Privacy Policy

1. Data Controller & Scope

This Privacy Policy governs the processing of personal data and technical telemetry by GetSEOO (“GetSEOO,” “Company,” “we,” “us,” or “our”), operating the getseoo.com web application, directory subdomains, APIs, and associated automated search intelligence utilities (collectively, the “Platform” or “Services”).

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the UK Data Protection Act 2018, and California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), GetSEOO acts as the Data Controller with respect to user account and administrative billing information, and as a Data Processor (or “Service Provider”) with respect to customer-submitted target domain audits, crawl targets, and user-generated programmatic content.

2. Categories of Information We Collect

We collect information across three distinct operational layers:

3. Legal Bases for Processing (GDPR Art. 6)

We process your personal data under the following recognized legal foundations:

• Contractual Performance: Processing necessary to provision your account, run diagnostic audits, generate requested programmatic articles, broadcast IndexNow notifications, and execute directory submissions.
• Legitimate Interests: Monitoring platform performance, preventing distributed denial-of-service (DDoS) attacks, detecting fraudulent billing patterns, and refining technical audit algorithms.
• Compliance with Legal Obligations: Retaining financial transaction records, tax invoices, and responding to lawful requests by competent judicial authorities.
• Consent: Sending opt-in marketing newsletters or strategic SEO playbooks, which may be rescinded at any time via one-click unsubscribe links.

4. Generative AI Architecture & Zero-Training Guarantee

Technical extraction, E-E-A-T entity mapping, and automated drafting workflows operate through transient, stateless API calls. Once the model outputs structured recommendations or content markdown, the inference session is terminated and no customer data remains in the inference cluster cache.

5. Third-Party Disclosures & Sub-Processors

GetSEOO strictly restricts data access. We disclose information solely to vetted sub-processors bound by confidentiality and data protection obligations commensurate with this policy:

6. Cross-Border Data Transfers

If you access the Services from the European Economic Area (EEA), the United Kingdom, or Switzerland, your information may be transferred to, stored, and processed in cloud data centers located in the United States and globally.

To provide an adequate level of data protection in compliance with Chapter V of the GDPR, we execute standard European Commission-approved Standard Contractual Clauses (SCCs) with all international service providers and verify supplementary technical safeguards including end-to-end data encryption.

7. Retention Schedules & Data Erasure

We retain personal data strictly for as long as necessary to fulfill the operational purposes set forth in this policy, unless a longer retention period is mandated by tax, legal, or regulatory reporting frameworks:

• Account Profile & Billing History: Retained for the duration of your active subscription plus 7 fiscal years to satisfy statutory tax accounting requirements.
• Diagnostic Audit Snapshots: Retained for 90 days to provide historical comparison charts in your dashboard, after which logs are permanently scrubbed.
• Directory Submission Proof Records: Retained for the lifetime of your account to verify live inbound backlink and index status.

8. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your geographic residency, you are entitled to exercise fundamental privacy rights without experiencing discriminatory pricing or degradation of service:

To submit a verifiable data subject request, contact our compliance team directly at hey@getseoo.com. We acknowledge all requests within 48 business hours and resolve them within statutory 30-day deadlines.

9. Cryptographic & Infrastructure Security

GetSEOO implements enterprise defense-in-depth security practices designed to safeguard information against unauthorized access, destruction, alteration, or exfiltration:

• Mandatory HSTS and TLS 1.3 cryptographic transport across all public and internal service mesh endpoints.
• AES-256 block-level encryption for all persistent database volumes, automated backups, and snapshot replicas.
• Strict Principle of Least Privilege (PoLP) and role-based access control (RBAC) enforced with mandatory multi-factor authentication (MFA) for administrative staff.
• Continuous vulnerability scanning and automated dependency patching cycles.

10. Children’s Privacy Protection

The Services are strictly designed and intended for commercial business use by adult professionals, founders, and enterprises. We do not knowingly solicit or collect personal information from individuals under the age of 18 (or the age of majority in the user’s jurisdiction). If we discover that an individual under 18 has submitted personal information, we will immediately delete such data from our production clusters.

11. Material Amendments & Notifications

We reserve the right to modify or update this Privacy Policy to reflect evolving technological architectures, statutory mandates, or corporate restructuring. When material amendments are introduced, we will update the “Last Revised” timestamp and deliver prominent notice via your registered account email or through a global modal notification on the Platform dashboard at least 14 days prior to implementation.