Privacy Policy

1. About us

Belver.AI is operated by Slickweb Pty Ltd (ABN 28 626 582 714), an Australian company with offices in Sydney, NSW and Burleigh Heads, QLD. We provide AI Visibility (also known as AEO/GEO) and AI Operations services to Australian small and medium-sized businesses (SMBs).

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For European visitors we apply equivalent protections under the GDPR where applicable.

2. Information we collect

We collect personal information in the following ways:

Information you give us directly

• Contact form: name, email, company, website URL, topic of enquiry, budget range and the content of your message.
• Free audit: business website URL and email address for delivery of the report.
• Paid audit reports (Essentials, Advanced): billing name, business address, payment details (processed and stored by Stripe, not Belver.AI), and any competitor URLs you provide.
• Newsletter: email address.
• Engagement and proposal documents: company details, internal stakeholder names, and any other information you elect to share to scope work.

Information we collect automatically

• Standard server logs: IP address, browser type, pages viewed, referrer, and timestamps. Retained for security and analytics for up to 90 days.
• Analytics events from our site (page views, button clicks). We do not use third-party advertising trackers.
• Essential cookies (e.g., the belver_preview cookie used during our pre-launch coming-soon gate, and any session cookies set by our admin authentication).

Information we collect about your business for an audit

When you submit a website URL for a free or paid audit, our automated pipeline fetches and analyses publicly available pages on your site, and queries third-party AI platforms (OpenAI, Anthropic, Google AI Studio, Perplexity) with prompts relevant to your business category. We do not submit any personally identifiable information about your customers, staff, or non-public business data to those third parties.

3. How we use your information

We use personal information to:

• Respond to your enquiry, deliver an audit report, or fulfil services you have engaged us for.
• Send transactional emails (audit delivery, payment receipts, contact form auto-replies, account notifications).
• Send our newsletter and marketing communications where you have opted in. You can unsubscribe at any time from a one-click link in every email.
• Improve our services, including benchmarking aggregate, de-identified audit data to understand category-level trends.
• Comply with legal obligations and tax reporting requirements in Australia.

4. Who we share information with

We do not sell your personal information. We share it only with the following third parties, in the following circumstances:

• Supabase (database hosting) — stores form submissions, audit records, subscriber lists. Data resides in the ap-southeast-2 (Sydney) region.
• Vercel (web hosting) — serves the website and handles request logs.
• Resend (transactional email) — sends and tracks the emails we issue to you.
• Stripe (payments) — processes and stores credit card information for paid audit reports. We never see or store full card numbers.
• OpenAI, Anthropic, Google AI Studio, Perplexity, and Browserless — used to perform AI visibility queries and render pages during the audit pipeline. Only the prompts and URLs we generate are sent; not your contact details.
• Calendly — when you book a discovery call, your name, email and any answers to scheduling questions are shared with Calendly under their privacy policy.
• Cloudflare Turnstile — used as an invisible bot challenge on our audit and contact forms. See section 7a for details on what is collected.
• Government and regulators where required by law.

7a. Cloudflare Turnstile (bot protection)

To prevent abuse of our free audit and contact forms (in particular automated bots that would burn through our AI compute credits or spam our inbox), we use Cloudflare Turnstile in invisible mode. The challenge runs silently in your browser when you submit a form — there is no visible widget and no puzzle to solve.

To perform the challenge, Cloudflare collects information about your browser and device, including (but not limited to) your IP address, browser fingerprint, hardware characteristics and behavioural data. This information is processed by Cloudflare as an independent data controller solely for the purpose of detecting and preventing automated abuse. Cloudflare does not use this information for advertising and does not share it with us beyond a single pass/fail token returned to our server.

Cloudflare's full disclosures are governed by the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy. By submitting either form you consent to Cloudflare receiving and processing this information for bot mitigation.

5. Where your data is stored

Personal data we collect through the website and audit pipeline is stored in our Supabase Postgres database in the Sydney region (ap-southeast-2). Email delivery infrastructure (Resend) and payment processing (Stripe) may store data in their own jurisdictions outside Australia under their respective privacy commitments.

6. How long we keep it

• Contact submissions: retained for up to 24 months after last interaction.
• Audit records (free): retained for 12 months for re-test comparison, then deleted.
• Audit records (paid): retained for 7 years to comply with Australian tax record-keeping requirements.
• Newsletter subscribers: retained until you unsubscribe; one-click unsubscribe is present in every email.
• Server logs: 90 days.

7. Cookies

We use a small number of strictly necessary cookies and similar technologies:

• belver_preview — set when you successfully enter the pre-launch password, so the site remembers you for 90 days.
• belver_admin — set when an administrator signs in to the CMS at /admin. Not present for ordinary visitors.
• belver-light — a local preference (not a tracking cookie) recording whether you've toggled the site to light mode.

We do not use third-party advertising or cross-site tracking cookies.

8. Your rights

Under Australian privacy law you have the right to:

• Request access to the personal information we hold about you.
• Request that we correct any inaccuracies.
• Request that we delete your personal information (subject to legal retention requirements).
• Withdraw consent to marketing communications at any time.
• Make a complaint to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.

To exercise any of these rights, contact us at hello@belver.ai. We respond within 30 days of a verifiable request.

9. Security

We protect your information with industry-standard measures: HTTPS in transit, encrypted-at-rest databases, principle-of-least-privilege access controls, and short-lived signed URLs for any downloadable report content. No security control is perfect — if we ever detect a breach that affects your personal information, we will notify you within the timeframes required by the Notifiable Data Breaches scheme.

10. Children

Belver.AI's services are intended for Australian small and medium-sized business operators. We do not knowingly collect personal information from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. The "effective" date at the top reflects the most recent revision. Material changes will be notified by email to active customers and newsletter subscribers.

12. How to contact us

Privacy enquiries: hello@belver.ai
Slickweb Pty Ltd t/a Belver.AI
ABN 28 626 582 714
Sydney, NSW · Burleigh Heads, QLD