Privacy Policy

Last updated: June 12, 2026

1. Information We Collect

We collect the following types of information:

  • Account information: Name, email address (via Google OAuth or email registration)
  • Usage data: Scan results, report data, feature usage metrics
  • Payment data: Processed by Stripe - we do not store credit card numbers
  • Website data: Publicly accessible content from URLs you submit for scanning
  • Technical data: IP address, browser type, device information for security and analytics

2. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Generate SEO and GEO audit reports for your websites
  • Process payments and manage subscriptions
  • Send transactional emails (scan results, billing notifications)
  • Monitor and prevent abuse or security threats

3. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit. API keys and sensitive credentials are encrypted using AES-256-GCM. We use industry-standard security measures to protect your information.

4. Third-Party Services

We use the following third-party services:

  • Stripe - Payment processing
  • Google OAuth - Authentication
  • Sentry - Error monitoring (no PII is sent)

Each third-party service has its own privacy policy governing their use of your data.

5. Browser Extension

The SEO4AI Chrome extension (and our editor plugins, such as the Framer plugin) connect to the same Service and are covered by this policy. When you use the extension:

  • Account information: Signing in links the extension to your SEO4AI account (name, email) as described in Section 1. An authentication key is stored locally in your browser's extension storage and is sent only to seo4ai.pro.
  • Scanned page URLs: When you click "Scan This Page", the URL and title of the active tab are sent to our servers, which fetch and analyze the publicly accessible page content to generate your report. The extension also reads the active tab's URL and title to display the page you are about to scan.
  • No browsing-history collection: The extension does not track, record, or transmit your browsing history. No data leaves your browser until you explicitly start a scan, and only the URL of the page you chose is transmitted.
  • No page content read in the browser: The extension does not read, modify, or collect the content of pages you visit. All analysis happens server-side on the URL you submit.

Extension data is used solely to provide the SEO and AI visibility auditing features you request. It is never sold, never used for advertising or creditworthiness purposes, and never transferred to third parties except as required to provide the Service (see Section 4), in line with the Chrome Web Store User Data Policy, including its Limited Use requirements. Signing out, or removing the extension, deletes the locally stored authentication key.

6. API and MCP Integration

SEO4AI offers a REST API and an MCP (Model Context Protocol) server that let AI assistants such as Claude and ChatGPT access your audit data with your consent.

  • OAuth authorization: Connecting an AI assistant uses OAuth 2.0 with PKCE. You approve access on a consent screen, and you can revoke access at any time from your account settings or by disconnecting the assistant. Access and refresh tokens are stored only as cryptographic hashes.
  • API keys: Direct API access uses per-account API keys, stored hashed and revocable from your dashboard at any time.
  • Stateless pass-through: The MCP server holds no conversation state and stores no additional data. Tools read and write the same audit data you see in your dashboard, under the same plan limits.
  • Scans you initiate via AI: Audits started through an AI assistant create the same projects and reports as dashboard scans and count against the same quotas.

7. Data Retention

We retain your account data for as long as your account is active. Scan reports are retained indefinitely unless you delete them. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent at any time

To exercise these rights, contact us at contact form.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. The "last updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions, contact us at contact form.