What we collect, and why

Who we are

What The AI Said records what AI search answers say about local businesses, and helps firms change those answers. For anything on this page, email hello@whattheaisaid.com. We are the controller of the data described here.

What we collect, and why

• The free-finding form: your email, business name, town, website and what you do. We use it to record your questions and send your finding. Basis: you asked us to.
• The onboarding form (paying clients): website access arrangements, the questions you care about and the competitors you name. Basis: our contract with you.
• Booking a call: your name, business, email, phone and anything you add in the note. Basis: you asked us to.
• Emails you send us: kept so we can reply and keep a record of what was agreed.
• Outreach: we email registered companies (Ltd and LLP) at their published business address about a recording of their own market. We use company-level public information only: the firm's name, published contact address and website, Companies House records and what AI answers said about the firm. Basis: legitimate interests. We don't email sole traders or personal addresses this way.

What we don't do

• No open or click tracking in our emails.
• No advertising or tracking cookies on this site. We count visits with Cloudflare Web Analytics, which sets no cookies and doesn't identify you. It records the page you viewed, your browser type, your country and the site that linked you here.
• We don't sell or rent data, and we don't buy contact lists.
• When we show recorded AI answers publicly, we remove individuals' names and personal contact details.

How long we keep it

• Outreach: one email and at most one follow-up. If there's no reply, we delete the contact details within 90 days.
• If you ask us not to email again, we keep only the address on a do-not-contact list, so we never write to it again.
• Finding requests and call bookings: 12 months, unless you become a client.
• Clients: for the engagement, then as long as UK tax and accounting rules require.

Who processes it for us

Cloudflare (hosting this site and its forms, and counting visits), Resend (sending our email), Google (our mailbox) and Stripe (card payments). Each handles data only to provide that service. Some of these providers may process data outside the UK under standard safeguards.

Your rights

You can ask to see the data we hold about you or your firm, correct it, delete it, or object to how we use it, including outreach at any time. Email hello@whattheaisaid.com and we'll reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Last updated 2 November 2026