Konstrued AI is operated by Konstrued, Melbourne, Australia. Effective 14 September 2026. Questions to privacy@konstrued.ai.
Konstrued asks AI models what they say about a business, and shows you the answers. This page describes what that involves in practice — what we collect, where it goes, and how long we keep it. It is written to be accurate rather than exhaustive-sounding.
| Information | Where it comes from |
|---|---|
| The business name, location and website you type | You, when you run a scan |
| Your email address and login identity | Auth0, our sign-in provider, when you create an account |
| The AI models' answers about the business, with the web sources they cited | Generated by the scan |
| The result of the email-setup check (public DNS records for the domain you gave) | Public DNS, if you run that check |
| Usage counts — how many model calls and tokens the service used | Generated by the service. Counts only: no scan content |
| Standard web-server access logs, including IP addresses | Our content delivery network (AWS CloudFront) |
| Visit counts and page views, via Google Analytics — but not for visitors in the EU, EEA, UK or Switzerland (see Analytics, below) | Google Analytics, in your browser, only where it is loaded |
To answer your scan we send the business name, location and website you typed to AI model providers: OpenAI (via Amazon Web Services), Google and Anthropic. Those models may search the live web to answer. Each provider handles that request under its own terms, and their processing may occur outside Australia. That is the most important sentence on this page: the details you type about a business are shared with those providers — that is what the product is.
We do not sell your information, share it with advertisers, or use advertising trackers on this site. We do use one analytics tool, described next.
We use Google Analytics 4 to count visits and see which parts of the site people use. It is not loaded at all for visitors in the European Union, the European Economic Area, the United Kingdom or Switzerland: no analytics cookie is set there, nothing is sent to Google, and that is why you will not see a cookie banner on this site — we would rather not measure you than ask you to click through one.
We work out your region from your IP address at our content delivery network, which
is right about 99% of the time. The region is kept only as a two-letter country code in
a cookie named cc that lasts for your browser session; it holds nothing
about you personally. If your browser sends the Global Privacy Control signal, we
honour it everywhere and do not load analytics.
Where Google Analytics does load, it sets cookies named _ga and
_ga_ followed by our property id. They tell Google's service that two page
views came from the same browser; they last up to two years. IP addresses are
anonymised. You can block these cookies in your browser settings, or with Google's own
opt-out add-on,
and the site works the same without them.
| Data | Kept for |
|---|---|
| Scans on a signed-in account | About 90 days from your last scan of that site |
| Scans run without signing in | About 7 days |
| The record of which site your free account tracks | Refreshed with each scan; expires about 90 days after your last one |
| Rate-limit counters (a hashed identifier or IP) | About an hour |
| Web-server access logs | 45 days |
The cc region cookie | Your browser session |
| Google Analytics cookies (where loaded) | Up to 2 years, set by Google in your browser; analytics reports are kept by Google under its data-retention setting (14 months) |
| Usage counts (no content) | Kept as aggregate service statistics |
| Your Auth0 account | Until you ask us to delete it |
"About" is honest, not evasive: expired records are removed by an automated process that runs within roughly two days of the expiry time.
Scan data is stored with Amazon Web Services in Sydney, Australia, encrypted in transit and at rest. Model processing, as above, may occur outside Australia.
Email privacy@konstrued.ai to access, correct, or delete what we hold about you or your account — self-serve deletion is not built yet, so today it is a person reading a mailbox, and requests are actioned promptly. Scans expire on the schedule above without any action from you. If you are unhappy with how we have handled your information, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
When this page changes, the effective date at the top changes with it. Material changes to what we collect or how long we keep it will be visible here before they take effect.