Privacy Policy

Overview

seoaiagent("we" or "us") is an AI workspace for local businesses and SEO agencies. It helps users track local rankings, analyze Google Business Profile, Search Console, and Google Analytics performance, and prepare insights for internal and client reporting. This policy covers our website at www.seoaiagent.ai and the seoaiagent application, including preview.seoaiagent.ai (the "Services").

This policy explains what information we access, why we use it, where it is stored, who it is shared with, and how to contact us about your privacy choices. For privacy questions, contact vishalpokharel@seoaiagent.ai.

1. Managing Information Preferences

We do not sell your information or disclose it to third parties for their own direct marketing. You may review, correct, update, or change your Volunteered Information at any time by contacting us at vishalpokharel@seoaiagent.ai.

2. Information You Choose to Submit

We collect the account and workspace information you provide, such as your name, email, business details, team invitations, client instructions, uploaded files, chat messages, and support requests ("Volunteered Information"). Subscription payments are processed by our payment provider, Stripe. We keep subscription, customer, and transaction identifiers needed to manage billing; we do not store your full payment-card number.

3. Information We Automatically Collect

We automatically collect certain information ("Logged Information") to help us understand how our users use the Services. This includes data contained in log files such as your IP address, ISP, browser type, and usage data.

When you use AI features, Logged Information may also include the request, model response, model and provider used, tool calls and results, token counts, latency, estimated or provider-reported cost, errors, and feedback. We use this information to operate, secure, troubleshoot, and improve the Services and to measure usage and cost.

4. Cookies and Web Analytics

This section describes measurement of visits to and interactions with seoaiagent. It is separate from the Google Analytics, Search Console, and Business Profile reporting data you authorize us to access for your business. Cookie or advertising consent does not authorize us to use or transfer that connected Google user data for advertising or marketing.

We use essential storage to operate the Services. For visitors in the European Economic Area, we ask for a choice before enabling analytics or advertising storage. Those visitors can accept, reject, or customize optional storage through the cookie settings shown on the Site and change that choice later. Outside the EEA, analytics measurement is enabled automatically where permitted.

• Google Analytics: To measure and summarize how the Services are used.
• Microsoft Clarity: To understand product usage through interaction analytics and session insights.
• PostHog: To measure feature usage, onboarding, product interactions, and errors.

When optional storage is denied, these services may operate in a limited, cookieless measurement mode. Advertising storage, advertising user data, and personalized advertising remain denied unless you grant that choice.

Cookie choices do not disable server-side security, reliability, feature-usage, or operational records. In particular, authenticated AI requests are always traced because those records are necessary for providing, securing, troubleshooting, and accounting for the requested service.

5. How We Use Your Information

We use your information to operate your account and workspace, answer your questions, perform tasks you request, display reports, manage billing, send service notifications, respond to support requests, and maintain the reliability and security of the Services. AI operational records help troubleshoot errors and measure usage and cost. Access to detailed platform-wide AI traces is restricted to authorized seoaiagent operators and the human-access limits below.

6. Google Data We Access and How We Use It

When you connect a Google account, we access Google user data only after you authorize the requested permissions. You choose the Google sources to connect, the relevant business locations and properties. Sign-in does not itself grant permission to every Google service.

• Google sign-in: Your Google account identifier, name, email address, and profile image identify your account and let you sign in. We do not receive your Google password.
• Google Analytics: Account and property identifiers and names let you select a property. Reporting data, such as traffic sources, landing pages, sessions, engagement, events, and conversions, powers metrics and answers to your performance questions, including source-level breakdowns for your own analysis and client reporting. Analytics access is read-only; we do not change your Analytics configuration.
• Google Search Console: Site and property identifiers, queries, pages, clicks, impressions, position, and available indexing information support search performance reports and SEO analysis.
• Google Business Profile: Connected account and location information, business details, reviews, posts, and performance data support local business reporting and authorized management tasks, such as requested post or review-response updates.

We use this Google user data to provide visible, user-requested features in the Services: connecting a business to its Google sources, letting authorized workspace members choose the relevant properties, displaying and analyzing search and analytics performance, and answering user requests with current business context for internal and client reporting. We do not sell Google user data, use it for advertising, or use it to train or fine-tune AI or machine-learning models.

7. Storage, AI Processing, and Sharing

We store encrypted OAuth tokens, connected-account identifiers, selected property identifiers, synchronization status, and reporting data needed to operate the connected features. Our application infrastructure includes Cloudflare storage. We sync Google Search Console, Google Analytics, and Google Business Profile reporting data to Google BigQuery as a reporting cache and historical data store. This reduces repeated API requests, speeds up reports, and supports year-over-year and seasonal comparisons for your business. Synced data can include search queries, traffic sources, page and event metrics, and Business Profile performance measures such as call-click counts, where available from Google. These are reporting metrics, not call recordings.

To answer a question or prepare a requested report, relevant messages, business context, and tool results may be sent to our configured AI providers, including Microsoft Azure OpenAI. We use Langfuse for prompt and response tracking and AI operational diagnostics, including tool results, errors, latency, and usage. These records can contain data used in your request; Langfuse is not used to train models on your data.

We transfer connected Google user data to hosting, storage, AI, and diagnostics providers only as needed to provide or improve the visible, user-facing features you authorize, such as reporting and requested analysis. Providers process it on our behalf, subject to the same data-use restrictions. We do not permit independent use for advertising, marketing, sale, data brokerage, or training or fine-tuning AI or machine-learning models. These limits also apply to aggregated, anonymized, and derived Google user data.

Information may be visible to authorized members of your workspace according to their access. We also disclose information when necessary to comply with law or protect against security threats and abuse. We do not share Google user data with advertising platforms, data brokers, or information resellers, or use or transfer it for creditworthiness or lending decisions. Apart from providing or improving authorized user-facing features, transfers are limited to security purposes and compliance with applicable law. No other transfer or use of Google user data is permitted.

Human access to Google user data is limited to cases where you have given specific consent for support, or where access is necessary for security, abuse prevention, or compliance with law. These limits apply to our staff and service providers as well as to operational traces.

8. Security

We use encrypted OAuth token storage, HTTPS in transit, and workspace access controls to protect connected data. Infrastructure and reporting storage are managed through our service providers. While we strive to protect your information, no data transmission over the Internet can be guaranteed to be 100% secure.

9. Data Retention

We retain account and workspace information while needed to operate the Services. Connected Google account references and task records are retained as needed to provide history and requested features, and to meet applicable legal, billing, and security obligations.

Our reporting warehouse is designed to retain approximately two years of synced Google reporting history, using a 730-day partition-retention policy. Available history depends on the source API, successful synchronization, and when collection began. We cannot recover older data that Google no longer makes available and that we have not already collected. This reporting-history window is separate from the retention of account, chat, and operational records described above.

For requests concerning your account or stored information, contact vishalpokharel@seoaiagent.ai from your account email and identify the relevant workspace. We may verify your identity and workspace authority before acting.

10. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, withdraw consent, and complain to a data-protection authority. Contact us using the email above to exercise these rights.