Privacy Policy
At UsedBy.ai, we believe in transparency. This policy explains how we collect, use, and protect information when you use our platform.
Last updated: October 7, 2026
Information We Collect
usedby needs no account. Here is everything we collect, and nothing else:
Page views (our own analytics)
For each page you open we record: the page (its type, address and slug); an anonymous session id kept in your browser tab; the external site that sent you, if any; your browser’s user agent, with the browser, system and device type read from it; the country of your IP address (not the address itself); your screen size; your time zone; and, when you leave the page or switch tabs, how long it stayed visible and how far you scrolled. This uses no cookie and runs for every visitor; known bots are not recorded.
Errors
When the site fails on our servers, the error and the page are written to our hosting provider’s logs (Vercel). No error-tracking tool runs in your browser.
Outbound clicks
When you click a link to a tool or a company site, we record the page, the destination, its campaign tags and the anonymous session id.
Suggestions and email (optional)
If you suggest a tool or a company from the search page, we store what you type (the search, the name, the website, the description) and your email address only if you give it, and we send it to our inbox to review it. Older versions of the site also collected email addresses for a newsletter and to unlock analysis results. Those forms are gone; the addresses already given are kept as described under Data retention. The old URL analyzer also logged each request with a masked IP address, the country and city, the browser and the site analysed; those logs are kept too.
What we don't collect: We do not require user accounts, we do not store your IP address in our analytics, and we never sell any data to third parties.
Public Data Sources
UsedBy.ai aggregates publicly available information about AI tool adoption by companies. Our data sources include:
- Official company websites and "Customers" or "Trusted by" pages
- Public press releases and news articles
- Job postings mentioning specific tools
- Published case studies and testimonials
- Integration marketplace listings
- Public financial reports and SEC filings
All company data displayed on UsedBy.ai is derived from publicly accessible sources. We do not access private systems, scrape behind login walls, or use any proprietary data without permission.
Data Accuracy
We strive for accuracy but cannot guarantee all information is current. Companies can contact us to request corrections or removal of their data.
How We Use Data
The data we collect is used exclusively to:
- Display AI tool adoption information to users
- Improve our search and recommendation features
- Monitor and fix technical issues
- Understand aggregate usage patterns
- Generate industry trends and insights
We never sell, rent, or share your personal data with third parties for marketing purposes. Anonymous, aggregated statistics may be shared publicly (e.g., "ChatGPT is used by 500+ companies in our database").
Cookies & Tracking
We use a minimal set of cookies to operate our platform:
| Cookie | Purpose | Duration |
|---|---|---|
| gdpr-region | Detects if you're in a GDPR region (EU/UK/EFTA) | 1 year |
| analytics-consent | Stores your cookie consent preference | 1 year |
| _ga, _ga_* | Google Analytics 4: only after you accept in the EU, the UK and EFTA countries; loaded by default elsewhere | 2 years |
| NEXT_LOCALE | Remembers the language you picked | 1 year |
| admin_session | Authentication for admin users (HttpOnly, secure) | 24 hours |
We also keep three items in your browser’s session storage, never sent as cookies and deleted when you close the tab: usedbyai_session (the anonymous session id), usedbyai_tracked_pages (so a page is counted once per visit) and usedbyai_views (for each page, its view id, when it started and the time and scroll already measured, so a return to it adds up).
GDPR Compliance: If you visit from the EU, the UK or an EFTA country, or if we cannot tell your country, Google Analytics 4 loads only after you click Accept on the banner. If you decline, it never loads. Elsewhere it loads by default. Our own page-view records, described above, do not depend on this choice.
We do not use advertising cookies, social media trackers, or cross-site tracking technologies. You can disable cookies in your browser settings, though this may affect some functionality.
Third-Party Services
We use the following third-party services to operate UsedBy.ai:
- VercelHosting and CDN (US servers, worldwide CDN)
- Google AnalyticsGoogle Analytics 4: usage analytics (US)
- NeonDatabase (US, AWS us-east-1)
- Cloudflare R2Image storage (logos) (EU)
- ResendSends suggestion notifications to our inbox (US)
Each of these services has their own privacy policy. We have selected providers that maintain high standards for data protection and security.
Data Retention
We keep data for the following periods:
- Page views and clicks:Kept with no fixed end date, since January 2026. We do not delete them automatically.
- Error logs:Kept in Vercel’s logs for the retention period of our plan, then deleted by Vercel
- Company/tool data:Indefinitely (public information)
- Admin sessions:24 hours
- Suggestions and email addresses:Kept until you ask us to delete them
Our database is hosted on Neon (AWS, United States). Neon keeps a short restore history (6 hours on our plan) and encrypts data at rest.
Your Rights
Under GDPR and similar privacy laws, you have the right to:
- Access
- Request a copy of data we hold about you
- Rectification
- Request correction of inaccurate data
- Erasure
- Request deletion of your data
- Portability
- Receive your data in a portable format
- Objection
- Object to certain processing activities
- Restriction
- Request limited processing of your data
Since we collect minimal personal data, most of these rights apply primarily to companies whose public information appears on our platform, or users who have provided their email address. To exercise any of these rights, please contact us using the details below.
Contact Us
If you have questions about this privacy policy or want to exercise your data rights, you can reach us at:
- contact@usedby.ai
- Response Time
- Within 30 days for GDPR requests
For general inquiries not related to privacy, please use our contact page.
This privacy policy may be updated from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page. Continued use of UsedBy.ai after changes constitutes acceptance of the updated policy.