Privacy

Aureo tracks how AI assistants answer questions about brands. The service is operated by Front Tribe d.o.o., Cepin, Croatia, which is the data controller for everything described here. This page explains what we store, where it lives, and how to get it removed.

What we store

Account data (email address and authentication metadata), workspace and brand settings, the queries you track, and the answers we collect from AI engines. Raw engine answers are kept for 90 days; aggregated weekly metrics are kept indefinitely. For billing we store your Stripe customer reference, plan and billing status. Card numbers never reach us; Stripe processes them.

The traffic script, if you install it

The optional script you can place on your own site records, per visit, the referring host and whether the request came from a known AI crawler. It sets no cookie, stores no IP address, and never looks at the same visitor twice, so it builds no profile of anyone. You install it on a site you control, and where your law requires disclosure to your visitors, that disclosure is yours to make.

Where it lives

Databases and file storage run on Supabase in the European Union. Product analytics run on PostHog Cloud EU. Payments are handled by Stripe, email by Resend, and error reporting by Sentry. Each of these has a standard data processing agreement in place.

Cookies

We use strictly necessary cookies for signing you in, and a first-party analytics cookie that records page views and a fixed list of product events. Autocapture is switched off and we run no advertising pixels, so there is no consent banner.

AI engines

Tracked questions are sent to the configured AI providers through official APIs. For question suggestions, we send the selected question text and brand context to the configured processing provider, which may include OpenRouter and Google or OpenAI. Aureo does not use your data or results to train models.

Google Search Console connections

A workspace owner can connect Google with read-only Search Console access and choose a property for each brand. We store the connected account identity, granted permissions, encrypted connection credentials and selected property. We retrieve query performance for the dates and filters you request. Google query counts are kept separate from AI measurements.

Retrieved query previews are used to help you choose questions to track. Only after you request AI review do we send the selected, cleaned query text and brand context to the processing provider. Google clicks, impressions and connection credentials are not sent to that provider. Adopted questions retain their selected source context and retrieval date. We do not use Google data for advertising, sell it, or use it to train general-purpose models.

Owners can disconnect an account in Settings, Integrations. This removes its stored credentials and property mappings from that workspace. Previously adopted questions and their source history remain until removed with the workspace. You can also revoke Aureo access in your Google account settings.

What we do not do

We do not sell or rent personal data, we run no third-party advertising, and we collect nothing about your visitors beyond the aggregate counts described above.

Your rights

You can request access, correction, export or erasure at any time by writing to hello@aureoapp.ai. Erasure removes the workspace, its brands, prompts, answers and reports within 30 days, except records we must keep for accounting reasons. You can also complain to a supervisory authority; in Croatia that is AZOP.

Children and changes

The service is not directed at children under 16. If this policy changes materially, we email account holders and update the date above.