Last updated: November 8, 2026
Thank you for your interest in AEO Answer Magnet. Our “Services” are (i) our website at https://onthebrinkb2b.com, including all its pages (the “Website”); and (ii) AEO Answer Magnet at https://app.onthebrinkb2b.com (the “App”), which turns the web pages you choose into short, fact-checked Q&As that AI tools can use.
This privacy policy (the “Policy”) explains who we are, what personal data we collect, what we do with it, and your rights. Please read it carefully.
Key points
We collect only what we need to run the Services. We do not sell your personal data. You can find the details in the rest of this Policy.
| Personal data we collect | What we do with it | Who we share it with |
|---|---|---|
| Your email address | Confirm it is yours, send your order emails, give you access to your orders | Our hosting provider; our email provider |
| Your website and the pages you choose | Read the public pages and write Q&As from them | Our hosting provider; the AI providers that write and check the Q&As |
| Search Console data (only if you connect it) | Choose the search terms each Q&A is built around | Our hosting provider; the AI providers |
| Payment details | Take payment for your order | Our payment provider (we never see your full card number) |
| Technical data (IP address, a cookie) | Apply free-sample limits, prevent abuse, keep the Services secure | Our hosting provider |
About us and contacting us
Spektor B2B LLC, doing business as On the Brink (“On the Brink”, “we”, “our” or “us”) owns and operates the Website and the App. We are a company registered in Vermont, United States.
The App is meant for businesses and the people who work for them. A Website visitor, an App user, or anyone whose personal data we hold may be called “you” in this Policy.
To ask about this Policy or anything privacy-related, or to use any of your privacy rights, contact us:
- Email: cspektor@onthebrinkb2b.com
- Mail: Charley Spektor, 631 Birch Hill Road, Windham, VT 05359
Some terms
“Data Protection Laws” means the laws that protect your personal data where you live. We follow the ones that apply to us, which may include:
- The CCPA (California Consumer Privacy Act), Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act;
- Other US state privacy laws in force, such as those in Colorado, Connecticut, Virginia and Vermont;
- The GDPR (EU General Data Protection Regulation, Regulation (EU) 2016/679), for visitors in the European Economic Area; and
- The UK GDPR, for visitors in the United Kingdom. When this Policy says “GDPR”, it includes the UK GDPR.
(In each case as amended or replaced from time to time.)
“Personal data” means any information about an identified or identifiable person, such as your name, your email address, or an online identifier like an IP address. US laws often call this “personal information”; this Policy treats the two as the same.
“Processing” means anything done with personal data: collecting, using, storing, sharing or deleting it. Under the GDPR, On the Brink is generally the “data controller”: we decide why and how your personal data is processed.
Personal data we collect from you and what we use it for
We limit the personal data we collect to what is needed for the purposes below. We do not use or share it for any other purpose, except with your consent or as the law allows or requires.
The table lists what we collect, why, and our legal basis under the GDPR. Under US Data Protection Laws, by giving us this information you consent to our processing it as described.
| Category | Personal data | What we use it for | Legal basis under the GDPR |
|---|---|---|---|
| Email address | Your email address, confirmed with a 6-digit code we send you | Confirm the address is yours before an order; send order emails; send sign-in links to your orders; keep track of any free test pages | Performing our contract with you |
| Order information | The website you enter, the page addresses you choose, your orders, the Q&As we deliver, prices paid and any refunds | Write and deliver your Q&As; let you download them again later; handle refunds and support | Performing our contract with you |
| Search Console data | Search terms, impressions and positions for the pages in your order (only if you connect Google Search Console) | Choose the search term each Q&A is built around | Your consent, which you give by connecting |
| Messages to us | Your name, email address and message, when you use our contact form or email us | Answer you | Your consent |
| Technical data | IP address, a cookie that recognizes your browser, your country (from your connection), and the tag in a link you followed | Apply free-sample limits, prevent abuse and fraud, keep the Services secure, and see which links bring visitors | Our legitimate interests in running secure, fair Services |
If you share personal data with us in any other way, we treat it as this Policy describes.
Sensitive personal data
We do not ask for sensitive personal data, such as health information or government ID numbers. Please do not send it to us.
Your web pages and Search Console data
Web pages. The App reads the public web pages you choose, the same way a visitor’s browser does, to write Q&As from them. We respect each site’s robots.txt rules: if a site asks automated readers not to read a page, we don’t. Pages can contain personal data, such as an author’s name; we use page content only to write and check your Q&As.
Google Search Console. Connecting Search Console is optional. If you do:
- You sign in with Google and approve read-only access to your Search Console data. We cannot change anything in your Google account or on your website.
- We use that access once, when you connect it on the quote screen, to read the search terms, impressions and positions for the pages you are ordering. We do not store your Google sign-in or the access Google gives us.
- We keep the search terms we used with your order, so your spreadsheet can show which search each Q&A targets.
- You can remove our access at any time from your Google account at https://myaccount.google.com/permissions.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models.
Personal data collected about you from third parties
We do not collect personal data about you from third parties, except the Search Console data you choose to connect and the payment confirmation our payment provider sends us.
Who we share your personal data with
We share personal data only with the service providers below, and only for what they do for us. Each is bound by its terms with us not to sell your personal data or use it for its own purposes.
| Service provider | What it does for us | Personal data it receives |
|---|---|---|
| Render (United States) | Hosts the App and stores its data | Everything the App holds: email address, order information, Search Console data, technical data |
| Google (Gemini API) | Writes the draft Q&As | Page content, and Search Console search terms if you connected it |
| Anthropic (Claude API) | Checks every fact in each Q&A against the page | Page content, the draft Q&As, and the Search Console search term used, if you connected it |
| Resend | Sends our emails | Your email address and the content of each email |
| Stripe | Takes payments | Your payment details, which go to Stripe directly; your email address and the order amount |
| Slack | Sends us internal notices about activity in the App | Your email address, website, order number and the tag in the link you followed |
| Automattic (WordPress.com) | Hosts the Website and its contact form | What you type in the contact form; technical data from your visit |
The AI providers receive the content of the pages you order, which is already public. Under their terms for paid business use, they do not use it to train their AI models.
We will also share personal data with law enforcement or other authorities when: (1) the law requires it, including lawful requests for national security or law enforcement; (2) we believe it is needed to investigate, prevent or act on illegal activity, fraud, or threats to anyone’s safety; or (3) we believe it is needed to deal with abuse of the Services, such as spam or attacks on our systems.
If On the Brink merges with another company, is reorganized, or sells all or part of its business, your personal data may pass to the new owner. We will require it to follow this Policy, or tell you that a new privacy policy applies.
We do not sell or rent your personal data to anyone, for marketing or any other purpose.
Payments
Payments are handled by Stripe. You enter your card details on Stripe’s own checkout page, so they go to Stripe directly: we never see or store your full card number. Stripe tells us whether the payment succeeded and the amount. Stripe’s use of your data is covered by the Stripe Privacy Policy.
Email communications
We use Resend to send our emails. We email you only about the Services: the code that confirms your email address, updates on your orders, links to your Q&As, refund notices and sign-in links to your orders. These emails are needed to use the App, so they have no unsubscribe link. We do not send marketing emails today; if we ever do, they will include a way to opt out.
Our emails are designed to comply with the US CAN-SPAM Act. If you believe an email from us breaks that law, please contact us using the details above.
Cookies and similar technologies
We use only cookies the App needs to work:
| Cookie | What it does | How long it lasts |
|---|---|---|
| Visitor cookie | Recognizes your browser, so free-sample limits apply fairly | 1 year |
| Sign-in cookie | Keeps you signed in to your orders after you confirm your email | 30 days |
Visitors in the European Economic Area get no visitor cookie; free-sample limits there use the IP address only.
The App also keeps a few small items in your browser’s own storage, such as the tag in a link you followed or an invite code, so the next screen knows them. They stay on your device.
The Website runs on WordPress.com, which may set cookies for security, for visit statistics, and to remember your cookie choices. You can manage these through the cookie notice on the Website.
You can set your browser to refuse or delete cookies; your browser’s help pages explain how. If you block the App’s cookies, free samples and sign-in may not work.
Technical data for limits and security
The App records the IP address and visitor cookie of each visitor who requests free samples, with the website entered. We use them to apply the free-sample limits (for example, one website per visitor), to detect abuse and fraud, and to keep the Services secure. We do not use them to build a profile of you or to advertise to you.
How we protect your personal data
We collect and keep only the personal data each purpose needs, and we use technical and organizational measures to protect it from loss and from unauthorized use or access.
- Encryption in transit. The Website and the App use HTTPS (TLS), the standard for encrypting information sent over the internet. Look for the padlock in your browser’s address bar.
- Trusted providers. We use established service providers for hosting, email and payments, chosen for their security standards.
- Limited access. Only we can see the App’s records, through a protected admin page.
- Confirmed emails. Every order needs an email address confirmed with a one-time code, so nobody can order under an address they don’t control.
If we suspect a data security breach, we will notify you and any authority the Data Protection Laws require, within the time they require.
Data retention
We keep personal data only as long as we need it for the purpose it was collected for:
- Orders, Q&As and your email address: for as long as you use the Services, so you can download your Q&As again later. Ask us at any time to delete them.
- Free samples: the Q&As written for public pages may be kept and shown again to anyone who samples the same page, without your personal data.
- Technical data for limits: 12 months.
- Backups: our hosting provider keeps daily backups for 7 days.
We may keep some data longer when the law requires it, for example payment records for tax purposes, or to protect our legal rights. Where the Data Protection Laws allow, we may keep data that has been anonymized so it no longer identifies you.
Your rights
Depending on the Data Protection Laws where you live, you may have these rights over your personal data. Using some of them may stop part or all of the Services from working for you.
- Know and access: ask what personal data we hold about you, how we use it and who we share it with, and get a copy;
- Portability: get your personal data in an easy-to-use format, to take to another company;
- Correction: have inaccurate or out-of-date personal data corrected;
- Deletion: have your personal data deleted from our records;
- Withdraw consent: withdraw any consent you gave us, at any time, such as by disconnecting Search Console;
- Restriction and objection: limit or object to our processing, for example if you believe it is inaccurate or unlawful;
- Opt out of sale, sharing and targeted advertising: we do not sell your personal data, share it for targeted advertising, or use it for profiling;
- No discrimination: we will not treat you differently for using any of these rights; and
- Appeal: if we decline your request, you can ask us to reconsider by replying to our decision.
To use any of these rights, email cspektor@onthebrinkb2b.com. We may ask you to confirm your identity, for example by confirming your email address, before we act. We will answer within the time the Data Protection Laws require.
If you ask us to delete your personal data, we will do so as far as we can. We may keep some data for a reasonable time to meet legal obligations or for legal proceedings.
Transfers outside the European Economic Area and the UK
Our Services and our service providers are based in the United States, where your personal data is stored. If you are in the European Economic Area or the UK, your personal data is transferred to the United States. We rely on safeguards the GDPR recognizes for these transfers, such as the European Commission’s Standard Contractual Clauses or our providers’ certification under the EU-US Data Privacy Framework. You can contact us to ask about them.
Complaints
If you are not satisfied with our answer, you can complain to a regulator:
- European Economic Area: the data protection authority in your country. They are listed at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
- United Kingdom: the Information Commissioner’s Office (ICO), at https://ico.org.uk, by phone at 0303 123 1113, or by mail at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
- United States: the attorney general of your state, or for California residents, the California Privacy Protection Agency.
If you are in Canada
Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25) may also apply to you.
Our person in charge of the protection of personal information is Charley Spektor, founder, at cspektor@onthebrinkb2b.com.
Your personal data is stored in the United States, where it may be accessed by authorities under US law.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, in Quebec, the Commission d’accès à l’information (https://www.cai.gouv.qc.ca).
Automated decision-making
The App uses AI to write and check Q&As from web pages. It does not use your personal data to make automated decisions that have legal or similarly significant effects on you.
Children’s privacy
The Services are meant only for adults: people who have reached the age of majority where they live. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.
Changes to this Policy
The date at the top shows when this Policy was last updated. Data Protection Laws change, and so do our Services, so we will update this Policy from time to time. The latest version is always at https://onthebrinkb2b.com/privacy-policy. If we make significant changes, we will post a clear notice on the Website and in the App.
Thank you for reading. Please keep your personal data safe; we promise to do the same.
© Spektor B2B LLC, 2026