Privacy Policy

aiseodriver is operated by Novastack Software LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States. We are the data controller for the information described here. For anything in this policy, write to privacy@aiseodriver.com.

Account information. Your name, email address and a hashed password. We never store your password in a readable form.

Project and website data. The addresses of the websites you add, and the content we retrieve when crawling them: page text, titles, headings, metadata, links, response codes and load times. We only crawl sites you add to your account, and we respect each site’s robots.txt.

Business profile. What you tell us about your business — what you sell, who your customers are, which countries you target and who your competitors are.

Google data, if you connect it. With your explicit authorisation we read your Google Search Console performance data (search queries, impressions, clicks, positions and page URLs) and, optionally, organic session counts from Google Analytics. The access we request is read-only. We never post, modify or delete anything in your Google account.

Assistant conversations. The questions you ask, the answers produced, and which data lookups were used to produce them.

Billing information. Your subscription status, plan and billing history. Card details are entered directly with Stripe and are never seen or stored by us.

Technical information. The IP address and browser user agent attached to a sign-in, so you can recognise your own sessions and we can investigate abuse.

• To provide the service: crawling your site, scoring it, finding opportunities and producing recommendations, drafts and answers.
• To operate your account: authentication, sessions, password resets and support.
• To take payment and manage your subscription.
• To send transactional email, such as password resets and trial reminders.
• To keep the service secure and to investigate abuse or misuse.
• To meet our legal and accounting obligations.

We do not sell your data. We do not use it for advertising. We do not use your content to train AI models, and our AI provider is contractually bound not to train on data submitted through their API.

• Performance of a contract — providing the service you signed up for.
• Legitimate interests — keeping the service secure, preventing abuse and improving reliability.
• Consent — connecting your Google account, which you can withdraw at any time by disconnecting it in Settings.
• Legal obligation — retaining billing records for tax and accounting.

We use a small number of subprocessors. Each one is listed below with what it receives and why. The current list is always at /subprocessors.

• Account data: for as long as your account exists.
• Project data — crawls, keywords, drafts, conversations: until you delete the project, or 30 days after your account is closed.
• Billing records: for as long as tax and accounting law requires, typically seven years.
• Sign-in sessions: 30 days, or until you sign out.

Deleting a project removes its crawls, keywords, issues, content drafts, conversations and reports. Deleting your account removes everything associated with it.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can do most of this yourself in Settings — including deleting projects and disconnecting Google.

For anything else, write to privacy@aiseodriver.com and we will respond within 30 days. If you are in the UK or EU and are unhappy with our response, you may complain to your local data protection authority.

We are based in the United States and our subprocessors operate internationally. Where personal data is transferred out of the UK or EEA, that transfer relies on an appropriate safeguard such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

Passwords are hashed with scrypt and never stored in readable form. Session tokens are stored only as hashes, so a database copy cannot be used to impersonate you. All traffic is served over HTTPS. Access to production systems is limited to people who need it.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify you and the relevant authority as required by law.

aiseodriver is a business tool and is not directed at anyone under 16. We do not knowingly collect data from children.

If we make a material change to this policy we will update the date at the top and, where the change significantly affects you, tell you by email before it takes effect.