Zire respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit the Zire website, create an account, use the Zire platform, contact us or otherwise interact with our services.

It also explains your rights under UK data protection law.

1. Who we are

Zire is an AI visibility platform that helps businesses understand how their brands appear across AI platforms and identify opportunities to improve their visibility.

Zire is operated by:

Zire AI
792 Wilmslow Rd
Manchester
M20 6UG
United Kingdom
Email: hello@zire.ai

For the purposes of UK data protection law, Zire AI is the data controller for the personal data described in this Privacy Policy, except where we act as a data processor on behalf of a customer.

2. The personal data we collect

The information we collect depends on how you interact with Zire.

Account information

When you create or manage a Zire account, we may collect:

• your name;
• email address;
• company or organisation name;
• account login information;
• account preferences;
• subscription and plan information; and
• other information you choose to provide to us.

Project and platform information

When you use Zire, we may process information you provide in connection with your projects, including:

• website domains and URLs;
• brand and company names;
• competitor names;
• prompts and questions you choose to track;
• project settings;
• AI visibility data;
• citations and source information;
• AI-generated answers and analysis; and
• other information submitted to or generated through the platform.

Some of this information may include personal data, particularly where a prompt, website or source refers to an identifiable individual.

Please avoid submitting special category or highly sensitive personal information to Zire unless it is necessary and you have an appropriate legal basis to do so.

Payment information

If you purchase a Zire subscription, payments are processed by our payment provider.

We may receive information such as:

• your name;
• billing address;
• company information;
• subscription status;
• transaction amount;
• payment status; and
• limited payment-method information.

We do not normally receive or store your complete payment card details.

Communications

If you contact us, request support, book a call or otherwise communicate with Zire, we may collect:

• your name;
• email address;
• company;
• the content of your message;
• support correspondence; and
• any other information you choose to provide.

Technical and usage information

When you use our website or platform, we may automatically collect technical information such as:

• IP address;
• browser type and version;
• device information;
• operating system;
• pages viewed;
• dates and times of access;
• referring pages;
• platform activity;
• diagnostic information;
• security logs; and
• other technical information necessary to operate, secure and improve our services.

Where cookies or similar technologies are used, further information is available in our Cookie Policy .

3. How we use your personal data

We may use personal data to:

• create and manage your Zire account;
• provide the Zire platform and its features;
• process subscriptions and payments;
• run prompts and analyse AI visibility;
• provide reports, recommendations and other platform outputs;
• provide customer service and technical support;
• communicate important service or account information;
• maintain the security and reliability of Zire;
• prevent fraud, misuse and unauthorised access;
• diagnose technical problems;
• understand how our website and services are used;
• improve and develop Zire;
• comply with legal, accounting and regulatory obligations;
• establish, exercise or defend legal claims; and
• send marketing communications where permitted by law.

We will not use personal data for purposes that are incompatible with those described above unless permitted or required by law.

4. Our lawful bases for processing

UK data protection law requires us to have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on the following bases.

Contract

We process information where it is necessary to provide the services you have requested or to take steps at your request before entering into a contract.

For example, this may include creating your account, providing Zire functionality and administering your subscription.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

These interests may include:

• operating and improving Zire;
• understanding how our services are used;
• providing customer support;
• maintaining network and information security;
• preventing fraud and abuse;
• communicating with customers about our services; and
• developing our business and products.

Legal obligation

We process information where necessary to comply with laws or regulatory requirements that apply to us.

This may include accounting, taxation, regulatory and law-enforcement requirements.

Consent

Where required, we rely on your consent.

This may apply, for example, to certain marketing communications and non-essential cookies or tracking technologies.

Where processing is based on consent, you may withdraw your consent at any time.

5. AI services and third-party providers

Providing Zire may involve sending information to third-party technology providers, including providers of:

• artificial intelligence and language models;
• cloud infrastructure and hosting;
• database and storage services;
• payment processing;
• email and communications;
• analytics;
• security and fraud prevention; and
• customer support tools.

Where AI providers are used to process prompts or analyse responses, the information submitted may be transmitted to those providers for the purpose of providing the requested Zire functionality.

We select service providers carefully and use appropriate contractual and data-protection arrangements where applicable.

6. Information obtained from public sources

Some Zire functionality may analyse information that is publicly available online.

This may include information obtained from:

• publicly accessible websites;
• search results;
• AI-generated answers;
• publicly available articles and publications;
• company websites;
• public directories; and
• other publicly accessible online sources.

Where this information contains personal data, we process it only where we have an appropriate lawful basis and in accordance with applicable data protection law.

Public availability does not mean that information falls outside data protection law.

7. When Zire acts as a processor

In some circumstances, a Zire customer may provide personal data to the platform for Zire to process solely on that customer’s instructions.

Where this applies, the customer is generally the data controller and Zire acts as a data processor.

The customer is responsible for ensuring that it has an appropriate legal basis for providing that personal data to Zire.

Our processing in those circumstances is governed by our contractual arrangements with the customer, including any applicable data processing agreement.

8. Who we share personal data with

We may share personal data with organisations that help us operate Zire, including:

• hosting and infrastructure providers;
• AI and model providers;
• payment processors;
• email and communications providers;
• analytics providers;
• security and monitoring services;
• professional advisers such as accountants and lawyers; and
• other service providers acting on our behalf.

We may also disclose personal data:

• where required by law;
• in response to a lawful request from a court, regulator or law-enforcement authority;
• where necessary to protect our legal rights or the rights of others;
• in connection with fraud or security investigations; or
• as part of a merger, acquisition, investment, restructuring or sale of all or part of our business.

We do not sell personal data to advertisers or data brokers.

9. International transfers

Some of the organisations we use to provide Zire may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to protect it in accordance with UK data protection law.

Depending on the destination and provider, these protections may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved standard contractual clauses; or
• another legally permitted transfer mechanism.

Where required, we also assess whether appropriate protections are in place for the transferred information.

10. How long we keep your information

We do not keep personal data for longer than is reasonably necessary for the purposes for which it was collected.

Retention periods depend on the type of information and why we process it.

For example:

• account and subscription information may be retained while your account is active and for an appropriate period afterwards;
• project information may be retained while required to provide your account and associated services;
• customer support correspondence may be retained where necessary to maintain service records and resolve disputes;
• technical and security logs may be retained for an appropriate period for security, diagnostics and fraud prevention; and
• financial and transaction records may be retained for the period required by accounting, taxation and other applicable laws.

When personal information is no longer required, we will delete or anonymise it where reasonably practicable.

11. How we protect your information

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

These measures may include access controls, authentication, encryption, logging, backups, infrastructure security and restrictions on who can access personal information.

However, no internet-based service can guarantee absolute security.

You are responsible for keeping your account credentials confidential and should contact us if you believe your Zire account has been compromised.

12. Cookies and similar technologies

Zire may use cookies and similar technologies to:

• operate essential website and account functionality;
• maintain security;
• remember preferences;
• understand website usage; and
• measure or improve our services.

Some cookies are strictly necessary for our website or platform to operate.

Where consent is required for non-essential cookies, we will not set those cookies until you have provided the required consent.

You can change your cookie choices through our cookie controls.

For more information about the cookies we use, including their purposes and duration, please see our Cookie Policy .

13. Marketing communications

We may contact you with information about Zire, new features, guides, products or services where permitted by law.

Where required, we will obtain your consent before sending electronic marketing.

In some circumstances, we may contact existing customers about similar products or services where permitted by applicable electronic marketing rules.

You can unsubscribe from marketing communications at any time by:

• using the unsubscribe option provided in the communication; or
• contacting us at hello@zire.ai .

Service communications relating to your account, subscription, security or important platform changes are not marketing communications and may still be sent where necessary.

14. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

Access — request a copy of the personal data we hold about you.

Rectification — ask us to correct inaccurate or incomplete personal data.

Erasure — ask us to delete your personal data in certain circumstances.

Restriction — ask us to restrict how we use your personal data in certain circumstances.

Object — object to certain processing, including processing based on legitimate interests and direct marketing.

Data portability — receive certain personal data in a structured, commonly used and machine-readable format and request that it be transferred to another organisation where applicable.

Withdraw consent — withdraw consent at any time where we rely on consent to process your information.

These rights are not absolute and may not apply in every circumstance.

You have the right to object at any time to the use of your personal data for direct marketing.

To exercise your rights, contact: hello@zire.ai .

We may need to verify your identity before responding to a request.

15. Automated decision-making

Zire uses automated technology and artificial intelligence to analyse AI visibility data and generate insights or recommendations.

However, Zire does not intend to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects on them.

If this changes, we will update this Privacy Policy and provide any additional information required by law.

16. Children’s privacy

Zire is designed for businesses and professional users and is not intended for children.

We do not knowingly seek to collect personal data from children through the Zire service.

If you believe a child has provided personal information to us, please contact us so that we can investigate and, where appropriate, remove it.

17. Links to other websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of those websites. We recommend reviewing the privacy information provided by any third-party website you visit.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including where:

• our services change;
• our data-processing activities change;
• we introduce new service providers; or
• applicable laws or regulatory guidance change.

The latest version will always be published on this page and the date at the top will show when it was last updated.

Where a change materially affects how we use personal data, we will take appropriate steps to bring it to the attention of affected users.

19. Contact us

If you have questions about this Privacy Policy, how we process personal data or wish to exercise your data protection rights, please contact:

Zire AI
792 Wilmslow Rd
Manchester
M20 6UG
United Kingdom
Email: hello@zire.ai

20. Complaints

If you have a concern about how we have handled your personal data, we would appreciate the opportunity to resolve it with you first.

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

The ICO provides further information about data protection rights and how to make a complaint on its website.