Security at SeoData
SeoData holds your projects, tracked keywords, competitors and reports. This page explains how that data is stored, who can reach it, and what you can control from your workspace.
What data SeoData stores
SeoData stores the data you need to use the product and nothing more.
We do not sell your data, and we do not share project data between workspaces.
- Account data, which means your work email, name, hashed password and seat settings
- Project data, such as domains, tracked keywords, competitors, audit results, action plans and reports
- Billing records, such as plan, invoices and payment status, while card details stay with our payment provider
- Technical logs used to keep the service secure and running
Encryption in transit and at rest
Every connection to the app, the live report links and the API uses TLS. Databases, file storage and backups are encrypted at rest. Passwords are stored as salted hashes and are never readable by our staff. API keys are shown once when created and stored in hashed form.
Roles and seats
Each person signs in with their own seat. Shared logins are not needed on any plan.
| Plan | Access control |
|---|---|
| Starter | 1 seat |
| Pro | 3 seats |
| Agency | 10 seats with roles and per-project access |
| Enterprise | 30 seats with roles, per-project access, single sign-on and audit log |
Roles separate who manages billing, who edits projects and who only reads. Read-only access suits clients and managers who need the numbers but should not change settings.
Single sign-on and audit log on Enterprise
Enterprise workspaces connect to your identity provider with SAML single sign-on. Seats are created and removed in your directory, and access ends the moment a person leaves the company.
The audit log records sign-ins, seat changes, role changes, API key events, project exports and billing changes, with time, seat and IP address. Workspace admins can filter and export it.
Payments and invoices
Card payments run through our payment provider, and SeoData never stores full card numbers. Every payment produces an invoice available in the billing settings. Enterprise workspaces can also pay by invoice. The terms of payment are described in the refund policy.
GDPR and your rights
SeoData processes personal data in line with the GDPR. You can request access to your data, correction, export and deletion at any time. The administrator of the seodata.ai service answers these requests at [email protected]. Full details are in the privacy policy.
Data deletion
Workspace owners can delete a project or the whole workspace from Settings. Deleted data leaves the live systems right away and is removed from backups when those backups expire on their regular cycle. When an account is closed, project data is deleted after the end of the paid period unless you ask for earlier deletion.
How we collect web data
SeoData combines licensed data partners with our own crawler, which respects robots.txt. The method and the way site owners can block the crawler are on data and methodology.
Responsible disclosure
If you find a security issue in SeoData, write to [email protected] with a description, the steps to reproduce it and the affected address. Please give us reasonable time to fix the issue before sharing it publicly, and do not access data that is not yours. We confirm every report and keep you informed until the fix is live.
Questions about security
Send security and data protection questions to [email protected]. Answers to common questions are in the FAQ.