Privacy Policy

1. Information we collect

Depending on how you use the services, we may collect or generate:

• merchant business and AIR account information used to operate AIR Checkout;
• a merchant receiving-wallet address and wallet-ownership challenge or signature evidence used to verify control of that address;
• AIR Checkout sale amounts, tax or item details entered by the merchant, payment references, payment status, transaction signatures, finality and related public blockchain evidence needed to verify or reconcile a payment;
• the business name, location, business category and website submitted for an AI visibility scan;
• first-party website analytics: a randomly generated browser identifier stored in a cookie, hashed on our server before storage; page paths, referral campaign parameters and actions such as purchase-button clicks. This estimates unique browsers, not identifiable people. IP-based protection may still be used separately for abuse prevention;
• the buyer-style questions tested, AI-provider responses, competitors surfaced, scores and report evidence generated from a scan;
• payment and checkout identifiers, payment status, amount and currency supplied by Stripe for AIR's own paid products or subscriptions where applicable;
• technical information used for security and reliability, such as IP address, request metadata, timestamps and rate-limit events;
• basic attribution information such as campaign parameters, landing path and referring host where available; and
• information you send us in support emails;
• business name, contact name, reply email, chosen POS plan and optional problem or style summary submitted through our website enquiry forms. Browser-selected logo and background images are not uploaded through these enquiry forms.

AIR Checkout does not ask for or store wallet seed phrases, wallet private keys or payer wallet passwords. A payer does not need an AIR account to open a private payment request.

2. AIR Checkout and public blockchain data

Solana wallet addresses and transactions are public blockchain data. AIR reads limited transaction evidence associated with a payment reference to determine whether the requested USDC payment was made correctly. AIR is not designed to build payer profiles or scan a payer's general wallet history.

Blockchain records are maintained by the relevant network and are outside AIR's control. Deleting an AIR record does not delete a public blockchain transaction.

3. Card and subscription payment information

Where Stripe is used for a Snapshot purchase or an AIR subscription, payment processing is handled by Stripe. We do not receive or store your full card number or card security code. Stripe may collect payment, billing and fraud-prevention information under its own privacy terms.

4. How we use information

We use information to:

• create and verify AIR Checkout payment requests and maintain merchant sales records;
• verify receiving-wallet control and protect merchant accounts;
• run free and paid AI visibility checks;
• generate, deliver and maintain access to purchased reports;
• verify payments and reconcile payment events;
• protect the services against abuse, fraud and excessive automated requests;
• diagnose errors and improve reliability;
• respond to support, POS onboarding, automation-scope, privacy and refund enquiries; and
• meet legal, accounting and dispute-handling obligations where applicable.

5. Service providers and infrastructure

To provide the services, information may be processed by third-party providers including Vercel for hosting and request handling, Supabase for application data storage, Solana RPC infrastructure for blockchain reads, external market-data sources for USDC/AUD reference rates, Stripe for applicable card or subscription payments, OpenAI and Google Gemini for AI responses and public-web grounding, and email infrastructure used for customer support.

These providers may process information in Australia or overseas. Their own terms and privacy practices also apply to information they process on our behalf or as independent service providers.

6. Public web information

The AI visibility service is designed to analyse what AI systems surface from current public information. Reports may therefore contain business information, public source links and competitor names obtained from publicly available web material or provider responses.

7. Retention

AIR Checkout keeps transaction and merchant records only for as long as reasonably needed to operate the merchant ledger, preserve legitimate payment evidence, resolve disputes, secure the service and meet legal or accounting obligations. Private payer links are capability URLs and should be treated as sensitive; the current payment interface describes them as available for up to 30 days.

Paid AI visibility reports are point-in-time records. Hosted access is generally available for up to 12 months after a report is completed, while a PDF saved by the customer can be retained permanently by that customer.

Enquiry details and notification records are retained privately while we assess, respond to and manage the request, then for as long as reasonably needed for service, security or lawful business records. You may contact support about access, correction or appropriate deletion. Retention periods may differ between systems and some public blockchain records cannot be altered or deleted by AIR.

8. Security

We use technical and organisational safeguards appropriate to the services, including server-side credentials, access controls, encrypted HTTPS connections, rate limiting and restricted database access. Wallet signing is used only to prove control of a merchant receiving address; AIR does not need your seed phrase or private key. No online service can guarantee absolute security.

9. Your choices and requests

Use the “Exclude this browser from visitor counts” control in our site footer to stop marketing analytics on that browser. The browser identifier is deleted when you opt out. Previous anonymous measurement events cannot always be removed automatically; contact support about privacy requests. Repeating visits across different browsers or devices can count separately.

You may contact us to ask about personal information we hold about you, request correction, or request deletion where appropriate. Some records may need to be retained for legal, security, payment, fraud-prevention or dispute purposes, and public blockchain records remain outside AIR's control.

If you provide information about another person, please make sure you are authorised to do so.

10. Changes to this policy

We may update this policy as the services, providers or legal requirements change. The current version will be published on this page with its updated date.