Privacy Policy

Your Privacy Matters

This Privacy Policy explains how JustSEO.ai ("we," "us," or "our") collects, uses, discloses, and protects your personal information. This policy applies to all users worldwide and complies with US, EU (GDPR), and international privacy regulations.

Data Controller

The data controller responsible for your personal information is Basecamp Labs, Inc, a Delaware corporation. 2261 Market Street STE 18268, San Francisco, CA 94114, United States. Contact: privacy@justseo.ai (EU/GDPR: dpo@justseo.ai).

Related Privacy Documents

GDPR Policy - EU Data Protection Rights · California Privacy Rights (CCPA/CPRA) · Cookie Policy · Cookie Settings

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, full name, password (encrypted), profile photo
• Billing Information: Payment details processed securely through Stripe (we do not store full credit card numbers)
• URLs and Website Data: URLs you submit for SEO analysis, crawl data, website content
• Communication Data: Support tickets, contact form submissions, email correspondence
• Integration Data: Google Search Console data, Slack workspace information (when you connect integrations)

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, interaction patterns, search queries
• Device Information: IP address, browser type and version, operating system, device identifiers
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see our Cookie Policy)
• Log Data: Server logs, error reports, performance metrics, API usage

1.3 Information from Third Parties

• OAuth Providers: Google account information (name, email, profile photo) when you sign in with Google
• Payment Processors: Transaction confirmations and payment status from Stripe
• Analytics Providers: Aggregated product usage statistics from PostHog (loaded under the regional consent rules described in our Cookie Policy: opt-in in the EU/EEA/UK/Switzerland, opt-out with GPC support in the US and elsewhere)
• Integration Partners: Data from connected services (Google Search Console, Slack)

2. How We Use Your Information

2.1 Service Provision and Improvement

• Provide SEO analysis, crawling, AI insights, and reporting services
• Process and analyze website data to generate recommendations
• Maintain and improve platform functionality, performance, and user experience
• Develop new features and services based on usage patterns
• Personalize content and recommendations based on your usage

2.2 Communication

• Send service-related notifications (analysis complete, crawl finished, account updates)
• Respond to support requests, inquiries, and feedback
• Send marketing communications (with your consent, opt-out available)
• Provide updates about new features, improvements, and service changes

2.3 Security and Compliance

• Prevent fraud, unauthorized access, and security breaches
• Monitor and analyze security threats and suspicious activity
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations, court orders, and regulatory requirements
• Protect our rights, property, and the safety of our users

2.4 Analytics and Research

• Analyze usage patterns to understand how users interact with our platform
• Conduct market research and competitive analysis
• Measure the effectiveness of marketing campaigns
• Generate aggregated, anonymized statistics and insights

3. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data based on the following legal grounds:

• Contractual Necessity: Processing required to provide services you've requested
• Consent: You have given explicit permission for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests (fraud prevention, service improvement)
• Legal Obligation: Processing required to comply with applicable laws and regulations

For detailed GDPR compliance information, see our GDPR Policy.

4. Data Sharing and Disclosure

We Do Not Sell Your Personal Information. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.1 Subprocessors

We share data with trusted third-party subprocessors who assist in operating our platform. Your primary account, project, and report data is stored in the European Union (Supabase, West EU / Ireland). Some processing takes place in the United States under the EU Standard Contractual Clauses (SCCs). Our current subprocessors are:

All subprocessors are contractually bound to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety, or that of our users or the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims of illegal content or rights violations

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the business assets. We will notify you via email and/or prominent notice on our website before any such transfer.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when connecting integrations like Google Search Console or Slack.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

Account Data

Retained for the duration of your account plus 30 days after account deletion (to allow recovery). After 30 days, permanently deleted unless legally required to retain.

Analysis and Reports

SEO reports, crawl data, and analysis results are retained for up to 90 days for free users and indefinitely for paid subscribers while account is active. Deleted 30 days after account closure unless exported by user.

Transaction Records

Billing and payment records retained for 7 years to comply with tax and accounting regulations.

Communications

Support tickets and email correspondence retained for 3 years for customer service and legal purposes.

Logs and Analytics

Server logs retained for 90 days. Aggregated, anonymized analytics data retained indefinitely.

You may request deletion of your data at any time by contacting privacy@justseo.ai or using the account deletion feature in your settings.

6. Your Privacy Rights

6.1 Universal Rights (All Users)

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Request your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for processing based on consent at any time
• Opt-Out: Unsubscribe from marketing communications at any time

6.2 EU/EEA Users (GDPR Rights)

Users in the European Union have additional rights under GDPR:

• Right to Object: Object to processing based on legitimate interests
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Lodge Complaint: File a complaint with your local data protection authority
• Automated Decision-Making: Right not to be subject to decisions based solely on automated processing

Full GDPR rights and procedures: GDPR Policy

6.3 California Users (CCPA/CPRA Rights)

California residents have specific rights under the California Consumer Privacy Act:

• Know: Right to know what personal information is collected, used, shared, or sold
• Delete: Right to delete personal information held by us
• Opt-Out: Right to opt out of the "sale" or "sharing" of personal information
• Non-Discrimination: Right not to be discriminated against for exercising your rights
• Correct: Right to correct inaccurate personal information
• Limit: Right to limit use of sensitive personal information

Full California rights and procedures: California Privacy Rights (CCPA/CPRA)

6.4 How to Exercise Your Rights

To exercise any of your privacy rights:

• Email us at: privacy@justseo.ai
• Use the account settings page to update or delete your account
• Contact our support team through the support ticket system

We will respond to verified requests within 30 days (45 days for complex requests). We may require additional information to verify your identity before processing your request.

7. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest
• Access Controls: Role-based access controls with principle of least privilege
• Monitoring: Application error monitoring and logging (Sentry)
• Security Reviews: Regular dependency and code security reviews
• Incident Response: Documented procedures for security incident detection and response

For more details on our security practices, see our Security Page.

8. Children's Privacy

JustSEO.ai is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that we have collected personal information from a child under 16, we will promptly delete that information.

If you believe we may have collected information from a child under 16, please contact us immediately at privacy@justseo.ai.

9. International Data Transfers

We primarily store and process data in servers located in the European Union and United States. For international transfers, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all service providers
• Compliance with EU-US Data Privacy Framework where applicable

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification for significant changes
• Displaying a prominent notice in our application

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@justseo.ai

GDPR Contact: dpo@justseo.ai

Support: Contact Form

2261 Market Street STE 18268, San Francisco, CA 94114, United States