Who we are
Agency SEO is operated by [TODO insert legal entity name and ACN or ABN]. When this policy says "we", "us", or "Agency SEO", it means that entity. You can reach us any time at [TODO privacy contact email].
What we collect
We collect only what we need to deliver the product. That means your email address and name when you create an account, the URLs you ask us to audit, the output of those audits, basic billing details if you upgrade, and the usual technical metadata (IP address, browser, pages visited) that any web application receives.
We do not knowingly collect information from children under 16 and we do not sell your data to third parties.
How we use it
We use your information to provide audits, keep you signed in, send you the audit-ready email, respond to support questions, prevent fraud and abuse, and improve the product. If we want to use your data for a materially new purpose, we will ask you first.
Who we share it with
We share data only with service providers that help us run the product. Today that includes Supabase (authentication and database), Vercel (hosting), Ahrefs and SEMrush (SEO data), Resend (email delivery), and our payment processor [TODO: Stripe or other]. Each of these processes your data on our instructions and under their own security obligations.
Where it lives
Your data is stored on servers operated by our providers, which may be located in Australia, the United States, or other countries depending on the service. We rely on the privacy commitments of each provider and on industry-standard encryption in transit and at rest.
How long we keep it
While your account is active, we keep the data associated with it. If you delete your account, we remove your personal information within 90 days, except where we are legally required to keep records (for example, billing records) or where we need to keep an anonymised copy for security and fraud prevention.
Your rights
You can access, correct, export, or delete your data at any time from your account settings, or by emailing us. You can also ask us to explain how any specific piece of information is used. We respond to requests within 30 days.
Cookies
We use a small number of cookies and similar technologies to keep you signed in and to measure, in aggregate, how the product is used. We do not use tracking cookies for advertising.
Complaints
If you are unhappy with how we have handled your data, email us first at [TODO privacy contact email] and we will investigate. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We will update this page when our practices change. If the change is material, we will email active account holders.