Privacy policy

Am I found? ("Am I found?", "we", "us") is a service of Am I Found LLC, 12169 Bracco St, Winter Garden, FL 34787. This policy explains what we collect when you use amifound.ai, app.amifound.ai and our emails (the "Service"), why, and the choices you have. Much of what the Service uses is about businesses rather than people and is public, such as Google Business Profile details, ratings, reviews, categories and search results. This policy also covers the personal information tied to your account, such as your name, email address, phone number and how you use the Service. Questions: support@amifound.ai.

1. What we collect

You give us:

• Free scan and contact forms: business name and town, the search you choose, your service area, email, name, and phone number if you add it. Agency forms also ask for your agency, website and number of clients.
• Account and billing: name, email, company, and the businesses, searches and team members you add. You sign in with a link we email you; if you choose to set a password, we store it only as a secure hash. Payments are handled by Stripe; we never see or store full card numbers. We keep your plan, invoices and payment status, and your email and text preferences.
• Photos and notes: photos you upload or add to the Google Drive folder we set up for you, anything you tell us for your Google posts (for example, news or offers in the "Anything happening this month?" box), your review reply settings, such as the name replies are signed with, and the business facts you save on your Setup tab (such as years in business, credentials, results and offers). If you ask, we suggest facts from your website for you to check; we only use the facts you save.
• Messages: what you send us by email or through the Service.

From Google, when you add us as a Manager of your Business Profile: your business locations, profile details (categories, services, hours, description, photos and posts), reviews and replies, and performance figures such as views, calls, website clicks, direction requests and the searches that showed your profile. Each daily read also compares a few profile details (name, categories, phone, website, hours, address, and whether Google has suggested edits) with the day before, so we can tell you when something changed. See section 5. If you choose to connect Google Search Console, we also read your website's clicks, appearances in search results, top searches and top pages once a week, using read-only access you can remove at any time.

Public search results: to scan your area we run Google Maps searches from points around your business and store the public results, including the names, ratings, review counts and categories of businesses that appear. This is information those businesses publish on Google.

Your website: we read the public pages of your website, including its sitemap, to check it and to choose links and topics for your Google posts.

From others: if you're a client of The Lightning Agency, the business and contact details it shares with us to set up your account. When you type your business name on our forms, we look it up through our search-data provider to find your Google listing.

Other people's information: some of what we handle is about other people: the names and words of people who review your business (already public on Google), team members you invite, and people who appear in photos you give us. We use reviews only to show them to you and to draft your replies, and we clear review text from our copies after 30 days. Please only invite people, or share photos of people, where you're allowed to.

Automatically: your IP address (stored as a one-way hash to stop abuse), browser and device type, pages visited, the sign-in cookies that keep you logged in, whether you open your free-scan results and click through to pricing or checkout (so we can follow up and let our team know you're interested), error details when something breaks, and, if analytics is on, analytics on how you use the website, including recordings of how you move, click and scroll on its pages (see section 6).

2. How we use it

• To run scans, build your Visibility Score, dashboard, weekly email, alerts and reports.
• On plans that include them, to draft and publish review replies and Google posts, choose photos for them, and suggest your weekly moves, using AI tools (see section 5).
• To send the results you asked for, account and billing messages, and service updates.
• To send marketing emails or texts only where you've agreed to them (see section 4).
• To prevent abuse and fraud, for example limiting free scans per business, email and IP address.
• To improve the Service, using aggregated or de-identified data that doesn't identify you; we won't try to re-identify it.
• To meet legal obligations and enforce our Terms.

We don't sell your personal information. We share it for advertising (through Google Ads or Meta tags, which are planned but not active yet) only if you allow marketing cookies; you can withdraw that any time with Cookie settings at the bottom of every page, and a Global Privacy Control signal turns it off (see section 6). Microsoft, which provides our Microsoft Clarity analytics, may also use the data it collects through Clarity for its own purposes, including Microsoft Advertising. Clarity runs only while analytics is on, so turning analytics off with Cookie settings, or sending a Global Privacy Control signal, stops it (see section 6).

If we want to use your information for a new purpose that doesn't fit this section, we'll ask you first. The Visibility Score and our suggestions rate how visible businesses are on Google; we don't use them, or anything else, to make decisions about people that have legal or similarly significant effects.

3. Who we share it with

Only with providers that help us run the Service, under contracts that limit their use to that purpose:

The Lightning Agency. Am I found? and The Lightning Agency are separate businesses under common ownership. If you ask for managed marketing services, are already a Lightning Agency client, or ask us to connect you with them, we may share the business and contact details needed to provide or discuss those services. Some Lightning Agency staff may also help with Am I found? support and operations, under confidentiality and data-handling obligations. We don't share Am I found? customer information with The Lightning Agency for any other purpose. If you join through an agency partner, that agency can see the data for the businesses it manages. Review replies and Google posts we publish for you appear publicly on your Google profile. We may share information with professional advisers, such as lawyers, accountants and insurers, under confidentiality. We may also share information if the law requires it, to protect anyone's safety or rights, or as part of a sale or merger of the business, in which case this policy continues to apply.

4. Emails, texts and calls

We send emails you've asked for (scan results, the weekly email, account notices). If you request a free scan, we may send up to five short follow-up emails about your results over 30 days. Every marketing email has an unsubscribe link, and we stop automatically if an email bounces or you mark it as spam. Texts are separate: we send marketing or informational text messages only if you tick the texting box under the phone field on our forms. It is never pre-ticked, it isn't a condition of buying, and we record the exact wording you agreed to, when and from where. If we later offer account texts (for example, alerts about your profile), you'll switch them on separately in your settings and they'll be used only for that purpose. We don't make automated or prerecorded calls. Reply STOP to stop texts or HELP for help. Message and data rates may apply.

5. Google user data

To read your Google Business Profile, you add our Google account (shown on your Setup tab) as a Manager of your profile. On every plan we use that access to read your profile, reviews and performance. On plans that include them, we also post review replies and Google posts the way you choose on your Setup tab: after you approve each one, or automatically if the business owner has ticked the consent box for it on the Setup tab (replies to 4 and 5 star reviews; posts in the posting mode you choose). We record who gave that consent, when, and the wording shown. We email you every review reply we publish, and list the posts we publish in your weekly email. Replies to 1–3 star reviews always wait for a person, and even with automatic replies on, the first 10 replies for each location wait for your approval. We use Google data only to show and improve your own dashboard, scores, emails and reports, and to carry out the actions you've chosen.

Facebook and Instagram. On plans that include it, you can connect your Facebook Page and the Instagram business account linked to it by signing in with Facebook on your Setup tab. We ask Facebook only for what publishing needs: the list of Pages you manage, the Page you pick, its Instagram account, and permission to publish posts to them. We store an access token for that Page, encrypted, and use it only to publish the posts you approve (or, if the business owner has ticked the consent box for it, posts in your automatic posting mode) and to check the connection still works. We don't read your messages, followers, insights or other content. Posts we publish appear publicly on your Page and Instagram account; each is listed on your posts page and in your weekly email. Disconnect at any time on the Setup tab, or remove Am I found? under Facebook's Settings → Apps and Websites: either way we delete the stored token and stop publishing. How to have your data deleted: amifound.ai/data-deletion. Facebook and Instagram are provided by Meta Platforms, Inc. under its own terms and privacy policy.

We tell you within two days of anything we change on your profile. Google Business Profile is a free Google product; our fees are for our service, not for the profile. See Google's tips on working with a third party.

Am I found?'s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, don't let people read it except with your consent, for security, or as the law requires, and don't use it to train general AI models. We refresh Google Business Profile data regularly and do not retain stored copies for more than 30 days. Historical ranking information generated through our search-data providers is separate and may be retained as part of your account history. You can disconnect at any time with Disconnect Google on your Setup tab, by emailing support, or by removing our account as a Manager in your Business Profile settings. Automatic replies and posts stop straight away, we remove our access within one business day (Google allows up to seven), and we delete the Google data we hold, except where the law requires us to keep it.

AI tools. We use AI from third-party providers (currently Anthropic, see section 3) to draft review replies, Google posts and weekly suggestions, and to describe your photos so we can match them to posts. We send it only what each task needs: the review, your business details and settings, your website pages and your photos. We use AI providers through commercial services that, under the terms applicable to our use, do not use our customer content to train their general models. Anything published automatically is checked first, for example for links, phone numbers or offers, and held for a person if it fails.

6. Cookies

What you see depends on where you are. In the US, analytics cookies are on when you arrive and a short notice tells you so; you can turn them off at any time. Advertising cookies stay off until you turn them on. Everywhere else, including the UK and EU, a banner asks first, and only the cookies needed to run the site are on until you choose. Either way, you can change your choice at any time with Cookie settings at the bottom of every page.

We use Google Tag Manager to load these tools, and Google's Consent Mode to pass on your choice. While analytics is off, Google may receive basic signals with no cookies and no identifier (for example, that a page loaded), which it uses to estimate visit counts.

Microsoft Clarity. We partner with Microsoft Clarity and Microsoft Advertising to see how you use our website, through behavioral metrics, heatmaps and session replay, so we can improve the site and our marketing. While analytics is on, Clarity records the pages you view on amifound.ai and how you move, click and scroll on them, using first- and third-party cookies and similar technologies. It isn't used in the dashboard at app.amifound.ai. Anything you type into our forms, along with email addresses and numbers on the page, is hidden before it leaves your browser. We don't use Clarity to build profiles of individual people. We can view recordings for 30 days. Microsoft also uses this data for site optimisation, fraud and security, and advertising; see the Microsoft Privacy Statement for how Microsoft collects and uses it. Turning analytics off with Cookie settings, or sending a Global Privacy Control signal, stops Clarity.

If analytics is on, our server also tells Google Analytics when you request a free scan, when it finishes and when you view it, linked to your analytics ID; Google is told it can't be used for advertising unless you allowed marketing. If analytics is off, our server sends Google Analytics nothing. Google Analytics keeps event-level data for 2 months and user-level data for up to 14 months. See how Google uses this data.

Other storage and scripts. In the dashboard, your browser remembers which map style you picked (dots or heat map) in local storage; it holds nothing else. Maps on our site and dashboard load from Google Maps (or CARTO if Google's map doesn't load), and our forms' bot check loads from Cloudflare; these providers receive your IP address and browser details to deliver them. You can remove cookies and local storage in your browser's settings; removing the needed ones signs you out.

Do Not Track and Global Privacy Control. There's no agreed standard for Do Not Track, so we don't respond to it. If your browser sends a Global Privacy Control signal, we treat it as turning off analytics and advertising cookies.

7. How long we keep it

• Free scan requests and results: 24 months, then deleted or anonymised.
• Account data and scan history: while your account is open, then deleted within 90 days of closing it.
• Photos: while your account is open, then deleted within 90 days of closing it. Photos already published on your Google profile stay there until you remove them.
• Google Business Profile data: no more than 30 days (see section 5).
• Records of what you agreed to (the Terms, consent boxes and texting consent, with the wording, time and place): while your account is open and up to 7 years after it closes or after your last free scan, so we can show what was agreed.
• Error logs: 90 days.
• Google Analytics: event-level data 2 months, user-level data up to 14 months (Google deletes it automatically).
• Microsoft Clarity: we can view recordings and heatmaps for 30 days; Microsoft's own use follows its privacy statement.
• Billing records: as long as tax law requires (usually 7 years).
• Backups: deleted information can stay in our database backups for up to 30 days, until they roll off.

8. Your choices and rights

You can ask to see, correct, export or delete your personal information, or to stop marketing, by emailing support@amifound.ai. We'll answer within 30 days. Depending on where you live (for example California, Virginia or Colorado), you may have further rights under local law, including the right not to be treated differently for using them. You can also email privacy@amifound.ai. We'll verify your request before acting on it, usually by asking you to confirm from the email address on your account. Someone you authorise can make a request for you if we can confirm they have your permission. If we turn down a request, you can ask us to look at it again by replying to our answer.

9. Security

We use technical and organisational safeguards designed to protect information, including encryption where appropriate, access controls and secure credential storage, and database rules keep each customer's data separate. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

10. Where data is stored

We're based in the United States and keep data with providers in the United States, some of which may also process it in other countries. If you use the Service from outside the U.S., your information is transferred to the U.S., where privacy laws may differ from yours.

11. Children

The Service is for businesses and isn't directed at anyone under 18. We don't knowingly collect children's information. If you think a child has given us information, contact us and we'll delete it.

12. Changes

If we change this policy materially, we'll email account holders and update the date above before the change applies.

13. Contact

Am I Found LLC, 12169 Bracco St, Winter Garden, FL 34787 · privacy@amifound.ai · support@amifound.ai