Privacy Policy
Effective October 24, 2026
This policy explains what information Online Presence X-Ray ("the X-Ray", "we", "us") collects, why, who we share it with and the choices you have. The X-Ray is operated by Thiago Alves, Estrada Chafic Jose Saif, 2780, Jardim Casablanca, Indaiatuba – SP, CEP: 13338-229, Brazil. Questions: support@thiago-alves.com.
What we collect
| Information | Why we use it |
|---|---|
| Name and email you enter at checkout | To process your order, create your account, send your login and receipts, and answer support requests. If you start checkout and don't finish, we may send up to three reminder emails, each with an unsubscribe link. |
| Payment details | Handled directly by Stripe. We never see or store your full card number. |
| Business information you add in the app (business name, specialty, city, website, Instagram handle and bio, Google Business Profile details, notes) | To generate your diagnoses, action plan and rewritten copy, and to show them to you in your dashboard. |
| Screenshots you choose to upload | Sent to the AI provider for that one diagnosis and not stored by us. |
| Public content of the website you give us | Read once to diagnose it. |
| Visit data (pages viewed, referring ad or link, approximate device and browser) | To measure which ads and pages work, using the Meta Pixel and campaign tags in links. |
Please don't enter customer or patient information in the app. The X-Ray is built to review your public marketing, not private records.
Who we share it with
We don't sell your personal information. We share it only with the service providers that run the X-Ray, each for the purpose listed:
- Stripe: payments and fraud prevention.
- Supabase: account login and the database that stores your business information and results.
- Cloudflare: hosting of the site, checkout and app.
- Google (Gemini API): the AI that writes your diagnoses and copy. We use the paid API, under which Google does not use your content to train its models.
- Resend: sending login, receipt and reminder emails.
- Meta: ad measurement through the Meta Pixel.
We may also disclose information if the law requires it, or to protect our rights or the safety of others.
How long we keep it
We keep your account and results while your account is active, so you can come back to them. Order records are kept as long as tax and accounting rules require. If you ask us to delete your account, we delete your business information and results within 30 days.
Your choices and rights
- Emails: every marketing email has an unsubscribe link. Order and account emails are always sent.
- Access, correction and deletion: email us and we will send you a copy of your data, fix it or delete it. You can also edit your business information in the app at any time.
- Ad tracking: you can limit ad tracking in your browser and in your Meta ad settings.
Depending on where you live (for example California, or other US states with privacy laws), you may have additional rights, such as knowing what we collect and asking us to delete it. We honor those requests through the email above, and we won't treat you differently for making one.
Security
Data travels encrypted (HTTPS). Each account can only see its own data, and access is protected by a password. No system is perfectly secure, so please use a strong password that you don't use anywhere else.
Children
The X-Ray is for business owners and is not directed to children under 13. We don't knowingly collect their information.
International use
We and some of our providers are located outside the United States, so your information may be processed in other countries, always with the protections described in this policy.
Changes
If we change this policy, we will update the date at the top. If a change is significant, we will email account holders before it takes effect.