Skip to content
Primetra

DraftDraft. Not reviewed by counsel yet. Do not rely on this text until this banner is gone.

Legal

Privacy policy

Placeholder outline. The final policy replaces this page after legal review.

Who we are

Primetra is a product of Prime Signal. Legal entity and address: [To be completed with counsel].

Visitors to this site

Once it's switched on, this site runs our own collector, the same one we ship to customers. It records requests from AI agents and bots, and visits that arrive from an AI assistant's answer. For those visits we keep the time, the page path without its query string, the response status, size and timing, the user agent, the assistant's domain, the country and network, and a truncated, hashed IP prefix. Never the full IP of an ordinary browser. Every other visit is dropped on our server before anything is recorded.

We don't run ad trackers or analytics on this site. Our emails load fonts from Google Fonts, so Google sees your IP address when your mail app shows them.

If you run a free check, we store the domain, your email, a hashed prefix of your IP address (to limit abuse) and the result, for 12 months. We use your email to send a confirm link and then the result.

Customer data

For the data your collector sends, you're the controller and we act as your processor. For your account, billing, free checks, the emails we send and our own logs, we're the controller. A data processing agreement is in preparation.

Subprocessors

Supabase
Our database and sign-in. Stores workspaces, members' email addresses, the agent events your collector sends, free-check requests (the domain, your email and a hashed IP prefix) and the reports we build.
Cloudflare
Runs the endpoint your collector sends agent events to. Its queue briefly holds each event until we've classified it, including the full IP of a request that claims to be a known vendor bot, until we've checked it. Also runs Turnstile, the bot check on the free-check form, which sees the visitor's browser and IP address.
Vercel
Hosts this site and the app. Every page request passes through it.
Inngest
Runs our background jobs: checks, weekly reports and emails. Job messages carry record ids (and the recipient's address for welcome and invite emails), plus the results of each job step.
Stripe
Payments: Checkout and the billing portal. Stripe collects card and billing details itself; we keep the order, the Stripe customer and subscription ids, and which version of our terms you accepted.
Resend
Sends our emails, sign-in links included. It receives the recipient's address and the message, and tells us about bounces and complaints.
Google Fonts
Our emails load their fonts from Google. When your mail app shows them, Google sees your IP address, unless your mail app blocks remote content.
Sentry
Error reports from the app and our jobs. Each report is scrubbed before it leaves: emails, IP addresses, tokens, keys and query strings are removed, and no request or user details are sent. Reports from a visitor's browser go straight to Sentry, so Sentry sees that browser's IP address.
Anthropic
The buyer questions we ask about your category. When we set up a product profile (a free check or a new workspace), also the text of your public homepage, pricing and docs pages, to propose your category, competitors and questions. Each week, the facts behind your memo's headline: your product and competitor names, the week's aggregated metrics (answer shares, agent request counts, blocked, error and empty rates, the agents that connected, the tools they asked for) and the findings and fixes built from them, which can name pages on your site. It also drafts entries for our internal playbook from public vendor pages. Never the raw events, IP addresses or anything about the visitors to your site.
OpenAI, Google, xAI, Perplexity
The buyer questions we ask about your category, through their official APIs. Nothing from your collector.
Meta (Meta Model API)
Only while we run the Meta Model API source, which is shown on its own labelled line and is not counted in Share of Agent: the buyer questions we ask about your category, through Meta's official developer API, in Standard mode (Meta's terms say it does not train its models on Standard-mode requests). Nothing from your collector.
GitHub
Only if you connect a repository: the draft pull requests we open there, with the fix and its evidence.

How long we keep it, and your rights

Raw agent events: 45 days on Monitoring, 60 on Growth, 90 on done-with-you. Daily rollups: 25 months.

  • Free checks (the domain, your email, a hashed IP prefix and the result): 12 months.
  • Email delivery records (who we emailed, which email, whether it arrived): 12 months.
  • Sign-up and purchase step counts: 13 months. Our job logs: 13 months.
  • The audit log (view-as-client sessions and operator changes, deletions): 24 months.
  • Orders and payment records: kept as the law requires. The unsubscribe list: kept, so an unsubscribe keeps working.
  • Export your metrics any time from the app, as JSON or CSV. Raw events: ask us.
  • A workspace owner can request deletion any time in Settings. It's final after a 7-day grace period, and you can cancel it until then.
  • When you request deletion we stop your subscription's renewal right away; if Stripe is unavailable, we retry daily. If you cancel the request, renewal is switched back on.
  • At the end of the grace period we delete the workspace's data, cancel the subscription, and remove sign-ins that belong to no other workspace. Refunds: [To be completed with counsel].
  • We keep order records as the law requires, our own cost records, and an audit entry saying the workspace was deleted. Copies held by our providers and in database backups expire on their own schedules.

For anything else about your data, email privacy@primetra.ai.