1. Information we collect

We collect the following categories of information:

• Identifiers: your name, email address, company name, and account login details.
• Billing information: your plan, invoices and transaction history. Card details are collected and stored by our payment processor; we never see your full card number.
• Project information: the websites you add, brand and product details, competitors, instructions, voice profiles, and the content we generate, edit and publish for you.
• Connected account data: the identifiers and access tokens needed to publish to your CMS or read from Google Search Console, plus the site names and publishing records shown in your dashboard.
• Search performance data: clicks, impressions, queries and page performance retrieved from Google Search Console for the properties you connect.
• Audit data: the website and prompts you submit to our free GEO audit, and the results.
• Backlink Exchange data: if you opt in, your website's URL, topics and publicly available metrics such as traffic estimates and domain authority, and records of the links placed to and from your site.
• Usage and device information: pages you visit, features you use, IP address, browser type, and approximate location, collected through logs and cookies.
• Communications: messages you send us, such as support requests and feedback.

2. How we use your information

We use your information to:

• provide, operate and maintain the Service, including researching, writing and publishing content for your Projects;
• show you performance reporting for your website;
• process payments, manage subscriptions and prevent fraud;
• understand how the Service is used so we can fix problems, improve it and build new features;
• communicate with you about your Account, the Service, security and changes to our terms;
• send you product updates and marketing emails, which you can unsubscribe from at any time; and
• comply with legal obligations and enforce our Terms.

Under the UK GDPR, and the EU GDPR where it applies, we rely on the following legal bases: performing our contract with you, our legitimate interests in running and improving the Service, your consent (for example, for non-essential cookies and some marketing), and compliance with legal obligations.

3. AI processing

To research topics and generate content, we send relevant parts of your Project information, and publicly available information about your website and niche, to third-party AI model providers. They process it on our behalf under contract. We do not use your Project information or Generated Content to train AI models, and we do not share it with other customers.

4. Google user data

If you connect Google Search Console, we request read-only access to the Search Console properties you choose. We use this data only to show search performance in your dashboard and to decide which content to create or update for that website.

• We do not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide the Service, for security purposes, or to comply with the law.
• We do not allow humans to read Google user data unless you give us permission (for example, while helping with a support request), it is needed for security, or the law requires it.
• You can revoke our access at any time from your dashboard or from your Google Account permissions. When you disconnect, we stop fetching new data and delete stored Search Console data within 30 days.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Connected CMS accounts

When you connect WordPress, Webflow, Shopify, Ghost, Framer, Notion or a webhook, we store the credentials or tokens needed to publish to it. These are encrypted at rest and used only to create, update and publish content according to the settings you control. Disconnecting an integration deletes its stored credentials.

6. How we share your information

We do not sell your personal information. We share it only as follows:

• Service providers: companies that host our infrastructure, process payments, provide AI models, send email, and help us analyse usage. They may only use your information to perform services for us. We list them on our Sub-processors page.
• Platforms you connect: we send content and requests to the CMS and other Connected Accounts you authorise.
• Backlink Exchange participants: if you opt in, your website's URL and the content linking to it are published on other participants' websites and become publicly visible. We do not share your name, email address or account details with other participants.
• Business transfers: if we are involved in a merger, acquisition, financing, sale of assets, or insolvency, your information may be transferred as part of that transaction.
• Legal requirements: when we believe disclosure is needed to comply with the law, respond to lawful requests, protect our rights, or protect the safety of others.
• With your consent: in any other case where you ask us to or agree that we may.

7. Cookies

We use cookies and similar technologies that are necessary to keep you signed in and to secure the Service. With your consent where required, we also use analytics cookies to understand how visitors use our website. You can block or delete cookies in your browser settings, but parts of the Service may not work without the necessary ones.

8. Data retention and deletion

We keep your information for as long as your Account is active and as needed to provide the Service. When you delete your Account, we delete or anonymise your personal information within 30 days, except where we must keep it longer for legal, tax or accounting reasons, or to resolve disputes. Copies in backups are overwritten on a rolling basis. You can ask us to delete your data at any time by emailing hello@automatedseo.app.

Content already published to your website stays there; deleting your Account does not remove it from your CMS.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct information that is inaccurate or incomplete;
• delete your personal information;
• object to or restrict certain processing, including direct marketing;
• receive your information in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email hello@automatedseo.app. We will respond within the time required by law and may need to verify your identity first. If you are unhappy with how we handle your information, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EU, to your local data protection authority.

10. International transfers

We are based in the United Kingdom, and our service providers may process your information in other countries, including the United States. Where required, we protect these transfers with appropriate safeguards, such as the UK International Data Transfer Addendum, the European Commission's Standard Contractual Clauses, or the UK-US data bridge.

11. Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and limiting access to staff who need it. No system is completely secure, however, so we cannot guarantee the absolute security of your information.

12. Children

The Service is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

13. Third-party links

The Service and the content we generate may link to websites and services we do not own or control. Their privacy practices are their own, and we encourage you to read their privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the date at the top. If the changes are significant, we will also let you know by email or in the dashboard.

15. Contact us

Safain Labs Ltd is the data controller responsible for your personal information. If you have questions about this Privacy Policy or want to exercise your rights, email us at hello@automatedseo.app.