IQRush is precision measurement infrastructure for probabilistic AI models. We measure and verify how brands, products, domains, and sources appear inside generative AI answer engines, and we report those measurements with statistical confidence so our customers act on decision-grade data. This policy covers the data we handle to deliver that service.

If you connect IQRush to an AI assistant, the section “AI assistant connectors” below describes exactly what the connector does and does not access. You can review this policy before you connect.

A Controller and processor roles

This Privacy Policy describes the personal information for which IQRush is the controller: information from our website, account sign-up, billing, marketing, support, and the operation of the Services.

When we process personal information contained in your measurement projects and account in order to deliver the platform to you, we generally act as a processor on your behalf, and you are the controller. That processing is governed by our Data Processing Agreement and your customer agreement, not by this Privacy Policy. You are responsible for having a lawful basis to provide that information to us.

1. Who this policy applies to

The Services are built for businesses: brands, agencies, publishers, and enterprise teams. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us personal information, contact us at privacy@iqrush.ai and we will delete it.

2. Information we collect

We collect only the information needed to provide and secure the Services. We do not gather data “just in case.”

Account and contact information

When you or your organization create an IQRush account, we collect identifiers such as name, work email address, company name, role, and authentication identifiers. If you connect through an AI assistant, we receive the OAuth identity and workspace or account identifiers needed to authenticate you and route your request to the correct workspace.

Configuration and request data

To run a measurement, we process the inputs you or your authorized AI assistant submit: project names, topics, brand and product terms, competitor names, owned domains, the query parameters of a specific request, and similar business configuration. This is data about your brand and market, not about individual consumers.

Measurement data we generate

When we run your query set against answer engines, we capture and store the resulting responses, the statements within them, brand and product mentions, cited URLs and domains, sentiment classifications, and the statistical artifacts (confidence intervals, segmentation, run diagnostics) we compute from them. This is market-wide data about a topic; it is not collected from or about identifiable individuals.

Usage and device information

When you use the website or platform, we collect standard log and device information such as IP address, browser type, pages viewed, and timestamps, used to operate, secure, and improve the Services. We use only the coarse, system-provided location associated with this data. We do not collect precise location (GPS coordinates or street addresses), and our AI assistant connectors do not request location at all.

Cookies and similar technologies

We and our providers use cookies and similar technologies for authentication, security, preferences, and basic analytics. You can control non-essential cookies through your browser or any cookie banner we provide. The categories we use:

Billing information

If you purchase a paid plan, payments are processed by a third-party PCI-compliant payment processor. We receive limited billing details (such as the last four digits of a card and billing contact) but we do not collect or store full payment card numbers ourselves.

Support communications

If you contact support, we keep the messages and contact details you provide so we can help you.

3. Information we do not collect

We have designed the Services, and especially the AI assistant connectors, to avoid sensitive and unnecessary data:

• We do not collect or process payment card data subject to PCI DSS through the connectors.

• We do not collect protected health information (PHI).

• We do not collect government identifiers such as Social Security, passport, or national ID numbers.

• We do not collect access credentials or authentication secrets such as passwords, API keys, or one-time codes through the connectors.

• We do not collect special-category or “sensitive” personal data unless it is strictly necessary for a feature you have chosen to use, you have given any legally required consent, and the collection is clearly disclosed to you before it happens.

• We do not run surveillance, behavioral profiling, or undisclosed tracking of individuals.

4. How we use information

We use the information above to:

• Authenticate you and provide the measurement, analysis, reporting, and experimentation features you request;

• Run query sets, generate measurements, and return results with confidence intervals and diagnostics;

• Operate, maintain, secure, and improve the Services, including troubleshooting and preventing fraud and abuse;

• Communicate with you about your account, support requests, and material changes to the Services or this policy;

• Comply with our legal obligations and enforce our Terms of Service.

We do not sell personal information. We do not use the contents of your measurement projects to build advertising profiles, and we do not serve advertising in the Services.

5. Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information only where we have a valid legal basis:

• Consent: for example, to send marketing communications or to set non-essential cookies, where you have consented.

• Contractual necessity: to provide the Services you have requested and to respond to your inquiries.

• Legal obligation: to comply with tax, accounting, and other legal requirements.

• Legitimate interests: to secure, analyze, and improve the Services, where those interests are not overridden by your rights. You may object to this processing as described below.

6. How we share information

• Service providers (sub-processors). We use vetted vendors to host and operate the Services, for example cloud infrastructure and storage, authentication, payment processing, and customer support tooling. They may process information only on our instructions and under contractual confidentiality and security obligations. Our current sub-processors are listed at iqrush.ai/legal/subprocessors.

• Answer-engine providers. To measure AI visibility, the Services submit your query sets to third-party answer engines (for example ChatGPT, Perplexity, Gemini, Copilot, Claude, and Mistral). These submissions contain topic and brand terms you configure, not your end customers’ personal data. Each provider’s handling of those queries is governed by its own terms and privacy policy.

• At your direction. When you connect IQRush to an AI assistant, we exchange the data needed to fulfill your request with that assistant’s platform, as described below and in that platform’s own privacy policy.

• Legal and safety. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and security of our users, IQRush, or others.

• Business transfers. If IQRush is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

7. AI assistant connectors (Claude and ChatGPT)

This section describes the IQRush connectors that operate inside Anthropic’s Claude and OpenAI’s ChatGPT.

What the connector accesses

The connector accesses only your IQRush account data and the specific request parameters needed to answer your question (for example, a project name, a run, a metric, a domain, or a date range). It returns only the measurement data relevant to that request.

What the connector does not access

The connector does not read, store, log, query, reconstruct, or infer your conversation with the AI assistant. It does not access the assistant’s memory, chat history, conversation summaries, prior messages, or any files you upload to the assistant. It operates only on the explicit inputs the assistant sends for a given request, and it does not retain that conversation context for logging or any other purpose. It does not pull broad context “just in case,” and it does not return diagnostic identifiers (such as session, trace, or request IDs) unless they are strictly required to fulfill your request.

Authentication

Connections that access your account use OAuth 2.0 with certificates from recognized authorities. We receive only the identity and scope needed to serve your workspace.

Read and write actions

Most connector tools are read-only and retrieve measurement data without changing anything. A small number of tools can create resources in your IQRush account (for example, creating a new measurement project or saving a baseline). These write actions are clearly labeled, are taken only at your request, and are surfaced by the AI assistant for your confirmation before they run. The connector does not transfer money, move financial assets, or execute financial transactions.

Disclosure at connection

The first time you connect, the AI assistant platform shows you what categories of data may be shared with IQRush and links to this policy so you can review it before connecting.

8. Data storage, security, and retention

Storage. We store information on infrastructure operated by reputable cloud providers, with access limited to personnel who need it to run the Services.

Security. We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls, and logging. We redact secrets and unnecessary personal data from our logs. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to security issues. To report a security concern, see iqrush.ai/legal/security or email security@iqrush.ai.

Retention. We keep information only as long as needed for the purposes in this policy:

• Account and contact information: for the life of your account and for up to 12 months after closure, unless a longer period is required by law.

• Measurement and configuration data: for as long as your account retains the associated projects and runs, or until you delete them, after which we delete or de-identify the data within 90 days.

• Logs and usage data: up to 12 months.

• Support communications: up to 24 months.

When we no longer need information, we delete it or de-identify it. We honor verified deletion requests promptly, subject to legal retention obligations.

9. Your choices and rights

You can unsubscribe from marketing emails using the link in those emails; you will still receive administrative messages about your account. Depending on where you are located, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent you previously gave. EEA and UK residents also have the right to lodge a complaint with a supervisory authority. To exercise these rights, or to ask what sub-processors we use, contact privacy@iqrush.ai. We may need to verify your identity first, and some rights are subject to legal exceptions.

You can disconnect an AI assistant connector at any time from within that assistant’s settings, which stops further data exchange between that assistant and IQRush.

There is no common standard for responding to browser “Do Not Track” signals, so we do not respond to them. Because we do not sell or share personal information, there is nothing to opt out of in that respect.

10. International data transfers

We are based in the United States and process information there and in other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers of personal data, such as the European Commission and UK-approved Standard Contractual Clauses.

11 .Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and, where required by law, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

12. Contact us

IQRush, LLC
300 Lenora Street, #719, Seattle, WA 98121, USA
Privacy: privacy@iqrush.ai
Support: support@iqrush.ai
Security: security@iqrush.ai