What we collect, and what we do with it.

Word of Model measures how AI assistants answer questions about your company. Doing that needs your email address, what your business does, and the answers the assistants give. This page says exactly what is stored, who else sees it, and how to have it removed.

Timothy Pearce, trading as Word of Model (ABN 99 301 966 719) is responsible for the information described here. Last updated 22 August 2026.

What we collect

If you run a free scan

The domain you enter, the business profile we generate from it and you confirm, the question we ask on your behalf, and the answers the AI assistants give. If you ask to see the full result we also store the email address you give us.

If you join the waitlist

Your email address, and the domain you scanned if you came from a scan.

If you subscribe

Your email address, the details you approve in the setup wizard, which are your brand name, what you sell, who your buyer is, your market, your website and your competitor set, the five questions you approve, and every answer each surface gives when we ask them. Reports are stored as records so that a report you read in March still says in December what it said in March.

Payment

Payments are handled by Stripe. We never see or store your card details. What we keep is your Stripe customer and subscription identifiers, your plan, its status and its renewal date.

Technical

We record a hashed version of your IP address to stop one visitor burning through the free scan, which costs us money per run. The address itself is never stored: it is hashed with a secret salt before it is written, and the hash cannot be reversed into an address.

What we do not do

• No Google Analytics. We do not run a general analytics package, and we do not build a profile of you across other websites. We are currently recording sessions on the marketing pages, which is described below.
• We do not sell your information, and we do not share it for anyone else's marketing.
• We do not put your customers' personal information into AI assistants. The questions we ask are about your market and your category.
• We do not put any tracker on the report pages. Those are what you pay for, and there is no reason for an advertising company to see them.

Advertising, and exactly what changed

On 22 August 2026 we added a Meta advertising pixel to the marketing pages. Until then this page said there was no such thing here, and we said that if it ever changed we would say so before it started rather than after. This is that.

Not if you are in the UK or the EEA. The pixel is not served to visitors from the United Kingdom, the European Economic Area or Switzerland at all. Not disabled, not consent-gated: the script is never in the page. That is stricter than asking, it cannot be got subtly wrong, and our advertising is aimed at the United States anyway.

What it does elsewhere: reports that a scan finished, that somebody reached the setup page, and that a checkout started. We do not tell Meta when somebody buys. Sending that needs a kind of access we do not have on this account, so we have not built a workaround: your email address is never sent to Meta in any form, hashed or otherwise, and no purchase of yours is reported to them. We never send Meta the results of your scan or anything in your report.

Alongside it we keep our own count, tied to the scan rather than to a cookie, so we can tell which advertising works without depending on Meta's figures. If you would rather not be counted at all, an ad blocker stops the pixel, and you can email us to have your scan and everything attached to it deleted.

We are also recording sessions on the marketing pages right now, using Microsoft Clarity, and we would rather say so plainly than bury it. It records where you move, scroll and click so we can see where this page confuses people. It does not record what you type. Every field that could hold your email address is marked so that Clarity never captures its contents, and that instruction is in the page itself rather than a setting on their dashboard. It is not served to visitors from the United Kingdom, the European Economic Area or Switzerland, on the same rule as the pixel, and it is not on the report pages at all. It is here to answer one question about why this page is not working, and it comes back out when that is answered.

If you leave a review

A review is the one thing on this site we publish on purpose. We ask for a star rating, what you want to say, your first name, and optionally what you do and where you are. We do not ask for a surname, a company, a job title, a photograph or a LinkedIn profile, and there is nowhere to give us one.

Nothing appears anywhere until a person has read it. If we publish it, what appears is exactly those fields and nothing else. Reply to any email from us and we will take it down, without asking why.

If you choose to post the same words on Google, G2 or Trustpilot afterwards, that is entirely optional, it makes no difference to whether we publish yours, and what happens there is between you and them. We record that you clicked through to a platform. We have no way of knowing whether you actually posted, and we do not claim to.

Who else sees it

Running the product means sending some of this to other companies. These are all of them:

• Vercel hosts the site. Requests run in the United States.
• Supabase hosts the database where everything above is stored.
• Stripe takes payments and holds your card details, which we never receive.
• Resend delivers your reports and receipts, so it processes your email address and the contents of those emails.
• OpenAI, Google, xAI, Perplexity and SerpApi are the AI surfaces we measure and the provider we read Google's AI Overviews through. They receive the questions we ask about your category and your brand. They do not receive your email address or your billing details.

How long we keep it

Your reports and the answers behind them are kept while you are a subscriber and for twelve months after you cancel, so that a report you were sent stays checkable against the evidence it was built from. Free scans and waitlist entries are kept until you ask us to remove them. Ask us to delete any of it sooner and we will.

Your choices

Email hello@wordofmodel.ai and ask for a copy of what we hold, a correction, or deletion. A person reads it and you will get an answer. Deleting your account removes your data and ends your subscription at the end of the period you have paid for.

If you are in the United Kingdom or the European Economic Area you have rights of access, correction, erasure, restriction, portability and objection, and you can complain to your local data protection authority. In Australia you can complain to the Office of the Australian Information Commissioner. We would rather you told us first, because we can usually fix it the same day.

Security

The database is reachable only from our server, never from a browser, and row level security is on with no public read policies. Credentials live in environment variables, not in the code. This is a small operation run carefully; it is not a promise that nothing can ever go wrong, and if something does we will tell you rather than hope you do not notice.

Changes

If this policy changes we will update this page and, for anything that affects what we collect or who sees it, email subscribers before it takes effect.

Questions: hello@wordofmodel.ai. See also the terms of service.