Privacy Policy

This policy explains what information SEO Autopilot ("we", "us") collects when you use SEO Autopilot (the "Service"), how we use it, and the choices you have. We have tried to write it so it can be read.

1. Information we collect

Information you give us

• Account details: your name, email address, password (stored only as a one-way hash), and your company or team name if you give one.
• Website details: the addresses of the websites you add, the competitors you name, and any keywords, content plans, outreach contacts and notes you enter.
• Messages: anything you send us through the contact form or by email.

Information we collect to provide the Service

• Audit data: information read from the public pages of the websites you add, such as titles, descriptions, headings, links, word counts and response codes.
• Google data: if you connect Google Search Console or Google Analytics 4, we read performance reports for the property you choose, for example clicks, impressions, average position, sessions and conversions. Access is read-only.
• Website connection credentials: if you connect your website, we store the credentials you provide in encrypted form.
• Generated content: recommendations, drafts and suggested wording produced for your websites, and what you decided about them.
• Usage and security data: log information such as IP address and browser type, and a record of actions taken in your account, used to keep the Service secure and reliable. We do not run third-party advertising or analytics trackers on the Service.

2. The free homepage check

The free homepage check needs no account. We keep the domain that was checked and its report for 14 days, so the same report can be shown again, and then delete them. A report is reached through an unguessable link, is not listed anywhere and is marked so that search engines do not index it.

We do not store who asked for a check. Your network address is used only, in a form that cannot be read back, to limit how many checks can be started in a short time, and that record lapses within a day.

3. Competitor websites

When you name a competitor, we read a small number of pages from that website that anyone can open, and keep a short set of facts derived from them, such as the kinds of page it has, its headings and its structured data. We do not keep copies of those pages.

Those derived facts describe a public website, not you, and are shared: if several customers name the same competitor, it is read once. Which competitors you follow, and the comparison between a competitor and your own website, are private to your account.

4. How we use information

• To provide the Service: running audits, showing reports, tracking keywords, comparing your website with competitors you name, preparing changes and content for you to review, and carrying out the Autopilot runs you start.
• To communicate with you about your account, including notifications you have chosen to receive.
• To keep the Service secure, prevent abuse and fix problems.
• To process payments, through our payment provider, if you subscribe to a paid plan.

We do not sell your personal information, and we do not use your website data or Google data to advertise to you.

5. AI features

Some features can use an AI model supplied by a third-party provider: answering a question about your website, drafting content from a brief you approved, wording changes you asked for, and writing or checking a contribution intended for another website. Where those features are switched on, they run only as part of something you start.

For them, a compact summary of facts about the website concerned is sent to the AI provider. Depending on the feature, that can include audit findings, short page details such as titles, headings, descriptions and word counts, the keyword, facts about competitors you follow, and the brief or rules for the piece being written. Where we have enabled it, it can also include Search Console and Analytics figures for a property you have connected.

It does not include your password, access tokens or connection credentials, your name or email address, your outreach contacts, or the full text of your pages. We ask the provider not to retain requests, and the information is used only to produce your result.

6. Google user data

SEO Autopilot's use of information received from Google APIs is limited to providing the features described here. We request read-only scopes, use the data only to show you reports and recommendations for your own websites, do not transfer it to others except as needed to provide the Service or as required by law, and do not use it for advertising. You can disconnect Google at any time in the app, or revoke access from your Google Account.

7. Who we share with

We share information only with providers that help us run the Service, under agreements that require them to protect it, and when the law requires us to. Those providers are:

• hosting and database providers, which store the Service's data;
• an email delivery provider, for account emails and notifications;
• a payment provider, which handles card details for paid plans, so we never see or store them;
• Google, when you connect Search Console or Analytics, and when a public page check uses Google's page speed service, which is sent only the public address being checked;
• an AI provider, for the features described in section 5.

A contribution written for another website names your business and links to your page. It is given to you to post yourself. Once posted it is public and subject to that website's own terms. We do not give those websites your account details or your Google data.

8. Keeping and deleting data

We keep your information for as long as your account is open. You can archive a website and keep its history, or delete it permanently, at any time. Deleting your account removes your users, websites, connections and associated data from our active systems; backups are overwritten on a rolling schedule. Homepage checks are deleted after 14 days, as described in section 2.

9. Security

We protect your data with encryption in transit, encryption of stored access tokens and credentials, strict separation between customer accounts, and access controls for our own staff. No system is perfectly secure, and we will tell you promptly if we learn of a breach affecting your data.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain uses. You can do most of this in your account settings, or by writing to us through the contact form .

11. Cookies

We use only the cookies needed to keep you signed in and protect your session. We do not use advertising cookies.

12. Changes to this policy

If we make material changes, we will update the date above and notify account holders by email or in the app before the changes take effect.