Privacy Policy
Effective: August 1, 2026 · Last updated: October 2, 2026
Who we are
CoMavenAI LLC ("CoMavenAI," "we," "us") is a Delaware limited liability company and a subsidiary of StratusPointIT, headquartered at 50 High Street, Suite 42, North Andover, MA 01845. This policy covers www.comavenai.com, the CoMavenAI AEO service at mcp.comavenai.com, and information we receive through its ChatGPT connection. It does not cover data we process while delivering services to clients under a separate services agreement (see "Client and engagement data" below).
Information we collect
- Information you give us . name, email, company, phone, and information you submit through our contact or newsletter forms (processed via HubSpot, our CRM). You may browse the site without providing any of it.
- Automatically collected . device, browser, pages viewed, and approximate location via cookies and similar technologies (see the cookie table below).
- AEO tool inputs and public content . submitted website URLs, public page content and metadata, and inputs for requested visibility checks. See CoMavenAI AEO website audits and ChatGPT connection below for processing, access, and retention details.
- From our corporate family . if you are a StratusPointIT client and ask us to coordinate with your account team, we may share engagement information within our corporate family.
Cookies and tracking
We use a cookie banner that lets you accept all, keep only essential cookies, or manage categories. Anonymized analytics runs by default and you can switch it off at any time (choosing "Necessary Only" switches it off too); marketing cookies stay off until you turn them on. The Google tag loads on every public page that uses tracking; until you accept marketing cookies it runs in consent mode, which sets no advertising cookies and sends only cookieless, aggregated conversion signals. Some pages embed content from HubSpot (forms and scheduling) and from our own AI Growth Engine console; those embeds load from their own domains. We honor the Global Privacy Control (GPC) browser signal as an opt-out of the sale/sharing of personal information.
| Category | Examples | Purpose | Consent |
|---|---|---|---|
| Essential | Consent storage, session security, reCAPTCHA (contact form) | Site operation and spam prevention | Always on |
| Analytics | Google Analytics 4 (_ga, _ga_*), HubSpot (hubspotutk, __hstc, __hssc, __hssrc) | Anonymized usage statistics; if you contact us, the pages you visited beforehand | On by default; opt out anytime |
| Marketing | Ad and remarketing cookies (Google Ads, LinkedIn Insight Tag) | Campaign measurement, advertising to prior visitors | Opt-in; off = "Do Not Sell or Share" |
Manage anytime via Cookie Preferences. If you consent to Marketing cookies, third-party vendors including Google and LinkedIn may serve our ads to you on other sites based on your past visits here; you can also manage this through Google's ad settings and LinkedIn's ad preferences.
Calculator and AI advisor usage measurement
The ROI calculator and public AI advisor do not load Google's browser tracking scripts. If basic usage measurement is enabled, our server sends Google Analytics only predefined page, step, completion, and broad outcome categories, a fixed public page address and title, and a random identifier limited to that page visit. We do not include your name, email, workflow descriptions, calculator inputs, numeric estimates, conversation text, generated briefs, private report links, or advisor session identifiers in those events. We do not forward your IP address, browser details, cookies, or referring address to Google through this connection. These events are not used for advertising personalization.
You can turn basic usage measurement off using the control inside either tool. A saved website analytics opt-out, Global Privacy Control, or Do Not Track signal also disables this measurement. The controls do not affect your ability to use the calculator or advisor.
How we use information
To respond to inquiries, provide and improve our website and services, run our business, market to business contacts (with opt-out honored), and comply with law. We may create aggregated or de-identified data from website and service information and use it to develop, benchmark, and improve our offerings; we maintain de-identified data as de-identified and do not attempt to re-identify it. We do not sell personal information for money. If analytics or advertising cookies constitute "sharing" under applicable state law, the Marketing toggle and GPC are your opt-out.
AI service providers
We build on third-party AI platforms, including Anthropic (Claude), OpenAI, and Microsoft (Azure and Microsoft 365), for different tools and client services. The AEO-specific providers and inputs are described below. Standard contact and newsletter forms are processed through HubSpot; public contact details contained in an audited page may be included in the page content sent to an AEO provider.
Provider rules for model training, human review, and retention depend on the product, service tier, applicable terms, and account settings. A provider-specific no-training commitment applies only where those terms and settings support it. No-training does not mean zero retention, and we do not extend one provider's commitments to every other provider or product. We do not make a blanket no-training or zero-retention promise for all AEO processing.
For reference, OpenAI's published business and API privacy commitments describe no training by default and the role of explicit data-sharing choices. Google's Gemini API terms distinguish paid from unpaid services and include additional terms for search grounding. TypeSafe's privacy policy addresses model training and retention for its services. These provider policies do not, by themselves, establish a particular account configuration or a special retention agreement. Client-specific obligations remain governed by the applicable services agreement.
CoMavenAI AEO website audits and ChatGPT connection
What AEO processes and why
AEO processes the public website URLs you submit, public page content and metadata collected during an audit or recheck, and the brand names, aliases, and questions you provide for requested visibility checks. Through the ChatGPT connection, AEO receives the tool inputs ChatGPT sends for the requested operation and returns the corresponding results. Do not submit confidential documents, private dashboards, customer portals, credentials, or URLs containing sensitive information.
We use these inputs to provide readiness assessments, sampled AI visibility observations, findings and supporting evidence, proposed improvements, and targeted rechecks. Readiness and AI visibility are separate assessments; an audit is not itself a visibility benchmark. Generated plans require human review and do not publish website changes. Neither assessment guarantees placement in consumer AI products.
AEO infrastructure and processing providers
AEO uses Vercel and Supabase for hosting, storage, and operation. Configured analysis and visibility providers include TypeSafe (Jev), OpenAI, Google Gemini, and Perplexity. The provider used for an operation receives the information needed for that operation, which can include extracted page text, submitted questions, and relevant metadata. Not every operation uses every provider. Processing is governed by the applicable business or API arrangements; the provider-specific qualifications above apply. Your separate use of ChatGPT is also subject to OpenAI's applicable terms and your account settings.
Stored reports, evidence, and access
We retain extracted page text, normalized snapshots, evaluation records and provenance, audit and visibility results, proposed remediation, follow-up records, usage events, and operational telemetry so saved results and evidence remain available for follow-up work. New raw HTML uploads are disabled by default. Historical raw HTML snapshots remain in private storage, and new raw HTML may be retained if an operator explicitly enables that configuration. Disabling raw HTML persistence does not delete extracted text or other retained evidence.
Anonymous public audits do not require an email address or login. Anyone with the audit or run ID can retrieve the public record and use its public-data follow-up operations. Report and evidence links provide shareable access to those public-run records; they are not a confidential workspace. Authenticated-owned records use owner access controls, with access also available to authorized operators. Do not use anonymous audits to store confidential information.
Retention, deletion, and operational logs
Durable AEO records do not currently expire automatically. They remain stored until an operator removes them. We review requests for access, correction, or deletion under applicable requirements; no fixed automatic deletion period is promised by the current service. For a request, email contact@comavenai.com and include the relevant audit or run ID without sending credentials. Disconnecting the ChatGPT connection stops future use through that connection but does not automatically delete records already stored by CoMavenAI.
For abuse prevention, we process request identity and retain a salted rate-limit identifier. Infrastructure and processing providers may also maintain their ordinary operational logs under their applicable terms. Provider-side retention is separate from CoMavenAI's retained audit records.
Email and marketing choices
Requesting an AEO audit does not subscribe you to marketing. Automated AEO report email delivery is not currently enabled. Any future report-delivery option will be a separate, disclosed choice; a request for a report will not be treated as marketing consent. Website cookie choices and any contact or newsletter form you separately submit are governed by the relevant sections of this policy.
Client and engagement data
Data we access or process while scoping or delivering client engagements (business documents, systems data, workflow content) is governed by the applicable master services agreement, statement of work, and any data processing terms with that client, not by this website policy. In brief: we process client data to deliver the engagement, we protect it with administrative, technical, and physical safeguards on infrastructure secured and monitored by StratusPointIT, and we do not use client confidential data to train third-party foundation models. Aggregated, de-identified learnings (patterns, benchmarks, techniques) may inform how we improve our services.
Your rights (US state privacy laws)
Depending on your state (including CA, CO, CT, VA, UT and others), you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising, sale/sharing, and certain profiling or automated decision-making. Exercise them by emailing contact@comavenai.com or using Your Privacy Choices. We will not discriminate against you for exercising rights, and authorized agents may submit requests where the law allows.
Retention, security, sharing
We keep information as long as needed for the purposes above, protect it with administrative, technical, and physical safeguards (including infrastructure managed by StratusPointIT), and share it only with service providers (e.g., HubSpot, Google, our hosting and AI platform providers), our corporate family, and as required by law or to protect rights, property, or safety. We do not sell, trade, or otherwise transfer personally identifiable information to outside parties beyond these purposes. We do not knowingly collect information from children under 13; the site is directed to business audiences.
Scope and changes
This policy applies to information collected through this website and the CoMavenAI AEO service, including its ChatGPT connection, not to information collected offline or under a separate services agreement. If we change this policy, we will post the updated version here and revise the "Last updated" date; material changes may also be announced by email to affected contacts. Continued use of the site or AEO service after changes means the updated policy applies.
Contact
contact@comavenai.com · 980-392-2273 · CoMavenAI LLC, 50 High Street, Suite 42, North Andover, MA 01845