Privacy Policy

1. Who we are and scope

This Privacy Policy explains how SeoTools (“SeoTools”, “we”, “us”) handles personal data when you visit our website, create an account or use the SeoTools platform and related services (the “Services”). For personal data that our customers upload or process in the Services (for example teammates’ details), the customer is the controller and we act as a processor on their behalf.

2. Information we collect

• Account information — name, email address, company or workspace name, password (stored only as a one-way hash) and two-factor authentication settings.
• Billing information — plan, invoices and payment status. Card and bank details are collected and stored by our payment processors (such as Stripe or Razorpay), not by us.
• Content you provide — websites, keywords, competitors, content drafts, workflows and messages you send to support or through our contact form.
• Usage and device data — log data such as IP address, browser type, pages viewed, actions taken and timestamps, used for security, troubleshooting and improving the Services.
• Cookies — strictly necessary cookies to keep you signed in and secure your session, and local storage for preferences such as theme.

3. How we use information

• To provide, maintain and secure the Services, including authentication and fraud prevention.
• To process payments, manage subscriptions and send transactional emails (e.g. verification, password reset, invoices, reports you schedule).
• To respond to support requests and messages.
• To understand usage and improve features, performance and reliability.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal bases for processing

Where applicable law requires a legal basis, we rely on: performance of a contract (providing the Services), legitimate interests (security, product improvement), compliance with legal obligations, and consent where we ask for it (you can withdraw consent at any time).

5. How we share information

We do not sell personal data. We share it only with:

• Service providers who help us run the Services — hosting, email delivery, payment processing, and the third-party SEO data and AI providers used to fulfil the features you request. They may only use data to provide their services to us.
• Your workspace — other members of a workspace can see content shared in that workspace according to their role.
• Legal and safety — where required by law or to protect the rights, property or safety of SeoTools, our users or others.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

6. AI features

When you use AI features, the prompt and relevant context (such as a keyword, topic or page text) are sent to the AI provider configured for the platform to generate a response. We do not use your content to train our own models. Please avoid submitting sensitive personal data in AI prompts.

7. Data retention

We keep personal data for as long as your account is active and as needed to provide the Services. When you delete your account or workspace, we delete or anonymize associated personal data within a reasonable period, except where we must retain it for legal, tax or security reasons.

8. Security

We use industry-standard measures including encryption in transit, hashed passwords, encrypted third-party credentials, optional two-factor authentication, role-based access controls and activity logging. No method of transmission or storage is completely secure, but we work hard to protect your data.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to lodge a complaint with a data protection authority.

You can update most account information from your account settings. For other requests, contact us and we will respond within the time required by law.

10. International transfers

Our service providers may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect personal data from them.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new “last updated” date and, for material changes, notify account owners by email or in the app.