queries to suggest prompts worth measuring.

Google Analytics (analytics.readonly) — read-only: page-level traffic figures, including visits referred by AI assistants, shown in your AI-traffic reports.

Google Business Profile (business.manage) — we read your business listing (name, address, phone, categories) to check that AI answers describe your business correctly. We do not change your listing unless you explicitly ask us to from within Rixe.

Google Docs and Drive (documents, drive.file) — used only to create a document when you export content to Google Docs. The drive.file permission limits us to files Rixe itself created; we cannot see the rest of your Drive.

Gmail (gmail.send) — a separate, optional connection. It is used only to send an e-mail you have drafted and approved in Rixe (for example an outreach message or a review request) from your own address. We cannot read, search or delete your mailbox.

AI processing: to suggest prompts, the text of your top Search Console queries (search terms only — no names, e-mail addresses or other personal data) may be sent to an AI model through our measurement providers. Google user data is never used to train or improve general AI or machine-learning models, ours or anyone else's.

We do not sell Google user data, use it for advertising, or share it with anyone except the service providers needed to run the feature, as described in this policy. Rixe staff do not read it unless you ask us to for support, it is needed for security or to comply with law.

Rixe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

Storage and removal: access tokens are stored encrypted. You can disconnect a Google service at any time from Integrations in the app, which deletes the stored tokens immediately; you can also revoke access at https://myaccount.google.com/permissions. Figures already synced stay in your workspace until you delete them, your account is deleted, or the retention period below ends — e-mail [email protected] to have them deleted sooner.

5. Third parties we share with

Measurement engines (OpenAI, Google, Anthropic, Perplexity and others via OpenRouter) and search-data providers (DataForSEO): prompt text only.

Google: only for the services you connect, as described in section 4.

Payments: Paddle.com Inc. — subscriptions and payments run through Paddle; we never see your card details.

E-mail: Resend, for notification and report e-mails.

We do not sell your data or share it for advertising.

6. Retention

Account and business data is kept while your account is active. Measurement and answer records are kept for at most 730 days. When you delete your account, your data is permanently erased within a reasonable period.

7. Security

Data is isolated per tenant at the database level (Row Level Security). Access tokens and secrets are stored encrypted. Traffic is encrypted with TLS.

8. Your rights

You may access, correct and request deletion of your data. You can request deletion of your account and all its data from within the app, or contact us at [email protected].

9. Contact

Questions: [email protected]