Privacy

We store your report brief, email address, payment reference, generated questions and collected answers to fulfil your order. Card details are handled by Stripe and are not stored by this application.

Service providers

The application runs on Vercel, with report and order data in a Neon database. Model requests pass through Vercel AI Gateway to the model providers listed in the methodology. Buyer questions include the supplied category, audience, use cases, market and language. Your billing email is not included in model prompts. Avoid putting confidential or personal information in the brief.

Transactional messages are sent through Resend from our verified sending domain. We send order confirmations, report updates, and recovery links; order and recovery addresses are not automatically added to marketing lists. Sending is configured in Resend’s EU region with encrypted transport.

Preview emails and vouchers

When you request your preview and voucher by email, we use your email to issue a personal Stripe promotion code and send it with a saved preview summary through Resend. A separate Stripe customer is created for that voucher. We record a keyed email hash to enforce one voucher per email, and encrypt the contact details and private links in our database. Cloudflare Turnstile and short-lived rate limits protect the form. If you request only a saved preview by email, we send that preview and the full-report details through Resend, without creating a Stripe customer or subscribing you to marketing. The queued message is encrypted and its content is removed after the email provider accepts it, or after 30 days if delivery fails. A keyed hash prevents duplicate emails for the same preview; delivery status is retained. Advertising measurement of this request requires your advertising consent.

Voucher reminders are optional and limited to one email the day before expiry, as shown on the form. We record your choice, its wording version and time. Each reminder includes a link to stop future reminders, and we check redemption before sending. Requesting a voucher does not subscribe you to a newsletter. Encrypted voucher contact details, preview snapshots and links are removed within 30 days after expiry; the keyed hash, consent history and redemption references remain for abuse prevention and accounting. Stripe and Resend retain their own service records under their policies. For deletion or other privacy requests, contact hello@shareofvoice.app.

Optional report follow-ups

If you enable report follow-ups from a finished report, we record your choice, its date and the disclosure version. We send one email a month after each latest one-off purchase, with a seven-day personal voucher in the report’s currency, while that choice remains active. New purchases reset the timing; monthly reporting, incomplete or refunded reports and unsubscribing suppress the email. There is no newsletter enrollment. Your report and the email link let you stop future follow-ups. Voucher contact details and links follow the encrypted storage and expiry cleanup described above; we retain the consent record to respect your preference.

Currency preference

Our hosting provider supplies an approximate country so we can suggest a currency. If you change currency, a functional cookie named sov_currency remembers your choice for up to one year. It contains only the currency code and is independent of advertising consent. Your confirmed order stores its agreed currency and amount.

Website suggestions and drafts

If you supply a website, we may read its public HTML and robots.txt to suggest brief details. No AI model is used for this step. Suggestions remain editable and need your review. Draft details are saved in your browser tab for up to 24 hours; approved checkout details remain with the order.

Free brand previews

Free previews store your website, confirmed business details, question and generated answers for 90 days. Anyone with the random preview link can view those details, answers and the sharing image. Do not include confidential or personal information. Questions go to the four model providers through Vercel AI Gateway; no email or card is required. Matching requests may reuse a saved result for 24 hours.

We use the network country supplied by our hosting provider to apply regional preview availability and limits. Selected operator network addresses may receive a higher allowance. A keyed hash of the requesting network address controls abuse and is cleared within two days by our maintenance job. Before a preview starts, Cloudflare Turnstile checks that the request comes from a browser; Cloudflare processes browser and network signals for this check under its own privacy policy. We count preview views, sharing actions and starts of paid briefs as events, not unique people. A preview identifier can be attached to an order and its Stripe metadata to measure purchases following a preview. Expired previews are deleted; hosting logs and any copies shared by visitors have separate lifetimes.

Private report links

Your browser locally saves report access links when you open checkout, so you can return through the Your reports page. Clearing browser storage removes that local list; it does not delete purchased reports.

Report links use a randomly generated access token. Anyone holding that link can view the report and its evidence; share it only with intended recipients. Reports exclude your billing email and card details. Links are not public search listings.

Email recovery links expire after 30 minutes and can be used once. Recovery creates a new private link and revokes previous links. Report links in transactional emails expire after 90 days; a fresh link can be requested through Your reports. Pending email content is encrypted in our queue and removed when the sending provider accepts it.

Optional summary sharing

Reports are private by default. The owner can create a separate 90-day link containing only the executive summary: brand, category, market, date, headline, provider counts, top options and repeat spread. Anyone with that link can view it. Raw answers, buyer questions, contact details and the private access link are excluded. The owner can revoke sharing; copies already downloaded cannot be recalled. Recovering owner access also revokes previous summary links.

We count sample and brief page loads in daily totals, and exports per report. These are event counts, not unique people. We do not add advertising cookies or cross-site tracking for these measurements.

Retention and operational data

If you arrive through a campaign link, we keep its campaign labels in your browser’s session storage and pass them with your order to Stripe. This helps us understand which campaigns lead to purchases. We also record confirmed order totals and campaign labels in Serge, our reporting service, to compare sources. These backend records are not forwarded to advertising platforms. We do not put your website, email, or payment details in those labels. No advertising pixel is used for this attribution.

Report and order data are retained while needed to provide the purchased report and handle support, refunds and applicable recordkeeping duties. Hosting providers may retain technical request logs. A short-lived hashed network identifier limits checkout abuse. Advertising measurement is optional, as described below.

Optional advertising measurement

If you choose “Allow”, we load the Serge measurement script and Google tag. Serge records visits using general page paths, campaign attribution and browser/session signals. Completed previews are recorded in Serge, separately from leads and purchases. Confirmed voucher requests, checkout starts and purchases can be shared with OpenAI through Serge. Confirmed purchases are also sent directly to Google Ads. Purchase events include a non-secret order reference, currency and the actual amount paid, including applicable tax and after vouchers. Google receives advertising click identifiers to connect purchases to ads. We do not send your email, entered website, report contents or private access links in these events. Google ad personalization and analytics storage remain disabled. No separate OpenAI pixel is installed.

We remember your choice in this browser for up to 180 days. Serge uses browser storage for consented measurement and delivery retries. Google may store advertising click identifiers in first-party cookies; we also keep consented click identifiers in this browser tab. The Google tag loads only after you allow measurement. You can decline or withdraw through Privacy settings in the footer; checkout and reports work without advertising consent. Withdrawal stops future advertising measurement, but does not recall events already received. Browser blocking and missing consent can leave measurement incomplete. Existing aggregate operational counts and payment records are separate from this optional measurement.

Operator and support

Superstellar LLC operates Share of Voice. For order support, refunds or privacy requests, contact hello@shareofvoice.app. Include your Stripe receipt reference; do not send your private report link unless requested.