Privacy Policy

How Gerush collects, uses and protects personal data

Aug 9, 2026

Effective date: August 9, 2026

1. Scope and contact

This Policy explains how Gerush processes personal data when you visit gerush.com, create an account, run checks, connect an AI assistant through MCP, purchase a plan or contact support.

For privacy questions or requests, email support@gerush.com. We normally respond within 1–3 business days.

2. Data we collect

Account data: name, email address, authentication identifiers, language and account settings.
Service inputs: domains, brand and competitor names, prompts, URLs, files or instructions you submit.
Reports and activity: checks, AI responses, citations, scores, generated recommendations, MCP authorization and workflow history.
Technical and usage data: IP address, device and browser information, timestamps, referring pages, session activity, diagnostics and security logs.
Support data: messages, attachments and information included in support requests.
Billing records: plan, order, customer and subscription identifiers, amount, currency and payment status. Full card details are collected and processed by Creem, not stored by Gerush.

Please do not submit sensitive personal data unless it is necessary and you have a lawful basis to do so.

3. Why we use data

We process data to:

create and secure accounts;
run checks, generate reports and provide requested workflows;
process subscriptions, enforce quotas and maintain billing records;
provide support and service communications;
detect abuse, fraud and security incidents;
analyze reliability and improve Gerush;
meet accounting, tax and legal obligations.

Depending on your location, our legal bases may include performance of a contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

4. Service providers and disclosures

We do not sell personal data. We disclose data only as needed to operate Gerush, comply with law, protect rights or complete a business transaction. Providers may include:

Vercel and Cloudflare for hosting, delivery, DNS and security;
Neon for managed database infrastructure;
Creem as Merchant of Record for payment, invoices, tax, refunds and subscription administration;
AI model and search providers used to perform requested checks and generation, which may include OpenAI-compatible providers, Google Gemini, Microsoft Azure AI and Perplexity-related services;
Microsoft Clarity or comparable analytics services where enabled;
email delivery and authentication providers used for account and support communications.

The provider used for a particular request may depend on the feature, region and current configuration. Providers process data under their own terms and appropriate contractual safeguards.

5. Cookies and analytics

Gerush uses essential cookies or local storage for authentication, security, language and core functionality. Where analytics is enabled, measurement technologies may record interactions such as page views, clicks and session diagnostics. Where required by law, non-essential analytics is used only after consent. You may restrict cookies through your browser, but essential features may stop working.

6. International transfers

Our providers may process data in countries other than yours. Where required, we rely on recognized transfer mechanisms and contractual safeguards. By requesting a check, you understand that the submitted domain, prompts and necessary context may be sent to the selected AI providers.

7. Retention

We keep account and report data while your account is active and as needed to deliver historical reports. Security logs are retained for a limited period appropriate to investigation and abuse prevention. Billing and transaction records may be retained for the period required by tax, accounting and anti-fraud laws. When data is no longer needed, we delete or anonymize it, subject to backups and legal obligations.

8. Your choices and rights

Depending on applicable law, you may ask to access, correct, export, delete or restrict processing of your personal data, or object to certain processing. You may withdraw consent where processing is based on consent. You may also complain to your local data-protection authority.

Send requests from your account email to support@gerush.com. We may verify your identity before completing a request. Deleting an account may not remove records we must retain for legal, security or billing purposes.