Privacy Policy

This policy explains how Top Banana (also called “we,” “us,” or “our”) handles personal information when you visit topbanana.si, create an account, check a website’s visibility in AI answers, or use our reports and draft suggestions.

For questions about this policy or your information, contact hola@topbanana.si.

• Account information. Your email address, sign-in information, and information shared by Google if you choose Google sign-in.
• Information you submit. Your name, website domains, brand details, your relationship to a business, questions, preferences, and messages you send us.
• Reports and drafts. AI answers, mentions, citations, visibility results, suggested content, and your feedback or changes.
• Public information. Website content and public posts relevant to your brand, competitors, or search questions. These sources may include names or other personal information published by their authors.
• Technical information. Information used to deliver and protect the service, such as browser and device information, IP addresses, request details, and authentication or error records.

Please do not submit passwords, sensitive personal information, or information you do not have permission to share in website checks or drafting inputs.

We use information to sign you in, run checks, create and display reports, generate drafts, remember your preferences, respond to support requests, and protect the service from misuse.

If you opt in to score updates, we use your email address to send those updates. You can ask us to stop by contacting hola@topbanana.si. Essential account and service messages are separate from optional updates.

Where applicable data protection law requires a legal basis, we process information to provide the service you request, pursue legitimate interests in operating and securing it, meet legal obligations, or act on your consent where required. You may withdraw consent without affecting processing that happened before withdrawal.

Providing the service can require sharing relevant information with hosting, authentication, security, and AI providers. Our authentication integration uses Supabase; Google receives information when you choose Google sign-in; Cloudflare Turnstile helps check for automated abuse.

When live AI features are used, relevant website content, questions, brand context, and drafting inputs may be sent to the AI providers that power that feature. Their processing is subject to the applicable provider terms and our arrangements with them. Avoid including confidential or unnecessary personal information in prompts.

We may also disclose information when required by law, to respond to lawful requests, or to protect the rights and security of users and the service. A business transfer may involve transferring service records, subject to applicable privacy requirements.

Providers may process information in countries other than your own. Where legally required, international transfers must be covered by an appropriate transfer mechanism or safeguard. Contact us for details relevant to your information.

We use cookies for authentication and access to unlocked reports. A sign-in preference cookie can remember your email and last sign-in method for up to one year. Report-unlock cookies expire after seven days.

Local browser storage remembers preferences such as your sound setting and theme. Security providers may also use browser signals to detect abuse.

You can remove cookies and local storage in your browser settings. Doing so may sign you out, reset preferences, or remove access to an unlocked report on that browser.

Free-check reports and their drafts are available for seven days. That availability window is separate from retention of account information, support correspondence, security records, or backups.

Other information is retained for as long as needed to provide your service, resolve support requests or disputes, maintain security, and meet applicable legal obligations. The period depends on the type of record and why it is needed. Contact us to request deletion or ask about a particular record.

No online service can guarantee absolute security. Keep your sign-in codes private and contact us if you believe someone has accessed your account without permission.

Depending on where you live and the applicable law, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to processing; and withdraw consent. You may also be able to complain to your local data protection authority.

Send requests to hola@topbanana.si using the email associated with your account when possible. We may need to verify your identity before acting. Some records may need to be retained for legal or security reasons; we will explain any applicable limits when responding.

We may update this policy as the service or its data practices change. The date at the top identifies the latest version. We will provide additional notice of material changes where required.

Questions or privacy requests: hola@topbanana.si. For rules on using the service, read our Terms of Service.