Privacy Policy

Account data: name, email address, password hash, language preference, and the plan you are on.

Website data you connect: the domains you add, pages we crawl, your Google Search Console metrics (queries, impressions, clicks, positions), keyword lists, and the changes we produce and apply.

Usage data: log entries about actions taken in the application, generation requests and their results, and error diagnostics.

Affiliate data: for partners, referral clicks with a hashed IP address (never the raw address), user agent, referring page and payout details you supply.

Payment data: we do not receive or store card numbers. Payment is handled by our merchant of record, which shares with us only the subscription status and an anonymised reference.

To provide the service: measure your site, generate and apply changes, and report results.

To bill you, prevent fraud, and pay affiliate commissions correctly.

To support you when you contact us, and to send service notices such as billing failures or material changes to these documents.

To improve the service, including quality measurement of generated output. Where used for improvement, data is aggregated or de-identified.

Performance of a contract, for everything necessary to deliver the subscription you bought.

Legitimate interests, for security, fraud prevention, and improving the service — balanced against your rights.

Legal obligation, for tax and accounting records.

Consent, only where separately requested, such as marketing email. You can withdraw it at any time.

Hosting and databases operated by us on dedicated servers.

Our merchant of record, for payment processing, invoicing and tax.

AI model providers, for generating output. On plans where you connect your own keys, generation runs on your provider account under your agreement with them.

Search and SEO data sources, including the Google Search Console API and the Google Ads API, accessed with the authorisation you grant.

Email delivery for transactional messages.

We do not sell personal data, and we do not share it for advertising purposes.

Some processors are located outside your country. Where data leaves the EEA or the UK, transfers rely on adequacy decisions or standard contractual clauses.

Account and website data: for as long as your account is active, then deleted or anonymised within 90 days of closure unless we must keep it longer.

Invoices and accounting records: as required by law, typically ten years.

Logs and diagnostics: up to 12 months.

Affiliate click records: 24 months, to resolve commission disputes.

You may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests.

Write to [email protected] from your account address. We respond within 30 days. If you are in the EEA or UK you may also complain to your local supervisory authority.

We use a session cookie to keep you signed in, and an affiliate attribution cookie that lasts 60 days when you arrive through a partner link. We do not use advertising or cross-site tracking cookies.

Passwords are stored hashed. Traffic is encrypted in transit. Application databases are isolated per product and are not reachable from the public internet. Affiliate IP addresses are stored as one-way hashes.

No system is perfectly secure. If a breach affects your personal data we will notify you and, where required, the relevant authority without undue delay.

The service is for business use and is not directed at anyone under 18. We do not knowingly collect their data.

Privacy questions: [email protected].