Privacy

Last updated 3 November 2026

Cachet Engine ("Cachet") helps businesses appear accurately in AI assistants and search engines. This page says what Cachet collects, why, who else handles it, and how to have it removed.

If you request access

We keep the name, email, business name, website, business type and note you send, so we can review your request and contact you about it. We don't add you to a mailing list.

If you sign in

Sign-in uses Google. Cachet receives your name, email address and Google account identifier, and nothing else from your Google account. A single cookie keeps you signed in; it expires after 14 days or when you sign out.

If your business uses Cachet

• Your website. Cachet reads public pages on domains you have proved you control, and respects robots.txt while doing so.
• Your brand brief. The facts you confirm about your business, which Cachet publishes on your behalf.
• Figures you import. Metrics, bookings and reviews you choose to upload. Reviewer email addresses are kept private and never published.
• AI agent visits. The edge worker on your domain reports requests from AI crawlers and assistants: the agent's name, the page path and whether the request was signed. It doesn't record IP addresses or anything about your visitors.
• Questions sent to your site. When an assistant or anyone else asks a question through your site's /ask or /mcp address, Cachet keeps the question's wording, what it was about, how often it came up and when, for up to 180 days. It doesn't keep who asked, and questions containing contact details are discarded. The wording is never published.
• Search Console data. If you connect Google Search Console, Cachet reads which searches your site appears for, on which pages and at what position, and your daily clicks and impressions. Access is read-only and limited to your own domain. The access grant is stored encrypted. Disconnecting deletes this data and revokes the grant, unless the same Google account still connects another site.
• Your Cloudflare token. If you let Cachet install its worker, it stores the Cloudflare token you create, encrypted. The token can only edit Workers scripts and routes and read your zones; Cachet uses it only to install, update and remove its own worker on your domain. Taking Cachet off your domain deletes the token. You can also revoke it in Cloudflare at any time.
• Answer engine results. Cachet asks AI services questions about your category and records which businesses they name.

Who else handles data

• Railway hosts Cachet's application and database.
• Cloudflare runs the edge worker on participating brands' domains.
• OpenAI processes public website content and brand briefs to draft briefs and word pages. Cachet sends it no visitor or customer data.
• Google provides sign-in, Search Console data if you connect it, and the fonts on this site.

Cachet doesn't sell personal information, show ads or use third-party analytics.

Keeping and removing data

Access requests are kept while they're under review and for as long as you have an account. Account data is kept while the account is active. To see or delete what Cachet holds about you, or to close an account, email [email protected]. We'll confirm when it's done.