Who is responsible for your data
The controller of personal data processed through the service is the administrator of the seodata.ai service. You can reach us about any privacy matter at [email protected]. We answer requests about personal data within the time limits set by applicable law.
What data we collect
We collect only the data we need to provide the service, keep it secure and bill for it.
- Account data. The email address you use to sign up and a password, which we store only as a one-way hash. We never store your password in readable form.
- Domain snapshot data. The domain you enter for the one-time domain snapshot, together with the time of the request.
- Usage data. The domains, keywords and projects you analyze in your account, the reports you create and the settings you choose.
- Technical data. Your IP address, browser user agent, the pages you visit on our site and the time of each request.
- Campaign data. UTM parameters and the referring page that brought you to the site, so we know which channels work.
- Billing data. Your plan, billing period, invoices and payment status. Card details are entered directly with our payment provider and never reach our servers.
- Support data. The content of emails you send to [email protected] and our replies.
We do not collect special categories of personal data, and the service is not directed at children under 16.
Why we use your data and on what legal basis
| Purpose | Data used | Legal basis under GDPR |
|---|---|---|
| Creating and running your account | Account, usage and technical data | Performance of a contract, Article 6(1)(b) |
| Providing the one-time domain snapshot | Domain, IP address, user agent | Performance of a contract at your request, Article 6(1)(b) |
| Billing, invoicing and tax records | Billing and account data | Legal obligation, Article 6(1)(c), and contract |
| Security, abuse prevention and limits per IP | Technical data | Legitimate interest in protecting the service, Article 6(1)(f) |
| Measuring which channels bring visitors | Campaign and technical data | Legitimate interest in understanding our marketing, Article 6(1)(f) |
| Service emails such as sign-up codes, receipts and renewal notices | Account data | Performance of a contract, Article 6(1)(b) |
| Answering support requests | Support and account data | Performance of a contract and legitimate interest |
| Handling disputes and legal claims | Account, billing and technical data | Legitimate interest in establishing and defending claims, Article 6(1)(f) |
We do not sell personal data and we do not share it for cross-context behavioral advertising.
AI features
The AI action plan sends SEO metrics about the domains you analyze to an AI model provider to generate recommendations. We do not send your password, payment data or support messages for this purpose. The AI model provider processes the data on our instructions and may not use it to train its models.
Who receives your data
We share personal data only with service providers who need it to run the service, under contracts that bind them to confidentiality and data protection.
- A hosting provider in the EU, which runs our servers and databases.
- A payment provider, which processes card payments and subscriptions.
- An email delivery provider, which sends sign-up codes, receipts and reports.
- An AI model provider, which generates the AI action plan from SEO metrics.
- Licensed data partners, which supply SEO data for the domains and keywords you query. They receive the query, not your account details.
We may also disclose data where the law requires it, for example to a court or a public authority.
International transfers
Some providers process data outside the European Economic Area, including in the United States. Where that happens, we rely on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission, together with additional safeguards where needed.
How long we keep data
| Data | Retention period |
|---|---|
| Account and usage data | For as long as your account is active, then deleted within 90 days of account closure |
| Domain snapshot requests | 30 days |
| Server logs with IP address and user agent | 90 days |
| Billing records and invoices | As long as tax and accounting law requires, usually up to 7 years |
| Support emails | 2 years from the last message |
| Records needed for a dispute | Until the dispute is resolved and the limitation period ends |
Your rights under GDPR
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. You also have the right to lodge a complaint with your local data protection authority.
Your rights under US state privacy laws
If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia or Texas, you have the right to know what personal data we collect, to access it, to correct it, to delete it and to receive a copy in a portable format. You also have the right to opt out of the sale of personal data and of targeted advertising. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of, but you may still send us a request. We do not discriminate against anyone for exercising these rights. You may use an authorized agent, and you may appeal any decision on your request by replying to our answer.
How to exercise your rights
Send your request to [email protected] from the email address linked to your account. We may ask you to confirm your identity before we act. You can also delete your account in the account settings, which removes your account and usage data, subject to the retention periods above.
Cookies
The service uses only essential cookies needed for sign-in, security and your preferences. We do not use advertising pixels or tracking cookies. Details are in our cookie policy.
How we protect data
We use encrypted connections, hashed passwords, access controls and regular backups. Access to personal data is limited to people who need it to run the service. More details are on our security page.
Changes to this policy
We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your data, we notify account holders by email before it takes effect.