AXINVOR VISIBILITY
Privacy policy
How AXINVOR Visibility uses the information needed to audit your website and the data from services you choose to connect.
· AXINVOR S.A.
1. Controller and scope
AXINVOR S.A., Geneva, Switzerland, is your contact for AXINVOR Visibility. For questions about your data or to exercise your rights: contact@axinvor.com.
This policy covers the AXINVOR Visibility application, its audits and connectors, and related enquiries sent to AXINVOR. Where AXINVOR processes data on behalf of a client, the relevant instructions, responsibilities and safeguards must be set out in a separate agreement before that processing starts.
2. Information processed
To prepare and carry out an audit: the domains and URLs entrusted to us, brand name, languages, questions to investigate, configuration and contact persons. Public pages collected may contain names, professional contact details or other personal data already published on those pages.
The collector retains responses from authorised public pages, their metadata, collection dates, integrity hashes, findings and reports. These copies help verify the basis of a diagnosis and compare observations over time.
When a connector is authorised: identifiers of the relevant properties or websites, statistics accessible within the permissions granted, and the technical tokens needed for the connection. Without authorisation, the relevant account cannot be read.
The Visibility contact form collects last name, first name, company, website, email and, optionally, telephone number. The enquiry is sent to contact@axinvor.com with a copy to axinvor@gmail.com for follow-up by AXINVOR. The selected offer and recognised campaign parameters may accompany the enquiry sent by email. Sending it does not automatically subscribe you to a newsletter.
3. Purposes and legal framework
This information is used to respond to your enquiry, perform the agreed audit, explain recommendations, monitor observed changes, manage authorised access and protect the operation of the service.
Swiss data protection law applies. Where the GDPR applies, processing is based, as appropriate, on requested precontractual steps or performance of a contract, legitimate interests in professional follow-up and security, a legal obligation, or consent where required. OAuth authorisation defines technical access; it does not replace these other obligations.
4. Google, Bing and Plausible
Google Search Console: the requested access is limited to reading data from authorised properties (webmasters.readonly). Bing Webmaster Tools: the requested scope is Webmaster.read. Plausible: the connector reads statistics for the authorised website using a Stats API key.
Data obtained through these connectors is used for reports and visibility analysis of the relevant website. Targeted advertising, sale of this data or transfer to data brokers is not part of the service. Data obtained through Google APIs is not used to train generalised artificial intelligence models.
You can revoke authorisation in the provider’s settings or ask AXINVOR to disconnect the service. Revocation stops future access; it does not, by itself, delete existing reports. To request deletion of these reports and retained tokens, contact contact@axinvor.com.
5. Providers, access and artificial intelligence
People authorised to carry out the engagement access the data needed for that engagement. Services actually connected receive the requests required for their operation. Keys, passwords and tokens must never be sent in a public form, report or conversational exchange.
Measurement through an AI provider only takes place after the provider has been configured and the scope and budget authorised. The selected questions and public information are then sent to that provider, under its own terms. Confidential information and unnecessary personal data must be excluded from questions. Connecting Google, Bing or Plausible alone does not authorise sending your private statistics to an AI provider.
The public website and the HTTPS callback for Bing authorisation are hosted by Vercel. The Bing callback relays a temporary code to the local authorisation process; it does not exchange a long-lived token on the website. Hosting of the public website does not describe the location of all audit data.
6. Storage, retention and transfers
The current operating setup keeps audits in a database and an evidence store, with a separate backup. Retention periods depend on the agreed follow-up, the need to substantiate findings and applicable legal obligations. The current setup does not perform a general automatic purge after a fixed period: deletion must be requested and carried out on the relevant data and copies.
Before connecting a client, storage locations, processing countries, recipients, retention periods and arrangements for deleting backups must be specified as part of the engagement. This page does not promise exclusively Swiss or European hosting. International providers may process data abroad; the required safeguards must be checked before activation.
Revoking access does not remove information already published on the web or copies independently held by search engines. A request to delete an AXINVOR report concerns copies under our control, subject to retention required by law or necessary to establish or defend legal claims.
7. Cookies and analytics on the presentation website
The presentation website uses Plausible, when enabled, to measure visits and interactions without advertising cookies. Contact details entered in the form are not sent in analytics events. According to its documentation, Plausible processes event and session records to calculate statistics without storing raw IP addresses; visitor data is processed in the European Union.
Technical cookies used to log in to application areas of the website serve a purpose separate from Visibility audits: session management and securing the authentication flow. Blocking these cookies may prevent login. Connecting a Search Console or Bing property does not give AXINVOR access to your emails or your entire personal account.
8. Your rights and requests
You may request information about processing concerning you, access to your data, rectification or erasure. Depending on applicable law, you also have rights to object, restrict processing and request portability, and to withdraw consent for future processing where consent is the legal basis.
Write to contact@axinvor.com with the website or engagement concerned and the nature of your request, without including a password or token. Proportionate identity verification may be needed. You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent data protection authority in your country.