Legal

Terms & Privacy

Last updated 2026-04-20. Plain English; bold where it matters.

Terms of Service

1. What this is

FoundryVis is a web application that runs queries against public AI APIs (ChatGPT, Claude, Gemini, Perplexity, Grok, etc.) on your behalf and reports whether your domain or brand is mentioned in the responses. We call this “sampling.” It is not citation tracking. There is no live citation feed for AI search; this product samples public APIs the same way every other tool in this category does.

The service is operated by Foundry CRO (referred to as “we,” “us,” or “FoundryVis”). By creating an account, signing in, or using the service, you agree to these Terms of Service.

2. Eligibility

You must be at least 18 years old and legally able to enter into contracts where you live. If you’re using FoundryVis on behalf of a company, you confirm you have authority to bind that company to these terms.

3. Your account

One account per person. Don’t share credentials. You’re responsible for activity under your account. If you suspect unauthorized access, log out and tell us.

4. Credits and payment

FoundryVis is paid on a credit basis. You deposit money via Stripe; we retain 15% as a platform fee and credit the remainder to your account. Each API call you make is billed against your credit balance at our actual provider cost. Minimum deposit is $10.

All credit purchases are final and non-refundable. Once you complete a deposit, the platform fee is retained and the credit balance is yours to use. We do not refund unused credits, partial credits, or credits in any other circumstance — including account closure, dissatisfaction with results, or changes to model availability or pricing. You acknowledge this when you complete a deposit.

If a model you used becomes unavailable on the underlying AI Gateway, we don’t owe you a refund — your credits remain valid for the other models we offer.

We may change credit pricing, model selection, or platform fee at any time with notice on this page or via email. Existing credits keep their cash-equivalent spend value at the time of purchase.

5. The service is sampling, not tracking

Every reasonable effort is made to ensure the data we surface is accurate, but you acknowledge:

  • AI model outputs are non-deterministic — the same query can return different answers on different runs.
  • Our mention/citation detection is heuristic — false positives and false negatives occur.
  • Sentiment classification is performed by a separate AI model and is itself approximate.
  • Gap analyses are AI-generated diagnoses based on scraped public content; they are recommendations, not guaranteed outcomes.
  • We do not warrant that your domain will or will not be cited in any AI response, today or in the future.

Use the data as a directional signal for your strategy, not as a binding metric.

6. Acceptable use

You agree not to:

  • Automate access beyond the user-facing interface — no scripts, bots, scrapers, headless browsers, or programmatic API consumption outside our documented application flow.
  • Tamper with prompts.The query interface is for natural-language questions about your category. Do not attempt prompt injection, jailbreak attacks, system-prompt extraction, or any other manipulation aimed at altering how the underlying LLMs respond. This includes embedding instructions that would have the AI behave deceptively, return malicious output, or generate content that violates the underlying provider’s policies (OpenAI, Anthropic, Google, xAI, Perplexity).
  • Bypass or attempt to bypass rate limits, credit holds, the deposit fee, or any other system control.
  • Reverse engineer the service, our prompts, our scoring logic, or our infrastructure for the purpose of building a competing tool.
  • Resell or redistributeraw API outputs, gap reports, or aggregated FoundryVis data as your own product. Use of outputs internally or in client deliverables is fine; reselling at scale isn’t.
  • Submit illegal content — including but not limited to queries containing CSAM, real-world threats, content that infringes intellectual property, or content unlawful in your jurisdiction.
  • Use FoundryVis to harass a competitor, generate defamatory content about real people or businesses, or fabricate reports to mislead third parties.
  • Share, lease, or sublicense your account.

We may suspend or terminate accounts that violate these rules and retain any unspent credits as forfeit. Egregious violations (security attacks, illegal content) may be reported to law enforcement.

7. Your content

You retain ownership of the queries and brand information you provide. You grant us a limited license to use this data to operate the service — running your queries through AI APIs, storing results, and producing reports for you. We do not use your queries to train AI models. Anthropic, OpenAI, Google, xAI, and Perplexity each have their own data handling policies for the API calls we route through them; the AI Gateway routing layer (Vercel) sets these to opt-out-of-training where supported.

8. Intellectual property

FoundryVis (the software, design, prompts, brand, and infrastructure) is owned by Foundry CRO. You receive a limited, non-exclusive, non-transferable license to use the service per these terms. No transfer of ownership is implied.

9. Disclaimers and limitation of liability

The service is provided “as is” and “as available.”We disclaim all warranties to the extent allowed by law, including merchantability, fitness for a particular purpose, and non-infringement.

Our maximum aggregate liability to you for any claim arising out of or relating to FoundryVis is limited to the amount you paid us in the 12 months preceding the claim. We are not liable for indirect, consequential, special, or punitive damages, including lost profits, lost revenue, or loss of data.

10. Termination

You can stop using FoundryVis at any time. We can suspend or close your account for violation of these terms, fraud, abuse, or non-payment. On termination, your data is deleted within 30 days (see Privacy below). Unspent credits at the time of voluntary closure are forfeited; see Section 4.

11. Changes to these terms

We may update these terms periodically. We’ll post the new version here with an updated “Last updated” date and, for material changes, email registered users at least 14 days before the change takes effect. Continued use after the effective date is your acceptance.

12. Governing law

These terms are governed by the laws of the jurisdiction where Foundry CRO is registered. Disputes are subject to the exclusive jurisdiction of those courts, unless mandatory consumer-protection rules in your country provide otherwise.

Privacy Policy

What we collect

  • Account info — email address (from magic-link or Google OAuth) and, if you sign in with Google, your name and avatar URL.
  • Project data — the projects, domains, brand terms, and queries you create.
  • Run data — the queries you submit, the AI responses received, and derived metrics (mention rate, sentiment, citations).
  • GSC data — if you connect Google Search Console, we store the OAuth tokens (encrypted in transit; in our database, server-side only) and cache the query/page data we fetch on your behalf.
  • Payment data — handled by Stripe. We store the transaction ID and amount; we do not store card numbers.
  • Usage and logs — basic operational logs (IP, user agent, request paths) for security and debugging.

What we do with it

We use your data to operate the service:

  • Authenticate you (Supabase).
  • Run queries against AI APIs (via Vercel AI Gateway, which routes to OpenAI, Anthropic, Google, xAI, Perplexity).
  • Charge and credit your account (Stripe).
  • Pull GSC data on your behalf if you’ve linked it.
  • Send transactional emails (magic-link sign-in, payment receipts, account notices).
  • Send occasional product updates (see “Email consent” below; you can opt out).

We do not sell your data. We do not use your queries to train models. We do not provide your data to advertisers.

Who else sees your data

The minimum necessary set of third parties to operate the service:

  • Vercel — hosting, AI Gateway routing.
  • Supabase — database and authentication.
  • Stripe — payment processing.
  • OpenAI, Anthropic, Google, xAI, Perplexity — when you submit queries to those models, the query text is sent to those providers per their data policies (training opt-out is enabled where the gateway supports it).
  • Google — when you connect GSC, we make API calls on your behalf with tokens you authorized.

Email consent

By creating an account you consent to receive:

  • Transactional emails (sign-in links, receipts, security notices, billing notifications). These are required for the service to function and cannot be opted out of while you have an account.
  • Product updates from FoundryVis or Foundry CRO — occasional announcements about features, pricing, and related tools we build. You can unsubscribe from these at any time via the link in every such email; this does not affect transactional messages.

Data retention

We retain your data while your account is active. If you delete your account (by emailing us — self-serve coming later), we delete your profile, projects, queries, runs, GSC tokens, and gap reports within 30 days. Stripe transaction records and basic credit-transaction history may be retained longer for tax and accounting purposes.

The shared scraped-pages cache contains publicly available content (we visit public URLs and extract text) and is retained on a 7-day rolling basis regardless of account state.

Your rights

You can request a data export, correction, or full deletion at any time by contacting us. We’ll respond within 30 days. If you’re in a jurisdiction with specific privacy rights (GDPR, CCPA, etc.), those rights apply.

Cookies / local storage

We use cookies set by Supabase to keep you signed in, and `localStorage` to remember UI preferences (your last-selected project, etc.). No advertising cookies. No cross-site tracking.

Contact

Questions about these terms, your data, or anything else? Email bradley@foundrycro.com.