Privacy Policy

Effective August 26, 2026

This Privacy Policy explains how Story Line SL, operating as Answerworthy (“Answerworthy”, “we”, “us”), collects, uses, stores, and protects information when you use our service at answerworthy.ai and app.answerworthy.ai: running website scans, creating an account, tracking brands, and optionally connecting your Google Analytics or Google Search Console accounts.

This policy is written to be read plainly and is provided for transparency. It is not legal advice.

Answerworthy helps website owners understand how visible their site is to AI answer engines and search. The short version: we measure public websites and public AI answers; we keep the personal information we hold about you to the minimum the service needs; we do not sell your data; and you can ask us to delete your personal data at any time.

Your account

When you create an account we store your email address and your sign-in method. Sign-in works with Google, with an email link, or with a password; passwords are handled and stored in hashed form by our authentication provider (Supabase), and we never see or store them in plain text. We also store the settings and preferences you choose in the app, and records of what your account has run (scans, measurements, purchases).

Payments and billing

Payments are processed by our merchant of record, Polar. Your card details go directly to Polar and its payment processors; we never receive or store card numbers. We store the identifiers needed to connect your account to its purchases and subscription status, and Polar provides us your billing records (what was bought, when, and the billing email).

Information you provide about brands

When you track a brand you give us business information about it: its name, website, industry, name variants, competitors, and, where relevant, public business details such as a company phone number or address. This is business information about the organization being measured, and we use it to run the measurements you asked for. Where it was researched automatically, you review and correct it before it becomes part of your brand.

Website scans and AI measurement data

The core of Answerworthy is measuring publicly available information: how public websites are built, and how AI answer engines respond to prompts about them. When you run a scan or track a brand, we generate and store this measurement data ourselves: the public pages we fetch (their URLs, HTML, extracted text, and page screenshots), scan results, readiness checks, and the answers AI engines give to the prompts we send them.

To produce these measurements, we send prompts about the measured brand to AI providers (such as OpenAI, Anthropic, Google, and Perplexity). We design those prompts to carry business and website information of the kind described above, not your account profile. Because you enter the brand details yourself, please do not put sensitive personal information into brand fields.

This measurement data is primarily about public websites and public AI answers rather than about you as a person. Public information can still relate to or identify an individual (for example, a sole trader whose name is their brand), so where any of it is personal data we handle it under this policy. We retain measurement data as part of our measurement index, including after you remove a brand from your account or stop using the service, and we may use it in aggregated, anonymized form for industry research, benchmarks, and statistics (for example, how often certain kinds of content get cited by AI engines). Aggregated research does not identify you or your account.

Removing a brand from your account permanently removes your access to its tracked data. Your own scan history remains available in your account under My scans.

Google user data we access (optional connections)

Connecting Google is optional. When you choose to connect an account, you grant these read-only permissions:

• Google Analytics (analytics.readonly) — we read aggregate reporting data for the Analytics property you select: traffic source and medium, sessions, users, key events, and revenue totals, by day. We do not access individual visitor identities.
• Google Search Console (webmasters.readonly) — we read aggregate Search Analytics for the property you select: search queries, pages, device, clicks, and impressions, by day.

Both permissions are strictly read-only. We request no access to Gmail, Drive, Contacts, or any other Google service. We never write to, modify, or delete anything in your Google account.

We use the data you authorize solely to provide the service's core features:

• Show you which traffic sources, including AI answer engines, send visitors to your site.
• Surface the real search queries your site appears for, to guide content decisions.
• Track these metrics over time so you can measure changes in your AI and search visibility.

We do not use your Google data for advertising, and we do not use it to train machine learning or AI models.

Google API Services Limited Use disclosure

Answerworthy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer or use this data for serving advertisements, and we do not allow humans to read the data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.

How we use AI

Answerworthy uses AI models to run parts of the service: scoring readiness checks, analyzing how AI answer engines respond to prompts about measured brands, and generating the reports you request. We design the data sent to AI providers for these features to be business and website information about measured brands, as described above, rather than your account profile. We do not use your personal data to train our own or anyone else’s AI or machine-learning models, and we do not sell personal data for AI training.

How we store and protect it

Your data lives in our database and file storage hosted on Supabase, with servers operated by our infrastructure providers in the United States and Europe. For connected Google accounts we store a secure authorization token (a refresh token) so we can pull updated reports on your behalf, plus the daily aggregate figures described above. Data is encrypted in transit and at rest, and access is limited to the operation of the service. We do not sell your data, and we do not share it with third parties except the service providers strictly required to run the product: hosting, database, and content-delivery infrastructure (including Supabase and Cloudflare), payment processing (Polar), email delivery (Amazon SES), product and site analytics (PostHog, and Google Analytics through Google Tag Manager), and the AI providers we query as described above.

Device and log data

Like most web services, when you visit our pages or use the app we automatically receive technical data: your IP address, browser and device type, and standard server logs of requests. We use it to operate, secure, and debug the service and to prevent abuse, and we keep it for a limited period.

Analytics and cookies on our own pages

We use cookies to keep you signed in. To understand how the service is used and to improve it, our pages load Google Tag Manager with Google Analytics, and PostHog, a product analytics service. PostHog records usage events (pages viewed, features used, scans run) and session replays: a reconstruction of how you interact with our pages, such as clicks and scrolling. Text you type into form fields is masked and is not captured in replays. For signed-in users this data is associated with your account email; for visitors it is associated with an anonymous identifier.

This data is processed and stored in the United States, is used only to operate and improve the service, and is never sold or used for advertising. It is separate from, and never combined with, the Google reporting data described above. If you would like the analytics data we hold about you deleted, email us at hello@answerworthy.ai and we will delete it promptly.

To understand which marketing channels bring visitors, we also set a first-party cookie (aeo_attr) that lasts up to 90 days. It records advertising click identifiers from Google, Meta, LinkedIn, and Reddit (gclid, fbclid, li_fat_id, rdt_cid) and UTM campaign parameters from the address you arrive with, the page you first landed on, and the site that referred you. For a visitor this record is anonymous; if you later create an account, we associate it with your account so we can see how you found us. These analytics and attribution cookies load without a separate consent banner today. If your local law requires prior consent for non-essential cookies and you would like them cleared, email us and we will honor it.

Emails we send

We send service emails through Amazon SES: sign-in links, receipts and purchase deliveries, and reports you request or that your account’s measurement schedule produces. Product update emails, if we send them, always include a way to opt out; service emails that are part of using the product (like a sign-in link you requested) do not.

Data retention and deletion

Deletion is handled manually, on request: email us at hello@answerworthy.ai and we will action it within a reasonable time (we aim for 30 days). You can also disconnect a Google account at any time from within the app, which revokes our stored token, or revoke access directly from your Google Account’s third-party access settings.

When you ask us to delete your account, we remove your account details, email, settings, and the connected-account data described above. Two honest exceptions apply. First, some billing and transaction records are kept where we are legally required to keep them, for tax, accounting, and fraud or dispute handling, and Polar, our merchant of record, holds its own record of your purchases that we cannot delete on your behalf. Second, measurement data about public websites and public AI answers (see “Website scans and AI measurement data”) stays in our measurement index; to the extent any of it is personal data that relates to you, you can ask us to remove or de-identify those parts.

Your rights

You can ask us at any time what personal data we hold about you, ask us to correct it, or ask us to delete it. Email hello@answerworthy.ai and we will respond promptly. If we decline a request, we will tell you why, and you can appeal by replying to our response; a different person will review the appeal. Depending on where you live, these rights may also be backed by law (such as the GDPR or CCPA); we honor them for everyone regardless.

Children

Answerworthy is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by an updated effective date at the top of this page.

Contact

Questions about this policy or your data? Email hello@answerworthy.ai.