Privacy Policy

This policy explains what information AI SEO Platform ("we", "the service") collects, why we collect it, and what we do with it. It applies to everyone who uses the service.

Who we are

AI SEO Platform is a service that analyses a customer's website, researches search terms, writes articles, and publishes them to that customer's own website. If you have a question about this policy or about your data, contact us at support@example.com.

What we collect

Account information. Your name, email address, and (if you sign in with Google) your Google profile photo. We use this to identify you and to contact you about your account.

Your website content. When you add a website, we fetch its public pages and store the text, headings, links and images we find, so we can understand what your business does and check the site for problems. We only fetch pages that are publicly available to anyone.

Search and analytics data. If you connect Google Search Console or Google Analytics, we import performance figures - searches, clicks, impressions, rankings, sessions and page views - so we can show you how your pages perform. See "Google user data" below.

Integration credentials. If you connect your website - WordPress, Ghost, Shopify or your own webhook - or a Google account, we store the credentials needed to keep that connection working.

Payment information. Payments are processed by Stripe. We never see or store your full card details; we keep only the subscription status and a customer reference from Stripe.

Usage records. We record which operations ran for your account - pages crawled, articles written, external API calls - so we can enforce plan limits and understand our own costs.

Google user data

If you choose to connect Google Search Console or Google Analytics, we request these permissions:

• Search Console (read only) - to read which searches brought people to your website, and how your pages rank.
• Analytics (read only) - to read visitor and session figures for your website.

Both permissions are read only. We cannot modify, delete or publish anything in your Google account, and we never request the ability to do so.

We use this data solely to show you how your website is performing inside your own account. We do not sell it, use it for advertising, use it to train machine-learning models, or share it with anyone other than the service providers listed below.

You can disconnect Google at any time from your website's settings page, which deletes the stored tokens. You can also revoke our access directly at your Google account permissions page.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Artificial intelligence

We use Anthropic's Claude models to describe your business, suggest search terms, and write articles. To do this we send the relevant content - your website text, your business profile, and the article brief - to Anthropic for processing. We do not send your Google analytics data, your credentials, or your payment information.

How we protect your data

Integration credentials - publishing keys and passwords, and Google refresh tokens - are encrypted before they are stored, using AES-256-GCM with a key held separately from the database. They are never shown back to you or to anyone else, in any form.

Every customer's data is scoped to their own workspace and cannot be read by another customer. Requests for records belonging to a different workspace are refused.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your data, we will tell you.

Who we share data with

We do not sell your data. We share it only with the providers needed to run the service:

• Supabase - database hosting
• Vercel - application hosting
• Stripe - payment processing
• Anthropic - AI text generation
• DataForSEO - search volume and keyword data
• Inngest - background job processing
• Sentry - error monitoring

How long we keep it

We keep your data for as long as your account is open. If you delete a website, its pages, keywords, articles and analytics are deleted with it. If you close your account, we delete your data within 30 days, except where we are required to keep billing records for tax purposes.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email support@example.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Cookies

We use a single cookie to keep you signed in. We do not use advertising or tracking cookies.

Changes

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.