Security
How we handle your data
Running an AEO audit should never mean handing over the keys to your business. Here is exactly what we ask for, what we store, and what we never touch.
Encrypted in transit
Every connection to this site and to our APIs runs over HTTPS/TLS. Your report data, account details and dashboard traffic are encrypted between your browser and our servers.
We never see your card
Payments run on Stripe’s hosted checkout. Your card number is entered on Stripe’s own page and is never transmitted to or stored on our servers. We only receive the confirmation that a payment succeeded.
Passwords are hashed
Account passwords are stored only as bcrypt hashes — never as readable text. Nobody at MyFast AI can look up your password; if you lose it, it gets reset, not retrieved.
No access to your website
Running an audit requires no plugin, no tracking script, no CMS login and no FTP access. We only need your public domain name. Everything we test is what an AI engine can already see in public.
Your reports stay yours
Reports are stored in your account so you can compare progress over time. Your business details and results are used to generate and improve your own reports — not published, not resold and not shared with your competitors.
We do not sell customer data
We do not sell or rent your contact details or your report data to third parties. Contact information is used to deliver your reports and to support your account.
What we actually collect
- •Business details — your domain, business name, category, service area and the competitors you choose to be measured against. These are what generate your buyer searches.
- •Contact details — name, email and phone, so we can create your account and deliver your report.
- •Report results — the answers each AI engine returned, kept so you can track progress between audits.
- •Payment status — confirmation from Stripe that a charge succeeded, plus your membership state. No card numbers.
Deleting your data
You can cancel your membership at any time from your dashboard. If you want your account and stored reports removed entirely, call 1-888-303-6415 or email [email protected] and we will delete them.
What data the audit actually touches
An AEO audit needs less about you than most software does. It needs your business name, website, category, service area and the services you offer — the same facts you publish on your own homepage — plus an email so we can send the report.
It does not need access to your website, your analytics, your CRM, your ad accounts or your customer records. There is no tracking script to install and no code to grant permissions to. The queries we send to the AI engines are questions a customer could ask in public; they never contain your account credentials or billing details.
How it is stored and who can reach it
Traffic is served over HTTPS. Passwords are hashed, never stored in a readable form, and no one here can look up your password. Payment card numbers never touch our systems — the payment processor handles them and we keep only the plan, its status and the last four digits.
Access to production data is limited to the people who operate the service, and it is used to run and support your reports, not to browse them. We do not sell data, we do not share it with advertising networks, and we do not use your business data to train models of our own.
What we will not claim
We are not going to put certification badges on this page that we have not earned. We do not currently hold SOC 2, ISO 27001 or an equivalent third-party attestation, and saying otherwise to look enterprise-ready would be exactly the kind of unverifiable claim this whole product exists to expose.
What we will do is answer any security question directly, in writing, over the phone or in a questionnaire. If your procurement process requires an attestation we do not hold, we would rather tell you that up front than waste your evaluation cycle.
Deleting your data
Ask and we act. Email [email protected] to request a copy of your data, a correction, or full deletion of your account and its report history. Report data is removed within 30 days of an account closing, apart from the records we are legally required to keep for tax and accounting.
Cancelling the membership stops billing but does not by itself delete your history, because most people who cancel come back and want the trend intact. If you want it gone, say so explicitly and it will be.
Frequently asked questions
Do you install anything on my website?
No. Nothing is installed, injected or embedded. The audit works entirely from the outside, exactly like a customer asking an assistant about you.
Are my report results public?
No. Your results are visible in your account only. We do not publish customer reports and we do not name customers in marketing without written permission — which is why the sample report on this site uses a fictional business.
Do the AI engines see my private data?
They see the buyer questions we ask them, which are the kind of questions any member of the public could ask. They do not receive your account details, billing information or anything you have not already published.
Are you SOC 2 or ISO 27001 certified?
Not at this time, and we will not imply otherwise. We are happy to complete a security questionnaire and answer specific questions about our controls.
Related reading
Questions about security?
Ask us directly. Our line is open 24/7, every day including holidays.
Published · Last updated