Privacy notice

Cyber Spark IT Services LTD trades as AI Visibility Check. Cyber Spark IT Services LTD is the data controller. This means we control the information that this notice describes. Our UK company number is 14891489. Our registered address is 71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

Email us with any privacy question or deletion request: info@cyberspark.uk.

When you run a free audit

We collect the website address that you enter. We also collect public information from that address. We fetch and analyse public pages like a search engine crawler. We do not ask for contact details.

When you request the deep report

We collect only your email address — it is where we send the report. We do not ask for your name, business or phone number. After the report is ready, you can also answer six optional questions. These questions cover your role, goals, challenges, support, needs, and timing. We use this information to prepare and deliver your report. We also use it to answer your enquiry. Finally, we use it to decide whether our services match your needs.

How you found us

A link can include campaign information and the referring website. We store this information with your audit. This information helps us measure our advertising. We also store it with your enquiry when you request a report. We never add your contact details or questionnaire answers to an analytics system.

An account is optional. If you create one, we store your email address, the audits you start while signed in and how much of your monthly allowance you have used. How you sign in decides what else we keep:

• Password — only a one-way scrypt hash, never the password itself.
• Sign-in codes — a 6-digit code we email to you. It works once, for 10 minutes.
• Continue with Google — Google tells us your email address, your name and a link to your profile picture, and that Google has verified the address. We don't receive your Google password or anything else from your Google account.
• Passkeys — a public key, a label such as “Chrome on macOS” and when you added it. Your fingerprint, face or device PIN never leaves your device; we can't see it.

To keep you signed in we store a session (when it started, your IP address and browser type) for up to 30 days. We use the email address to run your account and to send the emails you ask for, such as sign-in codes and finished audits.

Apps you connect

You can connect your account to AI assistants such as ChatGPT, Claude and Gemini. You approve each one, and the approval screen lists what it can do. A connected app can start audits and read your results, your email address and your remaining allowance. What you ask it, and the results we return, are then also processed by that app's provider under its own privacy terms. You can disconnect an app at any time on your account page.

On your account page you can download your data or delete the account. Deleting it removes your sign-in methods, sessions, passkeys and app connections straight away.

The browser extension inspects web pages in your browser. Inspecting a page sends nothing to us: the page is read on your device and the results, and your inspection history, stay in your browser until you delete them. The extension only reads a page when you click its icon, and it reads that site's robots.txt and sitemaps without your cookies.

If you sign in, the extension receives your account's email address and a connection token, stored encrypted in your browser. When you start an audit, the extension sends the address of the site to be audited to us, and we process it exactly as an audit started on our website. You can disconnect the extension at any time from your account page or by signing out in the extension, which revokes its token immediately.

The extension contains no advertising and no analytics, and we do not use or share data from it for any other purpose.

• Cloudflare hosts the service and stores audit results and enquiries.
• Resend sends the report email and sign-in codes, and confirms delivery.
• OpenRouter sends public page content to selected AI models. These models analyse the content and describe the business. We also send the business name. We do not send contact details or questionnaire answers. Cloudflare stores the questionnaire answers. Fixed rules use those answers to personalise priorities. AI models do not use those answers.
• Google provides website performance and public business information, and, if you choose “Continue with Google”, confirms who you are.

Some providers operate outside the UK. Legal contracts protect these data transfers.

We send your requested report as a service message. You receive it without marketing consent. We send marketing emails only when you select the separate consent box. The box says “Email me practical SEO/GEO guidance and relevant AI Visibility Check by CyberSpark service information. I can unsubscribe at any time.” We record the exact text and version that you accept. Every marketing email includes an unsubscribe link. We stop after an unsubscribe request, failed delivery, or spam complaint.

• We keep your account until you delete it. Sign-in codes expire after 10 minutes and sessions after 30 days.
• We keep your report at its secure link for 180 days. Download the PDF before the link expires.
• We keep enquiry details and messages while the enquiry remains active. We review them after the enquiry ends.
• We keep evidence of your marketing choice after we delete other data. This evidence helps us honour your choice.

You can request a copy of your information. You can ask us to correct or delete it. You can object to our use of it. You can also withdraw marketing consent at any time. Email info@cyberspark.uk. We will process your request. You can complain to the Information Commissioner's Office when our response does not satisfy you.

Strictly necessary: your browser stores a random session identifier that connects your audit to a later report request, a cookie remembering your chosen language if you switch it, and, if you sign in, cookies that keep you signed in. Our scan form also relies on Cloudflare Turnstile, which sets a cookie to tell people from bots. None of these need your consent, and you can remove them by clearing your browser storage.

With your consent, given via the cookie banner (and changeable any time from “Cookie settings” in the footer), we also store anonymous campaign attribution (referrer, UTM/ad-click parameters) so we can see which channels bring visitors, and, if you aren't signed in, show Google's “Continue as …” sign-in prompt, which loads a script from Google. We do not use advertising cookies and do not sell this data.