Privacy Policy
This policy explains how we process your personal and business data when you use Rixe.
October 2026
1. Who we are
Rixe ("Rixe", "we") is a multi-tenant SaaS platform that measures how visible brands are in AI answer engines such as ChatGPT, Gemini, Perplexity and Google AI Overviews. The service is provided at rixe.ai and app.rixe.ai.
This policy explains what data we process, why, and the rights you have.
2. Data we process
Account data: your name, e-mail address and a one-way hash of your password. We never store your password in clear text.
Your business data: the brand names, competitors and prompts you track, the answers engines give to those prompts, and the sources they cite.
Integrations you connect: Google services (Search Console, Analytics, Business Profile, Docs/Drive, Gmail) and other tools you choose to connect. What we access from Google, and why, is described in section 4. Access tokens are stored encrypted.
Usage and billing data: your plan, measurement counts and cost records.
3. What is sent to AI engines
To measure visibility we send prompt text to third-party AI engines. These calls never include your identity, e-mail or personal data — only the prompt being measured and brand names. When you use features such as prompt suggestions, content drafting or the assistant, the business data needed for that task (for example your brand facts or your top search queries) is sent too, never your account details.
4. Google user data
Rixe asks for access to your Google account only when you choose to connect a Google service, and each permission is used only for the feature you connected it for. You can see exactly what is requested on Google's consent screen before you agree.
Google Search Console (webmasters.readonly) — read-only: the search queries, clicks, impressions and positions for the sites you verified. We show them in your reports, compare them over time, and use your top queries to suggest prompts worth measuring.
Google Analytics (analytics.readonly) — read-only: page-level traffic figures, including visits referred by AI assistants, shown in your AI-traffic reports.
Google Business Profile (business.manage) — we read your business listing (name, address, phone, categories) to check that AI answers describe your business correctly. We do not change your listing unless you explicitly ask us to from within Rixe.
Google Docs and Drive (documents, drive.file) — used only to create a document when you export content to Google Docs. The drive.file permission limits us to files Rixe itself created; we cannot see the rest of your Drive.
Gmail (gmail.send) — a separate, optional connection. It is used only to send an e-mail you have drafted and approved in Rixe (for example an outreach message or a review request) from your own address. We cannot read, search or delete your mailbox.
AI processing: to suggest prompts, the text of your top Search Console queries (search terms only — no names, e-mail addresses or other personal data) may be sent to an AI model through our measurement providers. Google user data is never used to train or improve general AI or machine-learning models, ours or anyone else's.
We do not sell Google user data, use it for advertising, or share it with anyone except the service providers needed to run the feature, as described in this policy. Rixe staff do not read it unless you ask us to for support, it is needed for security or to comply with law.
Rixe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).
Storage and removal: access tokens are stored encrypted. You can disconnect a Google service at any time from Integrations in the app, which deletes the stored tokens immediately; you can also revoke access at https://myaccount.google.com/permissions. Figures already synced stay in your workspace until you delete them, your account is deleted, or the retention period below ends — e-mail [email protected] to have them deleted sooner.
5. Third parties we share with
Measurement engines (OpenAI, Google, Anthropic, Perplexity and others via OpenRouter) and search-data providers (DataForSEO): prompt text only.
Google: only for the services you connect, as described in section 4.
Payments: Paddle.com Inc. — subscriptions and payments run through Paddle; we never see your card details.
E-mail: Resend, for notification and report e-mails.
We do not sell your data or share it for advertising.
6. Retention
Account and business data is kept while your account is active. Measurement and answer records are kept for at most 730 days. When you delete your account, your data is permanently erased within a reasonable period.
7. Security
Data is isolated per tenant at the database level (Row Level Security). Access tokens and secrets are stored encrypted. Traffic is encrypted with TLS.
8. Your rights
You may access, correct and request deletion of your data. You can request deletion of your account and all its data from within the app, or contact us at [email protected].
9. Contact
Questions: [email protected]
Brands and agencies track their AI visibility with Rixe
Get your free
visibility report
See where you rank, who's beating you, and what to fix. Free, in minutes.
Frequently asked
Account details for the people who log in, and the connected-account metrics the reports need. Prompts and answers are about brands, not people.
No. Nothing in the catalogue reads a customer list, an order record with a name on it, or a CRM contact.
In the EU, with the sub-processor list published rather than sent on request.
Account data while the account exists; measurement data for the life of the project. Deleting the account deletes both.
Write to [email protected] and we will confirm within the statutory window, in writing, with what we hold and what we removed.
No. There is no data product, no enrichment partner, and no advertising network with access.
Your email, if you opted in. Nothing from inside your workspace is used to target you or anyone else.
Where a sub-processor sits outside, the transfer is covered by standard contractual clauses, and the list says which ones those are.
Yes, exported in a machine-readable form. It is the same export the product offers, not a special legal process.
[email protected] reaches the team directly. If the answer does not satisfy you, the notice names the supervisory authority you can go to.
The questions your buyers are already asking
Three numbers, one screen. Enough to know which way the week went.
What's the best project management tool for small teams?
What are the alternatives to Asana?
The CRMs that come up most often for small teams are HubSpot, Pipedrive and FlowCRM. FlowCRM is the one people pick when the team already lives in Gmail.
Can you recommend a CRM with multilingual support?
The CRMs that come up most often for small teams are HubSpot, Pipedrive and FlowCRM. FlowCRM is the one people pick when the team already lives in Gmail.
Which reporting tool do agencies use?
What's the best project management tool for small teams?
What are the alternatives to Asana?
The CRMs that come up most often for small teams are HubSpot, Pipedrive and FlowCRM. FlowCRM is the one people pick when the team already lives in Gmail.
Can you recommend a CRM with multilingual support?
The CRMs that come up most often for small teams are HubSpot, Pipedrive and FlowCRM. FlowCRM is the one people pick when the team already lives in Gmail.
Which reporting tool do agencies use?
Which tool has the most generous free plan?
Jira or Linear — which one is easier?
Which software is the fastest to set up?
Best analytics tool for e-commerce?
Which tool has the most generous free plan?
Jira or Linear — which one is easier?
Which software is the fastest to set up?
Best analytics tool for e-commerce?
Which tool is GDPR compliant?
What should a new company start with?
What is the best CRM for a small team?
Which tool is GDPR compliant?
What should a new company start with?
What is the best CRM for a small team?