Privacy Policy
Last updated: July 31, 2026
1. Who we are
SIA Honeyb ("Honeyb", "we", "us") is a company registered in the Republic of Latvia. We operate the website honeyb.ai and related services. For questions about this policy, contact us at hello@honeyb.ai.
2. What data we collect
We collect the minimum data necessary to provide our services:
- Contact information: Email address and company name when you submit a form or create an account.
- Usage data: Pages visited, browser type, device type, and referring URL, collected automatically through standard web analytics.
- AI visibility data: Publicly available information about how AI systems reference brands. This is public data and does not include personal information.
- Connected Google account data: When you choose to connect Google Search Console or Google Analytics, we access those services on a read-only basis. See section 3 below.
3. Google user data
Honeyb lets you connect your Google Search Console and Google Analytics accounts so we can show your search and AI-visibility performance inside the product. This connection is optional, is only made when you explicitly authorise it through Google's OAuth consent screen, and can be revoked by you at any time.
Scopes we request and how we use them:
- Google Search Console (
webmasters.readonly): read-only access to your properties, search queries, clicks, impressions, and page performance, used solely to generate your keyword, ranking, and AI-visibility reports and recommendations. - Google Analytics (
analytics.readonly): read-only access to aggregated traffic and engagement metrics, used solely to show how organic and AI search traffic reaches your site.
Both scopes are read-only. Honeyb cannot modify, publish, or delete anything in your Google accounts.
Limited Use. Honeyb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we:
- use Google user data only to provide and improve the user-facing features you connected it for;
- do not sell Google user data, and do not use it for advertising;
- do not use Google user data to train, develop, or improve generalised or foundation AI or machine-learning models. Any AI processing is performed solely to produce your own reports and recommendations;
- do not transfer Google user data to others except as necessary to provide or improve the service, to comply with applicable law, or as part of a merger or acquisition with equivalent protections in place;
- do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymised.
You can disconnect your Google accounts at any time from within Honeyb, or revoke access directly at your Google account permissions page. On disconnection we stop accessing the data and delete stored Google API data and tokens as described in section 8.
4. Why we collect it
- To respond to your inquiries and provide our services.
- To generate the search and AI-visibility reports and recommendations you connect your data for.
- To improve our website and user experience.
- To send relevant communications if you've opted in.
- To comply with legal obligations.
5. How we protect your data
We apply safeguards appropriate to the sensitivity of the data we handle, including Google user data:
- Encryption in transit: all data exchanged with Honeyb and with Google APIs travels over encrypted TLS (HTTPS) connections.
- Encryption at rest: Google OAuth access and refresh tokens are encrypted by Honeyb with AES-256-GCM authenticated encryption, using a unique random initialisation vector per value, before being written to our database, in addition to the full-disk encryption provided by our managed infrastructure. The encryption key is held in managed secret storage, injected at runtime, and never stored in source control.
- Token handling: Google OAuth tokens are used only to make the read-only API calls that power your dashboard, and are deleted when you disconnect your account.
- Access control: access to production systems and stored data is restricted to authorised personnel on a least-privilege basis and protected by authentication controls.
- Data minimisation: we request only read-only scopes and retain only the data needed to provide the features you use.
- Incident response: if a data breach affecting your personal data occurs, we will notify affected users and the relevant supervisory authority as required by law.
6. Legal basis (GDPR)
We process your data based on: consent (when you submit a form), legitimate interest (to improve our services and analyze usage), and legal obligation (where required by law).
7. Data sharing
We do not sell your personal data. We may share data with trusted service providers who help us operate our website and services (e.g., hosting, analytics). These providers are contractually bound to protect your data. Google user data is shared only as described in section 3 (Limited Use).
8. Data retention
We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Data obtained from connected Google accounts is retained only while your account is connected, and is deleted when you disconnect the integration or close your account. You can request deletion at any time by contacting hello@honeyb.ai.
9. Your rights
Under GDPR, you have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija).
11. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
12. Contact
For any privacy-related questions or requests, email us at hello@honeyb.ai.
