Beamo Privacy Policy

Last updated: July 22, 2026

Introduction

This Privacy Policy explains how Beamo LLC, a Wyoming limited liability company ("Beamo," "we," "us," or "our"), handles information when you use Beamo Search at beamosearch.com and related experiences, including our mobile app shell and optional browser extension that open the same website. Beamo operates from Nashville, Tennessee. Beamo Search is a search and assistant service: we proxy web, image, and news search through Brave Search, and we use AI providers including Groq, OpenAI, and, when configured, Anthropic for AI chat and search summaries. We do not require you to create an account to use the core service.

By using Beamo Search, you agree to this Privacy Policy and our Terms of Service. If you do not agree, please do not use the service.

What Beamo Search Does

Depending on how you use the site, we may process:

• Search queries you submit on the homepage or results page (web, image, or news modes).
• AI chat messages you send in the homepage overlay or results-page chat tab, including optional context from your current search.
• Summary requests to generate a short AI overview related to your search.
• AI Overview feedback when you click thumbs up, thumbs down, or submit a report about a summary.
• Approximate location coordinates (latitude and longitude derived from IP-based geolocation) when weather or location-aware chat features need them.
• Word definitions looked up via a public dictionary API when you use definition shortcuts.
• Instant answers (stock quotes, flight status, sports scores, package tracking links) when your query matches those shortcuts — handled by our server, which may call the providers listed below.

We send the minimum data needed for each feature to our servers; our servers then call the third-party providers listed below. We do not sell your personal information.

Information We Collect

Information you provide

• Search terms, chat messages, and similar text you type into Beamo Search.
• Optional feedback you choose to send through AI Overview thumbs, our in-product report form (short message plus optional search context, not full chat transcripts), or linked third-party forms (for example, Typeform from Settings), which may be governed by that provider's policy when you use the external link. AI Overview thumbs may include the search term, generated overview text, source URLs/titles, rating, page URL, and model/provider metadata so we can evaluate and improve the answer.
• If you choose to create an optional Beamo account when that feature is enabled, you sign in through Supabase Auth (our authentication provider) with either an email and password or an available third-party sign-in provider, currently Google. We receive your email address and display name and the saved searches, chat history, and preferences you sync to your account. We do not see or store your password — Supabase manages credentials and OAuth sign-in; if you use a third-party sign-in provider, you authenticate with that provider and we receive only your basic profile (email and name).
• If you subscribe to Beamo Search Pro (optional paid plan), our payment processor handles your payment details. We receive only your subscription status (plan, active/inactive, and renewal period) — not your full card number or banking information.

Information collected automatically

• Session cookie. When you use chat, we store a server-side session tied to an HTTP-only session cookie (PHPSESSID). The cookie is used to keep your conversation history on our server (up to the last 30 user/assistant messages for guests, or 100 when you are signed in to an optional account), to coordinate multi-tab chat, and to enforce per-session limits. On HTTPS, the cookie is marked Secure; it uses SameSite=Lax.
• Optional first-party product analytics. Product analytics remain off for your browser unless you make the positive choice to enable them. We store that choice in the strictly necessary beamo_analytics_consent preference cookie for up to one year. If you opt in and analytics are enabled, we set an HTTP-only first-party visitor cookie (for example, beamo_vid) and store only a salted HMAC hash of that ID in our analytics backend. We use it to count daily, weekly, and monthly active users; new versus returning visitors; source and device rollups; feature engagement; and retention cohorts. We do not store raw search queries, chat prompts, IP addresses, or user-agent strings in audience rollups, and we respect browser DNT/GPC signals by default.
• Optional search-quality measurement. After the same opt-in, daily search-quality rollups may store totals, latency, filters, zero-result counts, and salted HMAC fingerprints of normalized queries for up to about 14 days. When the self-hosted popular index is enabled, we may also store an opted-in normalized search term with aggregate demand counts for up to about 90 days so the crawler knows which public web searches to refresh. These records are not joined to an account, IP address, audience visitor hash, or full user-agent string.
• Server and security data. Our servers receive your IP address, request timestamps, HTTP method and path, and browser user-agent string. We use this data to operate the service, apply rate limits, check same-origin rules for API requests, and protect against abuse. Production rate-limit records use a hashed client identifier and short-lived fixed-window records in AWS DynamoDB; single-node development may use Redis or local files instead. We do not store the raw IP address in the rate-limit record.
• Browser storage on your device. Beamo Search may use sessionStorage and localStorage for preferences and performance, including: your last selected search type; cached search API responses; cached assistant reply snippets; theme preference (light/dark); cached IP geolocation results (typically for up to one hour); a flag for homepage chat layout; and a short-lived cross-tab signal so open tabs can refresh chat state. You can clear this data through your browser settings.

Information we do not collect for core use

• We do not require an email address, password, or paid account to search or chat on beamosearch.com. Optional accounts are available for people who choose to sync data or subscribe.
• We do not operate a separate social network profile for Beamo Search users.

How We Use Information

We use the information described above to:

• Return search results and related UI features you request.
• Stream AI chat replies and search summaries.
• Evaluate, debug, and improve AI Overview quality, including building internal evaluation or training datasets from feedback you choose to submit.
• Understand first-party product usage, including active users, new/returning visitors, high-level acquisition sources, device mix, engagement with search/chat/AI overviews, and retention cohorts.
• Maintain chat history in your server session until you clear it or the session ends.
• Improve reliability (for example, syncing chat across tabs, saving partial replies when a stream ends early, and deduplicating in-flight messages).
• Apply rate limits (for example, chat, search, and summary endpoints each have separate budgets).
• Protect the service through security headers, origin checks, input size limits, and abuse prevention.

Third-Party Services

To provide Beamo Search, we share certain data with service providers. Their use of data is governed by their own policies:

• Brave Search API — receives your search query and parameters so we can show web, image, or news results. Brave Search API
• Groq (gpt-oss) — receives chat messages (and optional search or location context we attach) and summary prompts so we can produce AI output for the standard ("Fast") tier. Conversations are sent to Groq's API from our servers. Groq Privacy Policy
• OpenAI — receives the same chat and summary content for the "Medium" and "Deep" AI answer tiers. Conversations are sent to OpenAI's Chat Completions API from our servers. OpenAI Privacy Policy
• Anthropic (Claude) — optionally, when configured for the "Deep" AI answer tier, the same chat and summary content is sent from our servers to Anthropic's Claude API instead of OpenAI to produce the response. Anthropic Privacy Policy
• Supabase — our authentication and account-data provider. When you use an optional Beamo account, your sign-in (email/password or an enabled OAuth provider) and your synced data (saved searches, recent history, chat, and preferences) are handled by and stored with Supabase, protected by row-level security so only your signed-in account can access your row. Supabase Privacy Policy
• Google (and Apple if enabled in the future) — optional sign-in providers. Google sign-in is currently available. If you choose an available third-party sign-in provider through Supabase, you authenticate with that provider and it shares your basic profile (email and name) with us. Google · Apple
• Stripe — our payment processor for Beamo Search Pro. It collects and processes your payment details on its hosted checkout and handles payment processing, recurring billing, and the customer billing portal. Where configured, Stripe Tax may calculate and collect sales tax / VAT based on Beamo's active registrations. Beamo remains the seller and merchant of record. We do not receive or store your full card or bank details. Stripe Privacy Policy
• Amazon Web Services — hosts parts of Beamo Search infrastructure and stores AI Overview feedback records in DynamoDB, including rating, query, generated overview text, source metadata, and provider/model metadata. When audience analytics are enabled, AWS DynamoDB may also store first-party rollup records keyed by hashed visitor IDs and aggregate day/week/month counters. Audience analytics rollups do not include raw queries, chat prompts, IP addresses, or full user-agent strings. AWS Privacy Notice
• ipinfo.io — when your browser requests approximate location, it may call ipinfo.io directly; we receive latitude/longitude (and related fields returned by that service) to support weather and location-aware answers. ipinfo.io Privacy Policy
• Free Dictionary API (dictionaryapi.dev) — receives English words you look up for definitions. dictionaryapi.dev
• Open-Meteo — receives place names or coordinates for weather, local-time previews, and map placement. Open-Meteo terms
• National Weather Service / weather.gov — receives latitude and longitude for U.S. weather-alert lookups when a weather instant answer checks active alerts. weather.gov privacy
• OpenStreetMap — map tiles load from OpenStreetMap when you use the in-app Maps tab; your search query is sent to Open-Meteo for geocoding only. OpenStreetMap copyright
• Frankfurter — receives currency codes for conversion previews. Frankfurter API
• Stooq — may receive stock ticker symbols for delayed US quotes when no Finnhub key is configured on our servers. Stooq
• Finnhub — optional; when configured, receives ticker symbols for stock quote instant answers. Finnhub Privacy Policy
• Aviationstack — optional; when configured, receives flight numbers (for example AA100) for flight-status instant answers. Aviationstack Privacy
• ESPN — receives team, league, or event names from sports score queries so we can return live scores, schedules, and standings. ESPN / Disney Privacy

When provider-feedback relay is configured and legally available, we may send AI Overview feedback records to the AI provider that generated the relevant answer so that provider can evaluate and improve model quality. We do not invent provider feedback endpoints; if no supported or configured provider feedback path exists, the DynamoDB record remains Beamo's first-party record.

Package-tracking instant answers today open carrier websites (UPS, USPS, FedEx, and similar) in your browser; we do not send tracking numbers to a separate tracking API unless we enable that integration later.

When you follow search results or links in Settings (travel, blog, store, support, and similar), you leave Beamo Search and become subject to those sites' policies. We are not responsible for third-party websites or services.

Our optional Beamo Search browser extension opens searches on beamosearch.com in a normal browser tab—the same site, content security policy, and PHP session behavior as a direct visit. The extension does not run searches on a separate domain or call our APIs from the chrome-extension:// origin. It does not replace this policy.

Affiliate Links and How We Make Money

Beamo Search is free to use. To support the service, some links are affiliate links: if you click them and make a purchase or booking, Beamo may earn a commission at no extra cost to you. We participate in the Amazon Associates and eBay Partner Network programs and the Kiwi.com travel affiliate program.

• Shop module. On commercial-intent searches (for example "buy …" or "best …"), we may show a clearly labeled Shop card that links to Amazon and eBay search pages carrying our affiliate tag. These are our own links, marked rel="sponsored".
• Travel tool. The "Travel" tool on the results page opens Kiwi.com flight search through our affiliate link.

Affiliate links never change your search results. We do not rewrite, reorder, or inject affiliate tags into the organic web, image, news, or video results from Brave — only Beamo's own clearly-disclosed Shop and Travel links carry a tag. We do not receive your purchase details; the affiliate networks attribute commissions on their side and do not share your personal order information with us. Beamo Search Pro subscribers do not see the Shop module (Pro is ad-free).

Mobile App

Our iOS and Android apps are built with Capacitor and load beamosearch.com (or your configured home URL) inside an in-app browser frame. Data handling is the same as on the web: cookies and storage apply within that embedded browser context, and API calls go to our servers as described above.

Optional accounts and sync

When optional accounts are enabled, you may create a free Beamo account — with an email and password or an available third-party sign-in provider, currently Google — to sync your saved searches, recent history, chat history (up to about 100 recent messages per account), and preferences such as theme, search filters, and AI answer style across browsers and devices. Authentication and your synced data are handled by Supabase (see Third-Party Services): the browser communicates directly with Supabase using your account's access token, and your data is stored in a Supabase database row protected by row-level security so that only your signed-in account can read or write it. Beamo's own web server is not the authentication authority and does not store your password. You can sign out at any time from the account menu, and you can review, export, or delete your synced data from Your data.

Beamo Search Pro (paid subscription)

Beamo Search Pro is an optional paid subscription. The core search and the basic AI Overview stay free for everyone. If you subscribe, Stripe processes checkout and recurring billing on its hosted pages, and Stripe Tax may calculate and collect applicable sales tax / VAT based on Beamo's active registrations. Beamo remains the seller and merchant of record. We never receive your full card or bank details. Our servers receive only your subscription status (plan, active/inactive, and current period end), which a webhook from Stripe records against your account so we can unlock Pro features (such as the ad-free experience and the "Deep" AI answer tier). You can manage or cancel your subscription from the billing portal linked in your account settings. Billing terms are described in our Terms of Service.

Data Retention

• Guest chat (no account) is kept in your PHP session on our server (up to about 30 recent messages) until you use "Clear chat" in the chat UI, your session expires, or you clear site data in your browser.
• Synced account chat is stored in your account record (up to about 100 recent messages) until you delete chat from Your data, delete your account, or we remove the account. While signed in, your current browser session may include newer messages until they sync.
• Saved and recent searches in an optional account persist until you remove them, delete your account, or we remove the account. Recent search sync can be turned off on Your data.
• Exports you download from Your data are generated on request and saved only on your device. Server exports include only your signed-in account (chat, saved searches, preferences, and account metadata we list on that page) — not other users’ data, passwords, or OAuth identifiers.
• Account deletion removes your account and its synced data from Supabase when you confirm deletion on Your data. Cancelling Beamo Search Pro stops future renewals; your billing records are retained by the payment processor as required for tax and accounting.
• AI Overview feedback submitted through thumbs or the report flow is stored in AWS DynamoDB with a default retention period of about 365 days unless we configure a shorter or longer operational retention window.
• Audience analytics rollups use a first-party visitor cookie and salted visitor hash with a default retention period of about 400 days unless we configure a shorter or longer operational retention window. Clearing cookies resets the browser's visitor ID.
• Search-quality rollups retain aggregate daily statistics and salted HMAC query fingerprints for about 14 days.
• Popular-index demand records in DynamoDB retain opted-in normalized search terms and aggregate counts for about 90 days after the most recent opted-in search. An optional bounded Redis demand counter may retain popular terms operationally while that self-hosted index is enabled.
• Rate-limit records expire shortly after their fixed enforcement window; local single-node fallback files may remain for up to about 48 hours.
• Browser caches persist on your device until you clear them or they expire (for example, geolocation cache entries are treated as fresh for about one hour).

Your Choices

• When accounts are enabled, open Your data (also linked from Settings when signed in) to review stored counts, export my chat (JSON or Markdown), export full account data (JSON), delete synced chat, or delete your account.
• Clear chat history using the clear/delete chat control in the chat UI, which removes server-side session conversation data.
• Clear cookies and site data for beamosearch.com in your browser to reset sessions and local caches.
• Use browser privacy controls such as Do Not Track or Global Privacy Control; our audience analytics collector respects those signals by default.
• Use the analytics preference controls below to enable or disable optional first-party analytics at any time. Disabling analytics also deletes the browser's audience visitor cookie.
• Disable or limit browser storage if your browser allows it (some features may not work).
• Stop using location-dependent features if you do not want approximate coordinates sent with requests (chat may still work without them).
• Do not click AI Overview feedback controls or submit report-form feedback if you do not want that feedback record used for AI evaluation or improvement.

Your Privacy Rights

Depending on where you live, you may have rights over your personal information. We honor these rights regardless of where you are located.

EEA, UK, and Switzerland (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Our legal bases for processing are: performance of a contract (providing the search, chat, and account features you request); legitimate interests (securing the service, preventing abuse, and operating reliably); and consent where required (for example, optional analytics you enable or location-aware features you choose to use). You may withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority. Because we do not require an account for core use, much of your data is processed transiently or stored only on your device; for account data, use Your data or contact us.

California (CCPA / CPRA) and other U.S. states

If you are a California resident (or a resident of another U.S. state with similar laws), you have the right to know what personal information we collect and how we use it, to request access to or deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly process the personal information of consumers we know to be under 16 for sale or sharing. The categories of information we collect and the purposes are described in the sections above.

How to exercise your rights

When you have a Beamo account, you can access, export, and delete your data directly from Your data. For any other request, email beamo@beamosupport.com and we will respond within the time required by applicable law. We may need to verify your identity before acting on a request. You may use an authorized agent where the law allows.

Cookies and Tracking

Beamo Search uses first-party storage for site functionality: a server-side session cookie (PHPSESSID) for chat, the beamo_analytics_consent cookie that remembers your analytics choice, and, when you sign in, your Supabase authentication token stored in your browser. We do not use advertising cookies, cross-site tracking cookies, or third-party advertising pixels. The optional beamo_vid audience cookie is not created until you explicitly enable analytics and is used only to create salted, aggregate Beamo usage metrics such as DAU/WAU/MAU, source/device rollups, and retention cohorts.

Security

We use HTTPS in production, content security policies, HTTP-only session cookies, same-origin checks on state-changing API requests, JSON body size limits, and rate limiting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children

Beamo Search is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

International Users

Beamo LLC is based in the United States. If you access the service from other regions, your information may be processed in the United States and in locations where our service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of Beamo Search after changes become effective means you accept the updated policy.

Contact Us

Questions about this Privacy Policy or our privacy practices:

• Email: beamo@beamosupport.com
• Phone: 615-983-0838
• Mail: Beamo LLC, 501 Union St STE 545 PMB 875283, Nashville, TN 37219