Privacy Policy

Last updated: [CONFIRM: date]

Who controls your data

[CONFIRM: controller identity and address. It must match the operator named in the Terms, section 1. Also confirm the ICO registration number, which is normally shown here.] The operator of Copilot SEO is the controller of the personal data described here. Contact us at [CONFIRM: privacy contact email].

What we collect

• Early access sign-ups. The email address you enter in the early access form.
• Account data. Your name, email address and password (stored hashed, never in readable form), and the teams you belong to.
• Google account data. When you connect Google, we store your Google account's name, email address, profile picture URL, the permissions you granted, and the access and refresh tokens Google issues. The tokens are encrypted at rest.
• Search Console data. For each property you add, we fetch clicks, impressions, click-through rate and position by date, page and search query. This is your business data, but search queries can occasionally contain personal data typed by searchers.
• Billing data. Handled by Stripe. Card numbers never reach our servers. We hold a Stripe customer reference, your plan and invoice history.
• Usage and performance data. Cookie-free analytics about which pages are visited, and page load timings from your browser. Neither sets cookies, tracks you across sites or builds a profile of you.

How we use Google user data

Copilot SEO asks Google for one permission: read-only access to Search Console (webmasters.readonly). We use it only to fetch performance data for the properties you add, and to show you analysis of that data inside your team's account. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.

Copilot SEO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting a Google account in Copilot SEO deletes the tokens we hold for it. You can also revoke our access at any time from your Google Account permissions page.

Why we process it, and on what basis

To provide the service and take payment (performance of a contract). To keep the service secure and working, and to tell you about problems with it (legitimate interests). To meet accounting and tax obligations (legal obligation). To contact you about early access, because you asked us to (consent, which you can withdraw at any time).

Who we share it with

We use a small number of processors, each doing one job:

• Google: the Search Console API and Google sign-in for connecting accounts.
• Stripe: payments and billing.
• Web3Forms: receives the early access form and forwards it to us by email.
• jsDelivr: serves a JavaScript library our pages load, so it sees your IP address when a page loads.
• [CONFIRM: transactional email provider] for verification and alert emails.
• [CONFIRM: hosting provider and regions] for the application and database.

Our analytics (Plausible) and performance monitoring (Lookout) are self-hosted at stats.sdj.pw and lookout.sdj.pw. We do not sell personal data. [CONFIRM: which processors are outside the UK, and the transfer mechanism for each.]

How long we keep it

Search Console data is kept for your plan's retention window and deleted automatically after that. [CONFIRM: retention for account data after cancellation, billing records (usually six years for UK tax), early access emails, and server logs.]

Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Write to [CONFIRM: privacy contact address] and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set a session cookie to keep you signed in and a cookie to protect forms against cross-site request forgery. Both are strictly necessary and neither is used for advertising or tracking. Your light or dark theme choice is kept in your browser's local storage. Our analytics sets no cookies, which is why you are not asked to accept any.