Privacy Notice
Last updated: 5 May 2026
This notice explains how AI Marketing Lab(“we”, “us”) collects and uses personal data when you use our application at aimarketinglab.co.uk. We are the data controller for the personal data described below. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
AI Marketing Lab is an early-stage SEO and AI-search analytics product. During the soft-launch period we operate as a sole trader based in the United Kingdom. For privacy queries, please contact us at privacy@aimarketinglab.co.uk.
2. What we collect
- Account information. Email address, password (hashed by our auth provider), company name, your website URL, brand colour, profile photo (optional).
- Workspace settings. Google Search Console site URL and Google Analytics 4 property ID you connect to your account, list of competitors you add, and AI strategies you generate.
- Analytics data you authorise.When you connect Google Search Console or Google Analytics 4, we read aggregate metrics (clicks, impressions, sessions, page paths, query strings) on your behalf and display them in your dashboard. We do not store the underlying user-level data; we fetch it on demand via Google’s APIs.
- Usage data. Server logs of API calls you make, with timestamps and counts, used to enforce daily quotas and prevent abuse.
- Cookies.Strictly necessary cookies for login and session. Optional cookies for analytics and marketing only with your consent — see our cookie banner.
3. Why we use it (lawful basis)
- To deliver the service— performance of a contract (Art. 6(1)(b)). Provisioning your account, running searches, displaying your analytics, generating AI strategies you request.
- To keep the service safe— legitimate interests (Art. 6(1)(f)). Rate limiting, abuse detection, security logging.
- To send transactional emails— performance of a contract. Welcome emails, alerts you have configured (rank drops, etc.), weekly digest summaries.
- To send marketing emails— only with your separate consent. You can opt out at any time from any marketing email.
- To improve the product— legitimate interests, with analytics cookies set only after you consent.
4. Who we share it with
We use a small number of carefully chosen processors to run the service. They only process your data on our instructions and do not sell it.
- Supabase — database hosting and authentication (EU region).
- Vercel — application hosting (global edge network).
- Anthropic— AI model used to generate the strategies and recommendations you request. Your prompts and the generated outputs are sent to Anthropic. They do not train on your data under their commercial terms.
- Google— Search Console and Analytics 4 APIs (only the properties you connect).
- Google Trends— keyword demand signals. We send the keywords you query; we do not send personal data.
- Resend — transactional email delivery.
Some of these providers process data outside the UK. Where this happens we rely on the UK’s adequacy regulations (for the EEA) or on the UK Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
- Account data: while your account is active, plus 30 days after deletion to allow restore.
- Server logs and quota counters: 90 days.
- AI strategies: until you delete them or close your account.
- Email send logs: 12 months.
6. Your rights
Under UK GDPR you have the right to access your data, correct it, ask us to erase it, restrict or object to processing, and to data portability. You can exercise any of these rights by emailing privacy@aimarketinglab.co.uk.
If you believe we have not handled your data correctly, you can complain to the Information Commissioner’s Office (ICO).
7. Cookies
We use the following cookies:
- Strictly necessary — Supabase auth session cookies. Required for login.
- Preferences — theme mode and brand colour stored in localStorage.
- Analytics & marketing — only set if you opted in via the cookie banner.
You can change your cookie choice at any time by clearing the aiml-consent-v1 entry in your browser’s storage, or from the Settings → Privacy section in the app once we ship it.
8. Changes to this notice
We will post a notice in the app if we make material changes to this policy. The current version date is shown at the top of this page.