1. Introduction
Fogtrail Pty Ltd ("FogTrail", "we", "us", or "our") operates the FogTrail platform at fogtrail.ai (the "Service"). FogTrail is an Answer Engine Optimization (AEO) platform that helps businesses improve their visibility and citations across AI-powered search engines.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By accessing or using FogTrail, you acknowledge that you have read and understood this Privacy Policy.
If you have any questions, please contact us at ming@fogtrail.ai.
2. Information We Collect
2.1 Account Information
When you create an account, we collect information through Google OAuth authentication, including your:
- Name
- Email address
- Profile image
We do not collect or store your Google account password. Authentication is handled entirely through Google's OAuth 2.0 protocol.
2.2 Business Data You Provide
In the course of using the Service, you may provide us with business information, including:
- Search queries you wish to monitor across AI search engines
- Product and business descriptions, including your website domain
- Strategy documents and competitor analysis
- Content you create or edit, such as blog articles and forum posts
2.3 Data We Generate on Your Behalf
As part of providing the Service, we generate and store the following data:
- Citation snapshots from AI search engines (Perplexity, ChatGPT, Grok, Gemini, and Claude)
- Intelligence briefing reports identifying citation gaps and opportunities
- Content plans and optimization strategies
- AI-generated content drafts
- Credit usage records
2.4 Third-Party Integration Data
If you connect third-party platforms (such as Contentful or Reddit), we store:
- OAuth tokens required to publish content on your behalf (encrypted at rest)
- Metadata about content published through these integrations
2.5 Automatically Collected Information
When you access the Service, we automatically collect standard server log information, including:
- IP address
- Browser type and version
- Pages visited and access times
We do not currently use any third-party analytics or tracking tools.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Monitor AI search engines for citations of your products and brand
- Generate intelligence briefings and optimization strategies
- Generate and publish content on your behalf
- Process credit usage and manage your subscription
- Communicate with you about your account, updates, and service changes
- Improve and develop new features for the Service
- Comply with legal obligations
4. Third-Party Services and Data Sharing
4.1 AI and Search Providers
To check citations and generate intelligence briefings, we send your monitored queries to the following AI search providers:
- Perplexity AI
- OpenAI (ChatGPT)
- xAI (Grok)
- Google (Gemini)
- Anthropic (Claude)
Your queries and related business context may be processed by these providers in accordance with their respective privacy policies. We send only the minimum information necessary to perform citation checks and content generation.
4.2 Content Platforms
When you connect third-party content platforms (such as Contentful or Reddit), content is published to those platforms only at your explicit direction. Your use of these platforms is subject to their respective terms and privacy policies.
4.3 Infrastructure Providers
We use the following infrastructure services:
- Neon — PostgreSQL database hosting
- Vercel — Application hosting and deployment
- Google — OAuth authentication
4.4 No Sale of Personal Data
We do not sell, rent, or trade your personal information to third parties. We do not share your data for advertising purposes.
5. Data Storage and Security
Your data is stored in a PostgreSQL database hosted by Neon, and the application is hosted on Vercel. We implement reasonable industry-standard security measures to protect your information, including:
- Encryption of third-party OAuth tokens at rest
- JWT-based session authentication
- HTTPS encryption for all data in transit
- Multi-tenant data isolation — all business data is scoped to your organization
While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.
6. Data Retention
- Account data is retained for as long as your account is active.
- Citation snapshots and analysis are retained to provide historical trend data and comparison.
- Content you create is retained until you delete it or request account deletion.
- Upon account termination, you may request deletion of your data by contacting us at ming@fogtrail.ai.
- Some data may be retained as required by law or for legitimate business purposes (such as fraud prevention or dispute resolution).
7. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to Access — Request a copy of the personal data we hold about you.
- Right to Rectification — Request correction of inaccurate or incomplete personal data.
- Right to Erasure — Request deletion of your personal data, subject to legal retention requirements.
- Right to Restrict Processing — Request that we limit the processing of your personal data.
- Right to Data Portability — Request a copy of your data in a structured, machine-readable format.
- Right to Object — Object to processing of your personal data for certain purposes.
- Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.
Legal bases for processing: We process your personal data on the basis of (a) contract performance (to provide the Service), (b) legitimate interests (to improve and secure the Service), and (c) consent (where applicable).
To exercise any of these rights, please contact us at ming@fogtrail.ai. We will respond within 30 days.
8. Your Rights Under CCPA
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:
- Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete — Request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out of Sale — We do not sell your personal information, so this right does not apply.
- Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
Categories of personal information collected: Identifiers (name, email), commercial information (subscription data, credit usage), and internet activity information (server logs).
To exercise your rights, please contact us at ming@fogtrail.ai.
9. Australian Privacy Act
Fogtrail Pty Ltd complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In accordance with the APPs:
- We collect personal information only where it is reasonably necessary for our functions and activities.
- We take reasonable steps to ensure the personal information we collect is accurate, up-to-date, and complete.
- You have the right to access and request correction of your personal information.
Cross-border data disclosure: Your data may be processed in the United States and other countries where our service providers (including Vercel, Neon, and AI providers) operate. We take reasonable steps to ensure overseas recipients handle your information in accordance with the APPs.
If you believe we have breached the APPs, you may lodge a complaint with us at ming@fogtrail.ai. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
10. Cookies and Tracking
We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.
We do not use any third-party analytics, advertising, or tracking cookies.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our infrastructure providers and AI service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.
Where required, we implement appropriate safeguards to protect your information during international transfers, including reliance on standard contractual clauses or other approved transfer mechanisms.
12. Children's Privacy
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at ming@fogtrail.ai and we will take steps to delete such information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes, we will notify you via email or through a prominent notice on the Service.
Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Fogtrail Pty Ltd
- Email: ming@fogtrail.ai