Get started

Legal

Privacy policy

How AutomatedSEO collects, uses and protects your information.

Last updated

Thank you for choosing AutomatedSEO, a product of Safain Labs Ltd. This Privacy Policy explains what information we collect when you use automatedseo.app and our products (the "Service"), how we use and share it, and the choices you have. It should be read together with our Terms of service.

01Information we collect

We collect the following categories of information:

  • Identifiers: your name, email address, company name, and account login details.
  • Billing information: your plan, invoices and transaction history. Card details are collected and stored by our payment processor; we never see your full card number.
  • Project information: the websites you add, brand and product details, competitors, instructions, voice profiles, and the content we generate, edit and publish for you.
  • Connected account data: the identifiers and access tokens needed to publish to your CMS or read from Google Search Console, plus the site names and publishing records shown in your dashboard.
  • Search performance data: clicks, impressions, queries and page performance retrieved from Google Search Console for the properties you connect.
  • AI visibility data: publicly available brand mentions, cited pages, citations and AI responses relating to your Project, together with measurements supplied by research providers such as Ahrefs.
  • Audit data: the website you submit to our free website audit, its publicly available page data, and the results. If you request an emailed report, we also collect the email address you provide.
  • Backlink Exchange data: if you opt in, your website's URL, topics and publicly available metrics such as traffic estimates and domain authority, and records of the links placed to and from your site.
  • Usage and device information: pages you visit, features you use, IP address, browser type, and approximate location, collected through logs and cookies.
  • Communications: messages you send us, such as support requests and feedback.

02How we use your information

We use your information to:

  • provide, operate and maintain the Service, including researching, writing and publishing content for your Projects;
  • measure and show you search and AI visibility reporting for your website, including whether it is mentioned or cited in services such as ChatGPT;
  • process payments, manage subscriptions and prevent fraud;
  • understand how the Service is used so we can fix problems, improve it and build new features;
  • create customer lists, demonstrations, success stories, case studies and marketing that evidence results achieved through the Service, using your business name, logo, website and Performance Data as described in our Terms;
  • communicate with you about your Account, the Service, security and changes to our terms;
  • send you product updates and marketing emails, which you can unsubscribe from at any time; and
  • comply with legal obligations and enforce our Terms.

Under the UK GDPR, and the EU GDPR where it applies, we rely on the following legal bases: performing our contract with you, our legitimate interests in running and improving the Service, your consent (for example, for non-essential cookies and some marketing), and compliance with legal obligations.

03AI processing

To research topics and generate content, we send relevant parts of your Project information, and publicly available information about your website and niche, to third-party AI model providers. They process it on our behalf under contract. We do not use your Project information or Generated Content to train AI models, and we do not share it with other customers.

04Google user data

If you connect Google Search Console, we request read-only access to the Search Console properties you choose. We use this data only to show search performance in your dashboard and to decide which content to create or update for that website.

  • We do not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide the Service, for security purposes, or to comply with the law.
  • We do not allow humans to read Google user data unless you give us permission (for example, while helping with a support request), it is needed for security, or the law requires it.
  • You can revoke our access at any time from your dashboard or from your Google Account permissions. When you disconnect, we stop fetching new data and delete stored Search Console data within 30 days.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

05Connected CMS accounts

When you connect WordPress, Webflow, Shopify, Ghost, Framer or a webhook, we store the credentials or tokens needed to publish to it. These are encrypted at rest and used only to create, update and publish content according to the settings you control. Disconnecting an integration deletes its stored credentials.

06MCP connections

When you connect an MCP client to AutomatedSEO, we process the authentication details and the workspace and website data needed to answer the specific request. MCP calls are scoped to the workspace and website identifiers supplied by the client. We do not reconstruct or store chat transcripts through the MCP server, and we do not include authentication secrets in MCP tool responses.

For security, rate limiting and audit purposes, we record the MCP authentication method, tool name, workspace and website associated with each call and whether it succeeded. Personal access tokens are shown once when created and only their hashes are stored.

07How we share your information

We do not sell your personal information. We share it only as follows:

  • Service providers: companies that host our infrastructure, process payments, provide AI models, send email, and help us analyse usage. They may only use your information to perform services for us. We list them on our Sub-processors page.
  • Research and measurement providers: we may submit your domain name, brand name and other publicly available Project information to providers such as Ahrefs to obtain search and AI visibility measurements. We do not send your account credentials, billing information or non-public Project instructions for this purpose.
  • Platforms you connect: we send content and requests to the CMS and other Connected Accounts you authorise.
  • Backlink Exchange participants: if you opt in, your website's URL and the content linking to it are published on other participants' websites and become publicly visible. We do not share your name, email address or account details with other participants.
  • Public results and case studies: as described in our Terms, we may publish your business name, logo, website and Performance Data to demonstrate customer results. We do not publish a person's name, photograph, quotation or testimonial without separate permission, and you may opt out of future identifiable publicity at any time.
  • Business transfers: if we are involved in a merger, acquisition, financing, sale of assets, or insolvency, your information may be transferred as part of that transaction.
  • Legal requirements: when we believe disclosure is needed to comply with the law, respond to lawful requests, protect our rights, or protect the safety of others.
  • With your consent: in any other case where you ask us to or agree that we may.

08Cookies

We use cookies and similar technologies that are necessary to keep you signed in and to secure the Service. With your consent where required, we also use analytics cookies to understand how visitors use our website. You can block or delete cookies in your browser settings, but parts of the Service may not work without the necessary ones.

09Data retention and deletion

We keep your information for as long as your Account is active and as needed to provide the Service. When you delete your Account, we delete or anonymise your personal information within 30 days, except where we must keep it longer for legal, tax or accounting reasons, or to resolve disputes. Copies in backups are overwritten on a rolling basis. You can ask us to delete your data at any time by emailing hello@automatedseo.app.

Content already published to your website stays there; deleting your Account does not remove it from your CMS.

10Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy of it;
  • correct information that is inaccurate or incomplete;
  • delete your personal information;
  • object to or restrict certain processing, including direct marketing;
  • receive your information in a portable format; and
  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email hello@automatedseo.app. We will respond within the time required by law and may need to verify your identity first. If you are unhappy with how we handle your information, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EU, to your local data protection authority.

11International transfers

We are based in the United Kingdom, and our service providers may process your information in other countries, including the United States. Where required, we protect these transfers with appropriate safeguards, such as the UK International Data Transfer Addendum, the European Commission's Standard Contractual Clauses, or the UK-US data bridge.

12Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and limiting access to staff who need it. No system is completely secure, however, so we cannot guarantee the absolute security of your information.

13Children

The Service is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

15Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the date at the top. If the changes are significant, we will also let you know by email or in the dashboard.

16Contact us

Safain Labs Ltd is the data controller responsible for your personal information. If you have questions about this Privacy Policy or want to exercise your rights, email us at hello@automatedseo.app.