Privacy Policy

Effective: November 3, 2026

1. Controller

The BrunoPoints service (brunopoints.com) is operated by, and the data controller is: Bethlen Ádám, contact: adam.bethlen1@gmail.com.

2. What the service does

The service measures how a brand and its competitors appear in answers of AI assistants (e.g. ChatGPT, Claude, Gemini, Perplexity). The questions entered by the user are sent to these providers through their APIs and the answers are analysed.

3. Data we process

• Account data: name, company, e-mail address, password (stored hashed).
• Billing data: plan, subscription status and, if you pay online, a customer reference from our payment provider (Stripe). Card details are handled by Stripe, not by us.
• Usage data: the number and cost of AI calls per project, to apply plan limits.
• Project data: brand names, competitors, domains, questions, AI answers and the statistics derived from them.
• Google data (only if you connect your Google account): the Google account e-mail address, the list of your Search Console properties, and the search queries of the selected property with their impressions and clicks.

4. Use of Google user data

The service requests read-only access to Search Console data (webmasters.readonly) and your e-mail address to identify the account. This data is used only to build AI questions and statistics from the search queries in the user's own project.

Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is:

• never sold and never used for advertising,
• never used to train general-purpose AI or machine learning models,
• only viewed by a person at the user's explicit request for support, or where required by law.

To score relevance and rephrase them, search queries are sent to the Anthropic (Claude) API; project questions are sent to the AI providers selected by the user. These providers process data sent via their APIs under their own terms.

5. Storage and security

Data is stored on a server in the European Union (Germany). The Google access token is stored encrypted. All traffic uses HTTPS.

6. Retention and deletion

Data is kept until the project or account is deleted. The Google account can be disconnected any time in the project settings; we then revoke access at Google and delete the stored token. Access can also be revoked at myaccount.google.com/permissions. To delete your account and data, contact adam.bethlen1@gmail.com.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing and data portability, and to lodge a complaint with the supervisory authority (in Hungary: NAIH, naih.hu).