Privacy Policy

Mercuric (https://mercuric.ai, together with its dashboards and client portals, the "Platform") is a proprietary software product operated by independent consultants ("Mercuric", "we", "us"). This policy explains what personal data we collect when you browse the website, request a free audit, contact us, or use the Platform as a client, and how we use, share and protect it. It should be read together with our Terms and Conditions. By using the Platform, you consent to the practices described here. If you do not agree, please do not use the Platform.

Free audit requests. Your website domain, work email address and country.

Contact and enquiries. Your name, email address, company (optional) and the message you send, along with our correspondence with you.

Client accounts. Name, email address and authentication details, managed through our authentication provider. We do not store your passwords ourselves.

Engagement data. Materials you share for the Services: brand documents, positioning inputs, website access and similar. We also collect publicly available data about your brand, such as your published website content and how AI platforms and search engines describe you, in order to run the analysis.

Technical data. IP address, browser and device information, pages viewed and similar usage data, collected through cookies and analytics tools when you use the website.

Payment details such as card numbers or banking credentials are not collected or stored by the Platform. Payments are settled directly against invoices through standard banking or payment channels.

If you choose to connect Google Analytics or Google Search Console to your dashboard, we access that data through Google's OAuth consent flow, use it only to power the reporting and analysis features you connected it for, and never sell it or share it beyond the service providers needed to operate the Platform. You can revoke this access at any time from your Google account settings. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• to run the free audit you requested and send you the report;
• to provide, operate and improve the Services and the Platform;
• to communicate with you about your audit, engagement, account or enquiry;
• to analyse usage of the website in aggregate so we can improve it;
• to keep the Platform secure and prevent abuse; and
• to comply with legal obligations.

If you have requested an audit or an engagement, we may follow up about it by email. You can opt out of non-essential communication at any time by replying or writing to us.

We may aggregate or de-identify data so that it can no longer be linked to you or your business, and use such data for any lawful purpose, including research, benchmarks and improving the Platform. De-identified data is not personal data and is not subject to this policy.

The Services use third-party AI providers (such as OpenAI, Google, Anthropic and Perplexity) to run analysis and generate content. Inputs needed for that work, which are largely business and public web data rather than personal data, may be processed by those providers under their own terms. We do not sell personal data to AI providers and we do not use your confidential engagement materials to train models made available to others.

We do not sell or rent personal data. We share it only with:

• Service providers that host and operate the Platform on our behalf: cloud hosting, authentication, email delivery, analytics and the AI providers described above, each limited to what they need to provide their service;
• Authorities, where disclosure is required by law, legal process or to protect rights, safety or the integrity of the Platform; and
• A successor, if Mercuric is transferred into or acquired by a legal entity, in which case this policy continues to apply to the transferred data.

The website uses cookies and similar technologies for essential functionality and for analytics that help us understand how the site is used. You can block or delete cookies in your browser settings; parts of the site may not work fully without them.

We operate from India and use global cloud providers, so your data may be processed on servers outside your own jurisdiction. Wherever it is processed, we handle it as described in this policy and take reasonable steps to ensure adequate protection.

We keep personal data only as long as needed for the purposes above: for the duration of your engagement or enquiry and a reasonable period after, or as required by law. On a verified request, we delete personal data within thirty (30) days, except where we must retain it for legal, dispute or security reasons.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023 (India) and, where it applies, the GDPR, you can ask us to:

• confirm what personal data we hold about you and access it;
• correct data that is inaccurate;
• delete your personal data;
• restrict or object to processing;
• withdraw consent you previously gave; and
• stop sending you marketing communication.

Write to support@mercuric.ai and we will respond within a reasonable period, and in any case within the time required by applicable law. Withdrawing consent does not affect processing that happened before the withdrawal, and may limit the Services we can provide.

We use reasonable technical and organisational measures appropriate to the data we handle: encrypted connections, access controls, reputable cloud infrastructure and third-party authentication. No system is perfectly secure, and transmission over the internet is at your own risk; we are not liable for breaches beyond our reasonable control, including those of third-party infrastructure providers. If we determine that a breach of our systems has exposed your personal data, we will notify you without undue delay.

The Platform is intended for business use and not directed at children. We do not knowingly collect personal data from minors; if you believe we hold any, write to us and we will delete it.

The website may link to third-party sites and platforms. Their privacy practices are their own; this policy does not cover them.

This policy applies only to personal data collected through the Platform. Unsolicited information you send us outside of a requested service, such as ideas or suggestions, is treated as non-confidential. If any part of this policy is held unenforceable, the rest remains in effect. Rights under this policy can be waived only in writing, and a delay in exercising a right is not a waiver of it.

We may update this policy from time to time by posting the revised version here with an updated date. Continued use of the Platform after a change means you accept the revised policy.

For any question, concern or grievance about privacy or data protection, contact support@mercuric.ai. We aim to resolve grievances within thirty (30) days of receipt.