Who is responsible for your data
The controller of personal data processed through agencyseo.com is the administrator of the agencyseo.com service ("we", "us"). You can reach us about any privacy matter at support@agencyseo.com. We reply within 1 business day and handle formal requests within the time limits set by applicable law.
The service is intended for businesses. Most personal data we process belongs to people who act for a company: owners, marketers, developers and other team members who use the client panel.
What personal data we collect
We collect only what we need to run the service.
- Account data. Your name, email address, a hashed password, the verification code we send to confirm your email, your role in a workspace and your login history.
- Workspace and billing data. Company name, website address, industry, target markets, plan, billing period, invoices, billing address and tax details you choose to provide. Card details are entered on the payment operator's secure page. We never see or store your full card number.
- Audit inputs and crawl results. The domain, market, business type and up to 2 competitor domains you enter, plus the results of crawling publicly available pages (titles, headings, status codes, structured data, robots.txt and similar technical data). We also store a hashed form of your IP address to enforce the limit on anonymous audits.
- Data from connected Search Console and analytics accounts. When you connect these tools, we use read-only access to aggregated performance data such as clicks, impressions, queries, landing pages, sessions, conversions and revenue attributed to organic search. We never ask for data about individual visitors to your site.
- CMS and platform access credentials. If you give us access to your content management system, store platform or Google Business Profile for implemented fixes, the credentials are stored encrypted, never in plain text and never sent by email. You can revoke access at any time in the panel.
- Brief and project content. Your goals, products, audiences, competitors, tone of voice, topics to avoid, conversion events, content drafts and approvals.
- Messages. The contents of your message thread with your strategist in the panel, attachments you upload and emails you send to support@agencyseo.com.
- Technical logs. IP address, browser type, device information, pages requested, timestamps and error logs, which our servers record for security and reliability.
We do not ask for special categories of personal data. Please do not send health, financial account or similar sensitive personal information through the panel unless it is necessary for the work and we have agreed on how it will be handled.
Why we process your data and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Running the free SEO audit and showing results | Audit inputs, crawl results, hashed IP | Legitimate interests (providing the demo you request) or steps prior to a contract |
| Creating and securing your account | Account data, technical logs | Performance of a contract |
| Delivering the SEO retainer (strategy, content, links, fixes, reports) | Workspace data, brief, connected tool data, access credentials, messages | Performance of a contract |
| Billing, invoicing and accounting | Workspace and billing data | Performance of a contract and legal obligation |
| Service emails (verification codes, reports ready, billing notices) | Account data | Performance of a contract |
| Security, fraud prevention and abuse limits | Technical logs, hashed IP, account data | Legitimate interests |
| Improving the service and fixing errors | Technical logs, usage of panel features | Legitimate interests |
| Responding to questions sent by email | Email address, message content | Legitimate interests or steps prior to a contract |
| Handling legal claims and requests from authorities | Data relevant to the case | Legal obligation and legitimate interests |
| Optional communications where the law requires it | Email address | Consent, which you can withdraw at any time |
Where we rely on legitimate interests, we have weighed those interests against your rights and you can object at any time, as described below. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
Who receives your data
We share personal data only with recipients that need it to provide the service, and only to the extent they need it. We list them by category:
- Hosting provider that runs our servers and databases.
- Payment operator that processes card payments and subscriptions.
- Email delivery provider that sends verification codes, notices and reports.
- AI model provider that helps our team process text, for example to summarize audit findings. It receives only the text needed for the task and never receives your access credentials.
- Professional advisers such as accountants, auditors and lawyers, bound by confidentiality.
- Public authorities when we are required to disclose data by law or to protect our rights.
Every service provider acts on our instructions under a written agreement that requires confidentiality and appropriate security. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
International data transfers
Some recipients may process data outside your country, including outside the European Economic Area and the United Kingdom. Where that happens, we use appropriate safeguards, such as the standard contractual clauses approved by the European Commission and the UK addendum, or rely on an adequacy decision. You can ask for more information about these safeguards at support@agencyseo.com.
How long we keep your data
- Partial audits run without an account are kept for 30 days at their private link, then deleted.
- Account and workspace data are kept while your account is active.
- After cancellation or account closure, we keep project data for up to 30 days so you can export reports and your team can retrieve what it needs, then we delete it.
- Invoices and accounting records are kept for as long as tax and accounting law requires.
- Access credentials are deleted when you revoke access or when the subscription ends, whichever comes first.
- Technical logs are kept for a short period, normally no longer than 90 days, unless we need them longer to investigate a security incident.
- Data needed for legal claims is kept until the claim is resolved or time-barred.
Your privacy rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy,
- have inaccurate data corrected (rectification),
- have your data deleted (erasure),
- restrict how we process your data,
- receive your data in a structured, machine-readable format and have it transmitted to another controller (portability),
- object to processing based on legitimate interests,
- withdraw consent at any time, without affecting processing before the withdrawal,
- lodge a complaint with a supervisory authority, in particular in the country where you live, work or where an alleged infringement took place.
Rights for residents of US states
If you live in California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect, use and disclose, to request deletion and correction, and not to be discriminated against for using these rights. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We do not knowingly process sensitive personal information for purposes that would require a right to limit. You can use an authorized agent, and we may need to verify your identity before acting on a request.
How to use your rights
Email support@agencyseo.com from the address linked to your account, or describe how we can verify your identity. We answer within the time limits set by applicable law, usually within one month. Using your rights is free of charge unless a request is manifestly unfounded or excessive.
Cookies we use
We use essential cookies only:
- a session cookie that keeps you logged in,
- a security token cookie that protects forms against cross-site request forgery (CSRF),
- preference cookies that remember settings such as the billing period you selected on the pricing page.
We do not use advertising cookies, tracking pixels or analytics cookies. Because every cookie we set is strictly necessary for the site to work, there is no consent banner. You can block or delete cookies in your browser, but logging in will not work without the session cookie.
How we protect your data
We use encryption in transit (HTTPS) on every page, encrypted storage for access credentials, hashed passwords, least-privilege access for our team, read-only access to Search Console and analytics accounts, and logs of who accessed what. You can revoke any access you granted in one click. More details are on our security page.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authorities as required by law.
Children
The service is not directed at children and is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to support@agencyseo.com and we will delete it.
Changes to this policy
We may update this policy when the service or the law changes. We publish the current version on this page with its date. For material changes, we also notify account holders in the panel or by email before the change takes effect.
Contact
For any question about this policy or your personal data, write to support@agencyseo.com. You can also read our terms of service, the security page and the FAQ.