Privacy Policy

Who we are

AutoSeoPro.ai, London, United Kingdom, is the controller of the personal data described in this policy. You can contact us about privacy at support@autoseopro.ai.

This policy covers our website, the AutoSeoPro.ai app, our WordPress plugin, our API and MCP connector, the in-app AI assistant and the free SEO & AI Visibility Report. Where we process personal data on behalf of a customer (for example the visitors of a customer's website, or the people a customer contacts), the customer is the controller and we act as its processor, as explained in the sections below.

What we collect

Account data: your name, email address, a salted hash of your password, your multi-factor authentication settings, your language and the terms version you accepted. Organisation data: your organisation's name, its members and their roles, invitations, client portal users and white-label settings.

Website and content data: the websites you add, the public pages we analyse on them, audits, keywords, plans, articles, metadata, images, social posts, reports and approvals. Connected credentials: the access tokens and keys you connect (for example Google, WordPress or social networks), which are encrypted before they are stored. We never receive your Google or social network passwords.

Billing data: payments are handled by Square. We receive and keep your plan, subscription status, invoice amounts and dates and the identifiers Square gives us. We never receive or store your full card number or security code.

Usage, diagnostics and support data: security and activity logs (including IP address and browser type, used for security and rate limiting), feature usage counts against your plan limits, product quality diagnostics as described below, and the messages you send to our support.

How we use data and our legal bases

We use your data to provide the service you signed up for (performance of our contract with you): running audits, planning keywords, writing, approving and publishing content, posting to the social accounts you connect, sending the outreach you approve, producing reports and answering in the AI assistant.

We also rely on our legitimate interests to keep the service secure, prevent abuse and fraud, fix bugs and improve the product; on legal obligation to keep tax and accounting records; and on your consent where the law requires it, for example for optional marketing emails, which you can withdraw at any time. We do not sell personal data and we do not use it for advertising.

Google user data

We only request access to a Google product when you choose to connect it. Each permission is shown on Google's own consent screen before you approve it, and you can revoke access at any time in your Google account settings or by disconnecting inside AutoSeoPro.ai. These are the Google permissions (scopes) we request and what we do with each:

Google Search Console (webmasters.readonly, read-only): to read your properties' search performance (queries, pages, clicks, impressions and positions), the list of your properties and sitemaps, and to inspect the index status of your URLs. We never submit sitemaps or change your Search Console users or other settings.

Google Analytics 4 (analytics.readonly): to list the Analytics properties you can access so you can choose one, and to read aggregated reports such as sessions, traffic sources, landing pages and conversions. This access is read-only.

Gmail (gmail.send and userinfo.email): to send, from your own address, the outreach emails you approve, and to confirm which address you connected. Replies are detected through a reply address we control that is added to those emails (you still receive every reply in your own inbox); we do not read, store or analyse any email in your mailbox. Connections made before October 2026 may still hold gmail.readonly, used only to find replies in the threads of those outreach emails; reconnecting Gmail removes it.

Google Business Profile (business.manage): where you enable it, to read your business listing information (such as name, address, categories and hours), to publish the posts you approve, to read your reviews and to post the review replies you approve.

YouTube (youtube.upload and youtube.readonly): to upload the Shorts you approve to your channel and to read your channel's name and the statistics of the videos we uploaded for you.

AutoSeoPro.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features you use; we do not use it for advertising, including retargeting or interest-based ads; we do not sell it; we do not transfer it except as needed to provide those features, to comply with the law or as part of a merger or acquisition with notice to you; and we do not use it to develop, improve or train generalised AI or machine learning models.

Nobody at AutoSeoPro.ai reads your Google user data unless you give us permission for specific data (for example when you ask for support), it is necessary for security purposes such as investigating abuse, it is required by law, or the data has been aggregated and anonymised for internal operations. When a feature you use needs it (for example keyword planning based on your Search Console queries), the relevant data is sent to an AI provider only to produce that result for you.

Meta (Facebook and Instagram) and other social networks

If you use the Social add-on and connect Facebook through Facebook Login, we receive the list of Pages you manage and, for Instagram professional accounts linked to those Pages, their IDs and usernames. With your permission we publish the posts you approve to those Pages and accounts, add a first comment you write, and read the performance numbers of the posts we published (such as reach, likes and clicks).

You can also connect an Instagram professional account directly with Instagram Login, without a Facebook Page. In that case we receive the account's ID, username and profile picture and use the instagram_business permissions only to publish your approved posts, add your first comment and read those posts' insights.

For LinkedIn, Pinterest, TikTok, YouTube and Google Business Profile we likewise store the account's ID, name, profile picture link and the access tokens the network gives us, encrypted. We use them only to publish the posts in your Social calendar and to read those posts' public performance numbers. We do not read your private messages or your followers' personal data, and we do not sell or share this data.

Disconnecting and deleting data

You can disconnect any integration at any time inside AutoSeoPro.ai; its tokens are deleted at once. You can also remove our access in the network's own settings. For Facebook and Instagram, removing AutoSeoPro.ai in Facebook or Instagram settings sends us a deletion request that we carry out automatically. Step-by-step instructions are on our social data deletion page. To ask us to delete everything, write to support@autoseopro.ai.

Website visitor data from our WordPress plugin

When a customer installs the AutoSeoPro.ai WordPress plugin, it can collect limited, anonymous data about that website's visitors: page speed measurements (Core Web Vitals) from a 10% sample of page views, never from browsers that send Do Not Track or Global Privacy Control; counts of visits referred by AI assistants, recording only the assistant's name and the page path once per session; and counts of missing pages (404), recording only the path and the referring website's domain. The plugin sets no cookies and does not store IP addresses or user agents.

The customer who runs the website is the controller of its visitors' data, and AutoSeoPro.ai processes it on the customer's behalf only to provide their reports. Visitors with questions should contact the website's owner first.

Outreach contacts

To help customers find websites for content collaborations, we collect publicly available business contact details of editors and website owners: name, role, business email address, the website and the public page where the details were published. We do this on the basis of legitimate interests (enabling relevant business-to-business outreach) and collect no more than needed.

Outreach emails are sent by the customer from the customer's own Gmail account, and the customer is responsible for each message it sends. Every outreach email offers a way to opt out. If you opt out, or write to support@autoseopro.ai, we add your address to a suppression list so that no AutoSeoPro.ai customer can contact you through the service again, and we keep only what is needed to honour that request. You can also ask us to see or delete the details we hold about you.

AI providers

We use third-party AI providers to generate articles, metadata, social posts and images, to analyse websites and to answer in the AI assistant. We send only the data needed for the task you asked for. Where a provider offers it, we use terms or settings under which our inputs and outputs are not used to train the provider's models. The results are stored in your account like your other content.

AI assistant conversations

When you use the in-app AI assistant, we keep your conversations so you can see their history. Conversations are deleted automatically after 90 days without activity, and you can delete a conversation yourself at any time. Our team reads them only when you ask for support about them, or where needed for security or to comply with the law.

Free report and public tools

When you request the free SEO & AI Visibility Report, or use our public MCP tools, we receive the website address you enter and, if you choose to give it, your email address. We use a one-way hash of your IP address to apply rate limits and a cookie that lets you reopen your report for seven days. We use your email address only to send the report and, if you agree, to follow up about it.

Product quality diagnostics

To find bugs and confusing screens, we may record how the portal is used: which pages are opened, which buttons and links are clicked (by their label), whether a form was sent successfully, script errors and how long pages take. We never record what you type, passwords, cookies or payment details, and email addresses and phone numbers are masked. Only a sample of sessions is recorded, records are deleted after 30 days, and they are used only by our team to improve the product.

Nothing is recorded when your browser sends Do Not Track or Global Privacy Control. To ask for your organization to be excluded, write to support@autoseopro.ai.

Cookies

We use only cookies that are needed for the service to work: to keep you signed in, protect sign-in and multi-factor authentication, secure the connection steps with Google, social networks and WordPress, remember your language and region, and let you reopen a free report. We do not use advertising cookies. On our public marketing pages we count visits with Google Analytics only if you accept it in the banner; if you decline or ignore the banner, no analytics cookies are set. The signed-in app and the admin console never load it. The product quality diagnostics described above are first-party and are never used for advertising.

Who we share data with

We share personal data only with service providers that help us run AutoSeoPro.ai, under contracts that require them to protect it and use it only on our instructions: database and infrastructure providers, AI providers, our payment provider Square, email delivery providers, and the Google, Meta and other platform APIs you choose to connect. A list of our sub-processors is available on request.

We may also disclose data where the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is reorganised or sold, in which case this policy will continue to protect your data. We never sell personal data.

International transfers

Some of our service providers process data outside the United Kingdom and the European Economic Area. When they do, we rely on adequacy regulations or decisions, or on appropriate safeguards such as the European Commission's Standard Contractual Clauses with the UK Addendum, or the UK International Data Transfer Agreement.

How long we keep data

Your content stays until you delete it or close your account. Deleting a website removes its articles, audits and connections; deleting your organisation removes everything it holds. Backups are overwritten on their normal cycle. Billing and tax records are kept for as long as the law requires (in the UK, generally six years). Product diagnostics are deleted after 30 days and AI assistant conversations after 90 days without activity. Opt-out and suppression records are kept for as long as needed to honour them. Security logs are kept for a limited period and then deleted.

How we protect data

Connected credentials are encrypted before storage and data is encrypted in transit. Every request is scoped to your organisation at the database level, so one customer's query cannot reach another's data. Passwords are stored only as salted hashes, multi-factor authentication is available, and access by our team is limited to what is needed to run and support the service.

Your rights

Under the UK GDPR, the EU GDPR and other applicable data protection laws, you may have the right to access your data, correct it, have it erased, receive it in a portable format, object to processing based on legitimate interests or for direct marketing, restrict processing and withdraw consent at any time. Many of these you can do yourself in the app, including exporting and deleting your data. For anything else, write to support@autoseopro.ai; we answer within one month.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live or work.

Children

AutoSeoPro.ai is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to support@autoseopro.ai and we will delete it.

Changes to this policy

We may update this policy as the service or the law changes. The date at the top shows when it was last changed. If we make a material change, we will tell you by email or in the app before it takes effect.

Contact

Questions about this policy or a request about your data can be sent to AutoSeoPro.ai, London, United Kingdom, at support@autoseopro.ai.