Privacy Policy

1. Introduction and scope

This policy applies to information we process about visitors to our website, people who request a free audit, account holders, and individuals who opt in to our SMS program. It does not apply to third-party websites or services that we link to but do not control. By using the Service, you agree to the practices described here.

Corbin is a business-to-business service. Where we act as a processor on behalf of a business customer (for example, when we analyze public data about a customer's business at their direction), that customer is the controller of that data and their own privacy notice governs how it is used. For our own website, accounts, and billing, Corbin is the controller.

2. Information we collect

Information you provide

• Business URL: the website address you submit so we can run your AI visibility audit. No account is required for a basic audit.
• Account information: your name, email address, business name, and password when you create an account.
• Billing details: for paid subscriptions, billing contact information and payment details, which are processed by our payment provider.
• Mobile phone number: only if you voluntarily opt in to the Corbin Owner Alerts SMS program.
• Communications: the content of messages you send us through support, email, or forms.

Public data we analyze

To produce your audit and visibility scores, we collect and analyze information about the business URL you submit that is already publicly available: structured data and metadata, page content, directory and map listings, review signals, and how the business appears in search and AI answer engines. We only access publicly accessible information. We do not log in to, scrape behind authentication on, or access the non-public systems, databases, or administrative areas of any website.

Information collected automatically

• Device and log data such as IP address, browser type, referring URL, pages visited, and timestamps (standard server logs).
• Usage data about how you interact with the Service, which we use to operate and improve it.
• Cookies and similar technologies, as described in the Cookies section below.

3. How we use your information

• To perform and deliver your AI visibility audit and reports.
• To provide, maintain, secure, and improve the Service.
• To create and manage your account, process payments, and administer subscriptions and free trials.
• To send the text messages you have opted in to receive through Corbin Owner Alerts.
• To communicate with you about your account, billing, security, and material changes to the Service.
• To detect, prevent, and respond to fraud, abuse, and security or technical issues.
• To comply with applicable laws, regulations, and legal process.

4. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract: to provide the Service you request and perform our agreement with you, including delivering audits and managing your account.
• Legitimate interests: to secure, operate, analyze, and improve the Service, and to protect against fraud and abuse, balanced against your rights.
• Consent: for optional activities such as enrolling in the SMS program or setting non-essential cookies. You may withdraw consent at any time.
• Legal obligation: to comply with laws that apply to us, such as tax, accounting, and lawful requests from authorities.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the following limited circumstances:

• Service providers (subprocessors): vendors that help us operate the platform, such as cloud hosting, payment processing, email and SMS delivery, and analytics. They may process your data only on our instructions and are bound by confidentiality and data-protection obligations.
• Legal and safety: when required by law, regulation, court order, or valid government request, or to protect the rights, property, or safety of Corbin, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice to you as required by law.

Mobile opt-in data, including your phone number and SMS consent, is never shared with any third party or affiliate for marketing purposes. See the SMS text-messaging section below.

6. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and afterward only as required to meet legal, tax, accounting, security, or dispute-resolution obligations. Retention periods vary by data type: active-account data is kept while your account is open, trial and audit data is kept for a limited period, and backups are retained on a rolling basis and then overwritten. When data is no longer needed, we delete or anonymize it.

You may request deletion of your personal data at any time by contacting support@trycorbin.com. We honor deletion requests within a reasonable time, subject to legal retention obligations.

7. Your privacy rights

GDPR rights (EEA and UK)

If you are in the EEA or UK, you have the right to access, correct, delete, and receive a portable copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

California rights (CCPA and CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose, to request access to and deletion of that information, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of, but you may still exercise the request. We will not discriminate against you for exercising any of these rights.

To exercise any right, contact support@trycorbin.com. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where the law allows.

9. Cookies and tracking

We use strictly necessary cookies to run the site, keep you signed in, and remember your preferences. With your consent where required, we also use optional analytics cookies to understand aggregate usage and improve the Service. Non-essential cookies are not set until you opt in, and you can accept or reject them and change your choice at any time.

You can also block or delete cookies through your browser settings, and we honor recognized opt-out preference signals such as Global Privacy Control. Some features may not work correctly without essential cookies.

10. Security

We use industry-standard safeguards to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure, so we cannot guarantee absolute security. We encourage you to use a strong, unique password and to keep your account credentials confidential.

11. International data transfers

Corbin is based in the United States and processes data there and in other countries where we or our service providers operate. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. Where required, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses, to protect your personal data.

12. Children's privacy

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, provide additional notice by email (if we have your address) or through the Service before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact us

For privacy questions or to exercise your rights, contact us: