Privacy Policy

1. Who we are

EchoRank (echorank360.com, the "Service") is operated by ChatLogic Insights Ltd, a company registered in England and Wales under company number 15593166 ("ChatLogic", "we", "us"). Registered office: as recorded on the Companies House register for company 15593166.

EchoRank is not available to residents of the United Kingdom (England, Scotland, Wales and Northern Ireland).

For any privacy matter, contact [email protected].

2. Our two roles

For data about you as a visitor or account holder (your name, email, billing details, usage of the Service), we act as the data controller.

For data your business uploads or collects through the Service about your own customers, such as contact lists, feedback, review requests and related records ("Customer Content"), we act as a processor (a "service provider" under US state laws) on your instructions. You remain the controller of Customer Content and are responsible for having a lawful basis and any required consents to submit it.

3. Data we collect

Account data: name, email address, business name, password (stored hashed).

Billing data: plan, transaction history. Card details are handled by our payment processor and never stored on our servers.

Usage and technical data: log data, IP address, browser type, pages viewed, cookie identifiers, and approximate location derived from IP for language and currency purposes.

Customer Content: whatever your business submits, typically end-customer names, email addresses, phone numbers, feedback and review data.

Public review data: reviews and business information collected from public platforms (for example Google) for the accounts and competitors you configure.

4. Why we process it and legal bases

To provide and secure the Service (performance of a contract); to bill you (contract and legal obligation); to improve and protect the Service, prevent abuse and measure performance (legitimate interests); to send service messages (contract) and, only with your consent where required, marketing messages; to comply with law (legal obligation).

For Customer Content we process only to provide the Service to you, under our agreement with you.

5. AI processing

Parts of the Service use artificial intelligence, for example sentiment analysis, response drafting and AI visibility checks. Relevant content may be transmitted to AI infrastructure providers, such as Anthropic, strictly to provide these features. We do not use your data to train our own models, and we configure providers so submitted content is used to deliver the requested output.

AI outputs can be inaccurate. Review them before relying on or publishing them.

6. Sharing and sub-processors

We share data only with providers needed to run the Service: Brevo (transactional email and SMS), Stripe (payments), Cloudflare (content delivery and security), Google (business and review data via its APIs), Anthropic (AI processing), and our hosting provider (servers located in the United States). Each is bound by contractual data-protection terms.

We may also disclose data where required by law, to protect rights and safety, or as part of a corporate transaction with equivalent protections. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. International transfers

The Service is hosted in the United States, and our providers may process data in other countries. Where data protected by UK or EU law is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, or an applicable adequacy decision.

8. Retention

Account and billing data are kept for the life of your account and as required afterwards for legal, tax and accounting purposes. Customer Content is kept while your subscription is active and deleted or returned following account closure, subject to a short backup cycle. Log data is kept for a limited period for security and diagnostics.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, hashed credentials and segregated infrastructure. No system is perfectly secure; notify us immediately of any suspected compromise of your account.

10. Your rights (EEA and UK)

If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where processing is based on consent. Contact [email protected] to exercise them.

You may lodge a complaint with your supervisory authority, including the UK Information Commissioner's Office (ico.org.uk) or the authority in your EU member state.

11. Your rights (United States)

Depending on your state (including California, Colorado, Connecticut, Texas, Virginia and others), you may have rights to know, access, correct and delete personal information, and to opt out of sale, sharing or targeted advertising. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information beyond what is necessary to provide the Service.

To exercise these rights, or to appeal a decision, contact [email protected]. We will not discriminate against you for exercising them. Authorised agents may submit requests with proof of authorisation.

12. Canada and Québec

For Canadian users, we comply with PIPEDA and, for Québec residents, with the Act respecting the protection of personal information in the private sector as amended by Law 25. You have the right to access and rectify your personal information, to withdraw consent, and, in Québec, to request cessation of dissemination or de-indexing and to receive computerised personal information you provided in a structured, commonly used technological format.

The person in charge of the protection of personal information is the company director, reachable at [email protected]. Personal information may be processed outside Québec and Canada, including in the United States and the United Kingdom, under contractual protections. Unresolved concerns may be addressed to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

13. Cookies

We use strictly necessary cookies (session, security, language and currency preference such as echorank_locale) and minimal performance measurement via Cloudflare. We do not use advertising cookies. You can control cookies through your browser; blocking essential cookies may break sign-in.

14. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data; if you believe a child has provided data, contact us and we will delete it.

15. Changes and contact

We may update this policy and will post the new version here with a revised date, with additional notice for material changes. Questions and requests: [email protected].