How we collect, use, and protect your personal information when you use EngineSEO.
EngineSEO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered SEO content generation platform for e-commerce stores.
By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the service.
We implement industry-standard security measures to protect your data:
We share data with the following sub-processors as necessary to provide our services. Each sub-processor is contractually obligated to protect your data:
Infrastructure hosting. Your data is stored and processed on AWS servers located in US regions, secured with industry-standard encryption and access controls.
Payment processing (PCI DSS Level 1 certified). Your payment information is handled securely by Stripe and never stored on our servers.
AI content generation. We send your keywords and approved questions to OpenAI's API to generate content. Data is processed per OpenAI's data usage policy.
Search engine data retrieval. We use SerpAPI to retrieve "People Also Ask" questions from search engines for content generation.
E-commerce platform integration. We integrate with your Shopify store to publish generated content via OAuth 2.0 authenticated connections.
Keyword research and advertising data. We use the Google Ads API to provide keyword research capabilities and search volume data.
Search performance analytics. With your explicit authorization via OAuth 2.0, we access your Google Search Console data to display content performance metrics within your EngineSEO dashboard. See Section 6 below for full details.
EngineSEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Google Search Console account, we request read-only access (webmasters.readonly) to your verified properties. This access is granted through Google's OAuth 2.0 authorization flow and can be revoked at any time.
Data we access:
We do not share, sell, or transfer your Google Search Console data to any third parties. Your search performance data is accessible only to members of your EngineSEO workspace. We do not use Google user data for advertising, profiling, or any purpose other than displaying analytics within your dashboard.
You can disconnect your Google Search Console at any time from your EngineSEO Analytics settings page. When you disconnect, we revoke the OAuth token with Google and stop syncing new data. Previously synced performance data is retained in your dashboard unless you request deletion by contacting our support team.
You can also revoke EngineSEO's access directly from your Google Account permissions page.
When you use keyword research features powered by Google Ads, we access keyword search volume and competition data through the Google Ads API. This data is used solely for keyword research within your projects and is not shared with third parties.
We retain your data for as long as necessary to provide our services:
You can request data deletion at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.
You have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@engineseo.io or through your account settings. We will respond to your request within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us at privacy@engineseo.io or through your account settings. We will verify your identity before processing your request and respond within 45 days as required by the CCPA.
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
Our primary data processing occurs in the United States via AWS infrastructure. By using our service, you acknowledge that your data may be transferred to and processed in the United States.
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@engineseo.io. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of becoming aware of the breach.
Notification will include:
We will also notify relevant supervisory authorities as required by applicable law, including the relevant state attorney general and any applicable data protection authorities.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will send an email notification to the address associated with your account. You are advised to review this Privacy Policy periodically for any changes. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.
If you have any questions about this Privacy Policy or our data practices, please contact us:
Support: Contact Form
Website: https://engineseo.io
Response Time: We will respond to your inquiry within 30 days