Privacy Policy

1. Who we are

SEO Insight is a service operated by SBInnovate Ltd, a company registered in England and Wales, with its registered office at 2 Frederick Street, Kings Cross, London WC1X 0ND, United Kingdom.

For any privacy question or to exercise your rights, contact us at hello@seoinsight.app.

2. Information we collect

Information you provide

• Account and identity data: your name, email address, password (stored only as a salted hash), and the organisations and teams you create or join.
• Billing data: your plan, billing email and country. Card payments are processed by Stripe; we do not store full card numbers.
• SEO data you import or create: keywords, search volumes, backlinks, content briefs, articles and any files you upload (for example CSV or HTML exports from Semrush, Ahrefs, Mangools or SE Ranking).
• Communications: messages you send us by email or through support.

Information we collect automatically

• Usage and device data: pages viewed, features used, approximate location derived from IP address, browser and device type, collected through our product analytics provider (PostHog).
• Technical logs: IP address, timestamps and error data, used to operate and secure the service.
• Cookies and similar technologies, as described in the Cookies section below.

Information from connected services

When you connect a third-party account (such as Google Search Console), we receive data from that service as described in the next section.

3. Google user data

If you choose to connect your Google account to import Google Search Console data, we request read-only access using Google's OAuth flow. We only request the scopes needed to provide the features you ask for, and you can review and revoke this access at any time.

What we access

• The list of Search Console properties (sites) you own or manage.
• Search analytics for those properties: search queries, pages, clicks, impressions, click-through rate, average position and index coverage.

How we use it

We use Google Search Console data solely to provide the features you request inside SEO Insight: for example displaying your performance, identifying quick-win keywords (positions 11 to 20) and building coverage matrices by country. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalised AI or machine-learning models.

How we store and share it

Google user data is stored encrypted and is access-controlled. We do not share it with third parties except: with the sub-processors that operate our infrastructure; with members of your own organisation whom you have invited; or where required by law. Humans only access this data with your explicit consent (for example to provide support you request) or where necessary for security or to comply with applicable law.

Limited Use

SEO Insight's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Revoking access

You can disconnect Google Search Console at any time from your SEO Insight settings, or revoke access directly from your Google Account at https://myaccount.google.com/permissions. When you disconnect, we stop accessing new data and delete stored Google user data within 30 days, except where retention is required by law.

4. How we use your information

• To provide, operate and maintain the service and its features.
• To process payments and manage your subscription.
• To provide support and respond to your requests.
• To improve and develop the service, including product analytics.
• To secure the service, prevent fraud and abuse, and ensure availability.
• To comply with our legal obligations and enforce our terms.

Under the UK GDPR, we rely on the following legal bases: performance of our contract with you (to provide the service and billing); our legitimate interests (to secure, improve and promote the service in a proportionate way); your consent (for certain analytics, cookies and connected integrations); and compliance with legal obligations.

5. MCP server and AI agents

SEO Insight includes a built-in MCP (Model Context Protocol) server and API keys that you can enable to let MCP clients and AI agents you authorise (such as Claude or ChatGPT) access your SEO data. This access only happens when you create API keys and connect a client. You control which clients are authorised, and you can revoke keys at any time. We do not send your data to third-party AI services except as you direct through these features.

6. Sharing and sub-processors

We do not sell your personal data. We share data only with service providers (sub-processors) that help us run SEO Insight, with members of your organisation, or where required by law or to protect our rights. Our main sub-processors are:

• Vercel: application hosting and infrastructure.
• Stripe: payment processing and subscription billing.
• PostHog: product analytics.
• Google: Search Console data, only when you connect your Google account.
• Our transactional email provider: to send account and service emails.

If SEO Insight is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction; we will notify you of any change in control.

7. Data retention

We keep your personal data for as long as your account is active and as needed to provide the service. After you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal, accounting or security obligations. Google user data is deleted within 30 days of disconnection as described above.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact us at hello@seoinsight.app. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk, or with your local data protection authority.

9. Security

We use technical and organisational measures to protect your data, including encryption in transit and at rest, access controls and least-privilege practices. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authority of any breach where required by law.

10. Cookies and tracking

We use strictly necessary cookies to operate the service (for example authentication and security) and analytics cookies to understand how the product is used. Where required, we ask for your consent before setting non-essential cookies. You can control cookies through your browser settings.

11. International transfers

Some of our sub-processors are located outside the United Kingdom and the European Economic Area, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy decisions.

12. Children

SEO Insight is a business tool not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the 'Last updated' date above. For significant changes, we will provide additional notice, for example by email or in the application.

14. Contact us

SBInnovate Ltd, 2 Frederick Street, Kings Cross, London WC1X 0ND, United Kingdom. Email: hello@seoinsight.app.