Privacy Policy

How Gerush collects, uses and protects personal data

Aug 9, 2026

1. Scope and contact 2. Data we collect 3. Why we use data 4. Service providers and disclosures 5. Cookies and analytics 5.1 Third-party advertising cookies 5.2 Consent for advertising in the EEA, United Kingdom and Switzerland 6. International transfers 7. Retention 8. Your choices and rights 9. Security 10. Children 11. Changes

Effective date: August 9, 2026

1. Scope and contact

This Policy explains how Gerush processes personal data when you visit gerush.com, create an account, run checks, connect an AI assistant through MCP, purchase a plan or contact support.

For privacy questions or requests, email support@gerush.com. We normally respond within 1–3 business days.

2. Data we collect

Account data: name, email address, authentication identifiers, language and account settings.
Service inputs: domains, brand and competitor names, prompts, URLs, files or instructions you submit.
Reports and activity: checks, AI responses, citations, scores, generated recommendations, MCP authorization and workflow history.
Technical and usage data: IP address, device and browser information, timestamps, referring pages, session activity, diagnostics and security logs.
Support data: messages, attachments and information included in support requests.
Billing records: plan, order, customer and subscription identifiers, amount, currency and payment status. Full card details are collected and processed by Creem, not stored by Gerush.

Please do not submit sensitive personal data unless it is necessary and you have a lawful basis to do so.

3. Why we use data

We process data to:

create and secure accounts;
run checks, generate reports and provide requested workflows;
process subscriptions, enforce quotas and maintain billing records;
provide support and service communications;
detect abuse, fraud and security incidents;
analyze reliability and improve Gerush;
meet accounting, tax and legal obligations.

Depending on your location, our legal bases may include performance of a contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

4. Service providers and disclosures

We do not sell personal data. We disclose data only as needed to operate Gerush, comply with law, protect rights or complete a business transaction. Providers may include:

Vercel and Cloudflare for hosting, delivery, DNS and security;
Neon for managed database infrastructure;
Creem as Merchant of Record for payment, invoices, tax, refunds and subscription administration;
AI model and search providers used to perform requested checks and generation, which may include OpenAI-compatible providers, Google Gemini, Microsoft Azure AI and Perplexity-related services;
Microsoft Clarity or comparable analytics services where enabled;
email delivery and authentication providers used for account and support communications.

The provider used for a particular request may depend on the feature, region and current configuration. Providers process data under their own terms and appropriate contractual safeguards.

5. Cookies and analytics

Gerush uses essential cookies or local storage for authentication, security, language and core functionality. Where analytics is enabled, measurement technologies may record interactions such as page views, clicks and session diagnostics. Where required by law, non-essential analytics is used only after consent. You may restrict cookies through your browser, but essential features may stop working.

5.1 Third-party advertising cookies

Where advertising is displayed on Gerush (including through Google AdSense or other third-party ad networks), third-party vendors — including Google and its partners — may use cookies, web beacons or similar technologies to serve ads based on your prior visits to this and other websites. These technologies may collect information such as pages viewed, referrer and device data, but Gerush does not pass your name, email, phone number or other personal identifiers in advertising requests.

You can opt out of personalized advertising from Google at Google Ads Settings (adssettings.google.com), or visit www.aboutads.info to learn more about interest-based advertising and how to opt out across participating networks. You can also disable or delete cookies in your browser settings, although this may affect non-advertising functionality.

Before serving personalized advertising where consent is required, Gerush will use a Google-certified consent management platform (CMP) to ask visitors in the European Economic Area, United Kingdom and Switzerland whether advertising cookies and personal data may be used. The interface will provide choices to consent, reject or manage purposes and vendors. Advertising and measurement technologies must respect the choice recorded by the CMP. You can reopen the privacy choices interface, where available, to change or withdraw consent.

Gerush is a business software and professional education service and is not directed to children. We do not knowingly use child-directed activity or sensitive personal information to create advertising audiences. Account-level advertising classifications and consent messages are reviewed when advertising configuration changes.

6. International transfers

Our providers may process data in countries other than yours. Where required, we rely on recognized transfer mechanisms and contractual safeguards. By requesting a check, you understand that the submitted domain, prompts and necessary context may be sent to the selected AI providers.

7. Retention

We keep account and report data while your account is active and as needed to deliver historical reports. Security logs are retained for a limited period appropriate to investigation and abuse prevention. Billing and transaction records may be retained for the period required by tax, accounting and anti-fraud laws. When data is no longer needed, we delete or anonymize it, subject to backups and legal obligations.

8. Your choices and rights

Depending on applicable law, you may ask to access, correct, export, delete or restrict processing of your personal data, or object to certain processing. You may withdraw consent where processing is based on consent. You may also complain to your local data-protection authority.

Send requests from your account email to support@gerush.com. We may verify your identity before completing a request. Deleting an account may not remove records we must retain for legal, security or billing purposes.

Privacy Policy

Table of Contents