Beamo Privacy Policy

Last updated: June 2, 2026

Introduction

This Privacy Policy explains how Beamo LLC ("Beamo," "we," "us," or "our") handles information when you use Beamo Search at beamosearch.com and related experiences, including our mobile app shell and optional browser extension that open the same website. Beamo Search is a search and assistant service: we proxy web, image, and news search through Brave Search, and we use Google Cloud's Vertex AI (Gemma) and OpenAI's API for AI chat and search summaries. We do not require you to create an account to use the core service.

By using Beamo Search, you agree to this Privacy Policy and our Terms of Service. If you do not agree, please do not use the service.

What Beamo Search Does

Depending on how you use the site, we may process:

• Search queries you submit on the homepage or results page (web, image, or news modes).
• AI chat messages you send in the homepage overlay or results-page chat tab, including optional context from your current search.
• Summary requests to generate a short AI overview related to your search.
• Approximate location coordinates (latitude and longitude derived from IP-based geolocation) when weather or location-aware chat features need them.
• Word definitions looked up via a public dictionary API when you use definition shortcuts.
• Instant answers (stock quotes, flight status, sports scores, package tracking links) when your query matches those shortcuts — handled by our server, which may call the providers listed below.

We send the minimum data needed for each feature to our servers; our servers then call the third-party providers listed below. We do not sell your personal information.

Information We Collect

Information you provide

• Search terms, chat messages, and similar text you type into Beamo Search.
• Optional feedback you choose to send through our in-product report form (short message plus optional search context, not full chat transcripts) or linked third-party forms (for example, Typeform from Settings), which may be governed by that provider's policy when you use the external link.
• If you choose to create an optional Beamo account when that feature is enabled, you sign in through Supabase Auth (our authentication provider) with either an email and password or a third-party sign-in (Google, Apple, or Microsoft). We receive your email address and display name and the saved searches, chat history, and preferences you sync to your account. We do not see or store your password — Supabase manages credentials and OAuth sign-in; if you use Google, Apple, or Microsoft, you authenticate with that provider and we receive only your basic profile (email and name).
• If you subscribe to Beamo Pro (optional paid plan), our payment processor handles your payment details. We receive only your subscription status (plan, active/inactive, and renewal period) — not your full card number or banking information.

Information collected automatically

• Session cookie. When you use chat, we store a server-side session tied to an HTTP-only session cookie (PHPSESSID). The cookie is used to keep your conversation history on our server (up to the last 30 user/assistant messages for guests, or 100 when you are signed in to an optional account), to coordinate multi-tab chat, and to enforce per-session limits. On HTTPS, the cookie is marked Secure; it uses SameSite=Lax.
• Server and security data. Our servers receive your IP address, request timestamps, HTTP method and path, and browser user-agent string. We use this data to operate the service, apply rate limits, check same-origin rules for API requests, and protect against abuse. Rate-limit state is stored in server-side files keyed by a hashed client identifier derived from your IP (and, when configured behind a trusted proxy, forwarded client IP headers).
• Browser storage on your device. Beamo Search may use sessionStorage and localStorage for preferences and performance, including: your last selected search type; cached search API responses; cached assistant reply snippets; theme preference (light/dark); cached IP geolocation results (typically for up to one hour); a flag for homepage chat layout; and a short-lived cross-tab signal so open tabs can refresh chat state. You can clear this data through your browser settings.

Information we do not collect for core use

• We do not require an email address, password, or paid account to search or chat on beamosearch.com. Optional accounts are off by default until we enable them in server configuration.
• We do not operate a separate social network profile for Beamo Search users.

How We Use Information

We use the information described above to:

• Return search results and related UI features you request.
• Stream AI chat replies and search summaries.
• Maintain chat history in your server session until you clear it or the session ends.
• Improve reliability (for example, syncing chat across tabs, saving partial replies when a stream ends early, and deduplicating in-flight messages).
• Apply rate limits (for example, chat, search, and summary endpoints each have separate budgets).
• Protect the service through security headers, origin checks, input size limits, and abuse prevention.

Third-Party Services

To provide Beamo Search, we share certain data with service providers. Their use of data is governed by their own policies:

• Brave Search API — receives your search query and parameters so we can show web, image, or news results. Brave Search API
• Google Cloud (Vertex AI — Gemma) — receives chat messages (and optional search or location context we attach) and summary prompts so we can produce AI output for the standard ("Fast") tier. Conversations are sent to Google Cloud's Vertex AI endpoint from our servers. Google Cloud Privacy
• OpenAI — receives the same chat and summary content for the "Medium" and "Deeper" AI answer tiers. Conversations are sent to OpenAI's Chat Completions API from our servers. OpenAI Privacy Policy
• Anthropic (Claude) — optionally, when configured for the "Deeper" AI answer tier, the same chat and summary content is sent from our servers to Anthropic's Claude API instead of OpenAI to produce the response. Anthropic Privacy Policy
• Supabase — our authentication and account-data provider. When you use an optional Beamo account, your sign-in (email/password or Google / Apple / Microsoft OAuth) and your synced data (saved searches, recent history, chat, and preferences) are handled by and stored with Supabase, protected by row-level security so only your signed-in account can access your row. Supabase Privacy Policy
• Google, Apple, and Microsoft — optional sign-in providers. If you choose to sign in with one of them (through Supabase), you authenticate with that provider and it shares your basic profile (email and name) with us. Google · Apple · Microsoft
• Lemon Squeezy / Paddle — our payment processor for Beamo Pro (whichever is configured). It acts as the merchant of record: it collects and processes your payment details on its own hosted checkout and handles billing, renewals, and tax. We do not receive or store your full card or bank details. Lemon Squeezy · Paddle
• ipinfo.io — when your browser requests approximate location, it may call ipinfo.io directly; we receive latitude/longitude (and related fields returned by that service) to support weather and location-aware answers. ipinfo.io Privacy Policy
• Free Dictionary API (dictionaryapi.dev) — receives English words you look up for definitions. dictionaryapi.dev
• Open-Meteo — receives place names or coordinates for weather, local-time previews, and map placement. Open-Meteo terms
• OpenStreetMap — map tiles load from OpenStreetMap when you use the in-app Maps tab; your search query is sent to Open-Meteo for geocoding only. OpenStreetMap copyright
• Frankfurter — receives currency codes for conversion previews. Frankfurter API
• Stooq — may receive stock ticker symbols for delayed US quotes when no Finnhub key is configured on our servers. Stooq
• Finnhub — optional; when configured, receives ticker symbols for stock quote instant answers. Finnhub Privacy Policy
• Aviationstack — optional; when configured, receives flight numbers (for example AA100) for flight-status instant answers. Aviationstack Privacy
• TheSportsDB — receives team or event names from sports score queries. TheSportsDB

Package-tracking instant answers today open carrier websites (UPS, USPS, FedEx, and similar) in your browser; we do not send tracking numbers to a separate tracking API unless we enable that integration later.

When you follow search results or links in Settings (travel, blog, store, support, and similar), you leave Beamo Search and become subject to those sites' policies. We are not responsible for third-party websites or services.

Our optional Beamo Search Helper browser extension opens searches on beamosearch.com in a normal browser tab—the same site, content security policy, and PHP session behavior as a direct visit. The extension does not run searches on a separate domain or call our APIs from the chrome-extension:// origin. It does not replace this policy.

Affiliate Links and How We Make Money

Beamo Search is free to use. To support the service, some links are affiliate links: if you click them and make a purchase or booking, Beamo may earn a commission at no extra cost to you. We participate in the Amazon Associates and eBay Partner Network programs and the Kiwi.com travel affiliate program.

• Shop module. On commercial-intent searches (for example "buy …" or "best …"), we may show a clearly labeled Shop card that links to Amazon and eBay search pages carrying our affiliate tag. These are our own links, marked rel="sponsored".
• Travel tool. The "Travel" tool on the results page opens Kiwi.com flight search through our affiliate link.

Affiliate links never change your search results. We do not rewrite, reorder, or inject affiliate tags into the organic web, image, news, or video results from Brave — only Beamo's own clearly-disclosed Shop and Travel links carry a tag. We do not receive your purchase details; the affiliate networks attribute commissions on their side and do not share your personal order information with us. Beamo Pro subscribers do not see the Shop module (Pro is ad-free).

Mobile App

Our iOS and Android apps are built with Capacitor and load beamosearch.com (or your configured home URL) inside an in-app browser frame. Data handling is the same as on the web: cookies and storage apply within that embedded browser context, and API calls go to our servers as described above.

Optional accounts and sync

When optional accounts are enabled, you may create a free Beamo account — with an email and password or by signing in with Google, Apple, or Microsoft — to sync your saved searches, recent history, chat history (up to about 100 recent messages per account), and preferences such as theme, search filters, and AI answer style across browsers and devices. Authentication and your synced data are handled by Supabase (see Third-Party Services): the browser communicates directly with Supabase using your account's access token, and your data is stored in a Supabase database row protected by row-level security so that only your signed-in account can read or write it. Beamo's own web server is not the authentication authority and does not store your password. You can sign out at any time from the account menu, and you can review, export, or delete your synced data from Your data.

Beamo Pro (paid subscription)

Beamo Pro is an optional paid subscription. The core search and the basic AI Overview stay free for everyone. If you subscribe, checkout and recurring billing are handled by our payment processor (Lemon Squeezy or Paddle) as the merchant of record on its own hosted pages — we never receive your full card or bank details. Our servers receive only your subscription status (plan, active/inactive, and current period end), which a webhook from the processor records against your account so we can unlock Pro features (such as the ad-free experience and the "Deeper" AI answer tier). You can manage or cancel your subscription from the billing portal linked in your account settings. Billing terms are described in our Terms of Service.

Data Retention

• Guest chat (no account) is kept in your PHP session on our server (up to about 30 recent messages) until you use "Clear chat" in the chat UI, your session expires, or you clear site data in your browser.
• Synced account chat is stored in your account record (up to about 100 recent messages) until you delete chat from Your data, delete your account, or we remove the account. While signed in, your current browser session may include newer messages until they sync.
• Saved and recent searches in an optional account persist until you remove them, delete your account, or we remove the account. Recent search sync can be turned off on Your data.
• Exports you download from Your data are generated on request and saved only on your device. Server exports include only your signed-in account (chat, saved searches, preferences, and account metadata we list on that page) — not other users’ data, passwords, or OAuth identifiers.
• Account deletion removes your account and its synced data from Supabase when you confirm deletion on Your data. Cancelling Beamo Pro stops future renewals; your billing records are retained by the payment processor as required for tax and accounting.
• Rate-limit records are stored temporarily on the server (files older than about 48 hours may be purged during routine cleanup).
• Browser caches persist on your device until you clear them or they expire (for example, geolocation cache entries are treated as fresh for about one hour).

Your Choices

• When accounts are enabled, open Your data (also linked from Settings when signed in) to review stored counts, export my chat (JSON or Markdown), export full account data (JSON), delete synced chat, or delete your account.
• Clear chat history using the clear/delete chat control in the chat UI, which removes server-side session conversation data.
• Clear cookies and site data for beamosearch.com in your browser to reset sessions and local caches.
• Disable or limit browser storage if your browser allows it (some features may not work).
• Stop using location-dependent features if you do not want approximate coordinates sent with requests (chat may still work without them).

Your Privacy Rights

Depending on where you live, you may have rights over your personal information. We honor these rights regardless of where you are located.

EEA, UK, and Switzerland (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Our legal bases for processing are: performance of a contract (providing the search, chat, and account features you request); legitimate interests (securing the service, preventing abuse, and operating reliably); and consent where required (for example, location-aware features you choose to use). You may withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority. Because we do not require an account for core use, much of your data is processed transiently or stored only on your device; for account data, use Your data or contact us.

California (CCPA / CPRA) and other U.S. states

If you are a California resident (or a resident of another U.S. state with similar laws), you have the right to know what personal information we collect and how we use it, to request access to or deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly process the personal information of consumers we know to be under 16 for sale or sharing. The categories of information we collect and the purposes are described in the sections above.

How to exercise your rights

When you have a Beamo account, you can access, export, and delete your data directly from Your data. For any other request, email beamo@beamosupport.com and we will respond within the time required by applicable law. We may need to verify your identity before acting on a request. You may use an authorized agent where the law allows.

Cookies and Tracking

Beamo Search uses only strictly necessary storage: a server-side session cookie (PHPSESSID) for chat, and, when you sign in, your Supabase authentication token stored in your browser. We do not use advertising, analytics, or cross-site tracking cookies or trackers, and we do not load third-party advertising pixels. Because the storage we use is strictly necessary to provide features you request, it does not require a consent banner; you can still clear it any time through your browser settings.

Security

We use HTTPS in production, content security policies, HTTP-only session cookies, same-origin checks on state-changing API requests, JSON body size limits, and rate limiting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children

Beamo Search is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

International Users

Beamo LLC is based in the United States. If you access the service from other regions, your information may be processed in the United States and in locations where our service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of Beamo Search after changes become effective means you accept the updated policy.

Contact Us

Questions about this Privacy Policy or our privacy practices:

• Email: beamo@beamosupport.com
• Phone: 615-983-0838
• Mail: Beamo LLC, 501 Union St STE 545 PMB 875283, Nashville, TN 37219