Privacy Policy

1. Information We Collect

We collect information you provide when creating an account, including your name, email address, and billing details (processed securely by LemonSqueezy). We do not store full credit card numbers on our servers.

When you use the Service, we collect data related to your product listings, SEO metrics, and usage patterns. This data is processed to generate optimization recommendations and improve our AI models.

2. How We Use Your Data

Your data is used exclusively to provide, maintain, and improve the Service. We do not sell your personal information to third parties. Aggregated, anonymized data may be used for benchmarking and product development.

AI-generated content and SEO data are processed through our infrastructure and may pass through third-party AI providers (e.g., Groq, OpenAI). These providers are contractually bound to process data only for the purpose of generating your results and are prohibited from using your data for model training.

3. Data Storage & Retention

Your data is stored on encrypted servers in the United States using SOC 2-compliant infrastructure (Supabase and Vercel). We retain your data for as long as your account is active or as needed to provide the Service.

Upon account deletion, your data is permanently erased within 30 days. Billing records are retained for 7 years to comply with tax regulations. You may request data export at any time by contacting support.

4. Third-Party Services

We integrate with trusted third-party services for core functionality: Supabase (database and authentication), Vercel (hosting), LemonSqueezy (payment processing), Groq and OpenAI (AI model inference), and Resend (transactional email).

Each third-party service has its own privacy policy governing data handling. We encourage you to review these policies. We are not responsible for the privacy practices of third-party services.

5. Your Rights & Choices

You have the right to access, correct, export, or delete your personal data at any time. These actions can be performed through your account settings or by contacting our support team.

For users in the European Economic Area (EEA), you have additional rights under the GDPR, including the right to data portability and the right to object to processing. California residents have rights under the CCPA, including the right to know what personal information is collected and to request deletion.

6. Cookies & Tracking

We use essential cookies for authentication and session management. Analytics cookies (if enabled) help us understand usage patterns. You can control cookie preferences through your browser settings.

We do not use tracking cookies for advertising purposes. Our analytics are privacy-focused and do not share data with advertising networks.

7. Security Measures

We implement encryption at rest (AES-256) and in transit (TLS 1.3). Access controls, audit logging, and regular security assessments protect your data. Our infrastructure undergoes quarterly third-party penetration testing.

In the event of a data breach, we will notify affected users within 72 hours of discovery, as required by applicable regulations. Notifications will be sent via email and posted on our status page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and through a notification on the Service. Your continued use after the effective date constitutes acceptance of the updated policy.

9. Contact Information

For privacy-related inquiries, data requests, or concerns, contact our Data Protection Officer at privacy@scribeseoai.com. We aim to respond to all requests within 48 hours.

You may also write to us at: ScribeSEO AI, 251 Little Falls Drive, Wilmington, DE 19808, United States. For urgent matters, we recommend email for the fastest response.