Privacy Policy

This Privacy Policy explains how seou Inc. and seou.ai collect, use, store, disclose, and protect personal information when people visit our websites, create accounts, accept workspace invitations, connect integrations, upload media, generate content, run SEO workflows, receive emails, or otherwise use our services.

seou.ai is a business-to-business SaaS product. We process account data, workspace data, customer content, media, integration data, security logs, and limited usage information so that customers can manage SEO planning, content workflows, media, publishing operations, and local search analysis.

If a customer uses seou.ai to process personal information about its own customers, prospects, employees, contractors, or website visitors, the customer is responsible for having a lawful basis and providing any required notices to those people. In that situation, seou.ai generally acts as a service provider or processor for the customer.

We collect information directly from users, information generated by use of the service, information from connected providers, and information collected automatically for security, reliability, and product operation.

We use personal information only for legitimate business purposes connected to operating, securing, supporting, improving, and providing seou.ai. We do not sell customer workspace content or Google user data.

When users choose Google Sign-In, seou.ai requests only the minimum profile permissions needed to authenticate the user: openid, email, and profile. We use this data to create or sign in to an account, verify that the email is confirmed by Google, link the Google account to the seou.ai user, and maintain account security.

When an admin connects Google Search Console, seou.ai requests offline access to the Search Console data required for SEO reporting and strategy. We store the refresh token encrypted so the workspace can refresh Search Console metrics without asking the admin to reconnect every time. Access tokens are refreshed as needed and stored with expiration metadata.

When a user chooses the optional Google Business Profile search, Google Maps Platform returns autocomplete suggestions in the browser. seou.ai stores only the selected display name, Place ID, and Google Maps link, not the address, category, reviews, photos, or other Places content returned during that session. This feature is governed by the Google Maps Platform Terms of Service at https://cloud.google.com/maps-platform/terms and the Google Privacy Policy at https://policies.google.com/privacy.

We use Google Search Console data only to provide and improve user-facing SEO features in seou.ai, including reporting, page/query analysis, recommendations, trend detection, and AI-assisted SEO strategy. We do not sell Google user data, use it for advertising, or transfer it to advertising platforms or data brokers.

A workspace admin can disconnect Google Search Console by contacting support or using the relevant integration controls when available. Account deletion removes linked Google account records and encrypted Google Search Console credentials associated with the deleted workspace.

seou.ai uses AI systems to help generate SEO briefs, drafts, page improvements, metadata, image suggestions, images, and strategy recommendations. Inputs may include customer-provided business profile data, website URLs, page text, keywords, uploaded media metadata, Search Console metrics, SEO audit results, competitor data, and user instructions.

AI outputs may be inaccurate, incomplete, or unsuitable without human review. Customers are responsible for reviewing generated content before publishing, confirming factual claims, checking legal/regulatory requirements for their industry, and ensuring that generated content does not infringe third-party rights.

We do not intentionally include secrets, credentials, raw session tokens, or payment information in AI prompts. We apply input validation, unsafe text rejection, rate limits, quotas, and audit logging around AI features.

We use strictly necessary cookies to authenticate users, keep accounts secure, remember privacy preferences, and protect OAuth flows. These essential cookies cannot be disabled through our cookie manager because the service cannot work securely without them.

Optional functional, analytics/performance, and marketing cookies are controlled by the cookie manager. We do not load Google Analytics or other optional analytics scripts until the user has accepted analytics/performance cookies. If analytics are rejected, the application will continue to work and analytics tags will remain blocked.

Users can reopen the cookie manager from the in-app footer or from the Cookie Policy page to change choices. Browser settings may also block or delete cookies, although doing so can affect sign-in, security, and product functionality.

We disclose personal information only as needed to provide the service, comply with law, protect rights and safety, or complete business operations. We require vendors that process personal information for us to use it only for authorized purposes and to protect it appropriately.

We keep personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required for legal, security, accounting, dispute resolution, or compliance reasons. Retention may differ by data type and customer configuration.

We use administrative, technical, and organizational safeguards designed to protect personal information. These include database-backed sessions, HttpOnly cookies, SameSite cookie settings, Secure cookies in production, CSRF protection, origin validation, rate limits, tenant-scoped authorization checks, audit logging, private media storage, signed private asset URLs, upload validation, malware scanning workflows, and encryption for provider secrets.

No internet service can guarantee perfect security. Customers should use strong passwords, restrict admin access, review connected integrations, and promptly report suspected unauthorized access.

Depending on location and applicable law, users may have rights to know, access, correct, delete, export, restrict, object to certain processing, opt out of certain sales or sharing, limit use of sensitive personal information, and avoid discrimination for exercising privacy rights.

California residents may have rights under the CCPA/CPRA, including rights to know what personal information is collected and how it is used or shared, correct inaccurate information, delete information, opt out of sale or sharing for cross-context behavioral advertising, limit use and disclosure of sensitive personal information, and receive equal treatment for exercising rights.

seou.ai does not sell personal information as that term is commonly understood. We also do not sell Google user data or customer workspace content. If we introduce any activity that constitutes a sale or sharing under applicable law, we will provide the required notices and opt-out mechanisms before doing so.

To make a privacy request, contact us at privacy@seou.ai. We may need to verify your identity and your authority to act for a workspace before fulfilling a request. Some data may be retained when necessary for security, legal compliance, fraud prevention, dispute resolution, or backup integrity.

seou.ai is not directed to children under 13 and is intended for business users. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to seou.ai, contact privacy@seou.ai so we can take appropriate action.

seou.ai is operated from the United States and may use service providers in the United States or other countries. When personal information is transferred internationally, we rely on appropriate safeguards where required, such as contractual commitments, vendor due diligence, and data protection terms. We will update this policy if seou.ai self-certifies under a formal transfer framework such as the EU-U.S. Data Privacy Framework.

We may update this Privacy Policy as the product, laws, vendors, or data practices change. If changes are material, we will provide appropriate notice, such as in-product notice, email, or an updated effective date. Continued use of seou.ai after an update means the updated policy applies, unless additional consent is required by law or by a connected provider policy.

For privacy questions or requests, contact privacy@seou.ai. For account or product support, contact support@seou.ai.