Privacy Policy

Last updated: October 11, 2026

This policy explains what personal information [LEGAL ENTITY NAME] ("OptSEO", "we", "us") collects when you use optweb.co and app.optweb.co, why, who helps us process it, and the choices you have. The short version: we collect what we need to run the service, we never sell personal data, and your data is yours.

1. What we collect

Account information. Your name, email address, sign-in details and the organization you belong to, and any team members you invite. Sign-in is handled by our authentication provider.
Business profile facts. The facts you give us about your business so we can publish them correctly: business name, phone number, address, service area, hours, services, and similar details.
Website scan data. When you or anyone runs an audit, we read the public pages of the website entered: its HTML, structured data, robots.txt and similar public files. We store the results and the evidence behind them.
AI-assistant probe answers. We ask AI assistants questions a customer might ask about businesses like yours and store their answers, which can mention your business and others.
Emails for audit reports. If you ask us to send an audit report by email, we keep that email address with the audit so we can send it.
Payment information. Payments are handled by Stripe. We don't receive or store your card number. We keep a record of your plan, billing status and Stripe customer reference.
Site connection details. If you connect a site, we keep what's needed to publish and undo the changes you approve, such as a site identifier and connection secret (stored protected), and a record of every change and its approval.
Technical data. The IP address a free audit request comes from, used to limit how many anonymous audits can be run and to prevent abuse, and standard server logs kept by our hosting provider.
AI-referred visit counts. If you add our script tag to your site, it counts visits that arrive from an AI assistant (based on the referring site or a campaign tag). It sets no cookies, and ordinary visits send nothing to us.
Messages you send us. If you email us, we keep the conversation.

2. Why we use it

To provide the service: run audits and AI-assistant checks, prepare fixes, publish the ones you approve, undo them on request, and show you before-and-after measurements.
To manage your account, subscription and billing.
To send you audit reports and service emails (for example, trial ending or a failed payment).
To keep the service secure, prevent abuse, and control costs (for example, rate limits on free audits).
To improve the service, using anonymized, aggregated insights (see section 5).
To meet legal obligations, such as tax and accounting records.

We don't use your data for advertising and we never sell personal data.

3. Legal bases

Placeholder — for lawyer review, depending on where customers are located.

[LEGAL BASES: e.g. performance of a contract for providing the service; legitimate interests for security, abuse prevention and service improvement; consent where required; legal obligation for records]

We share personal information only with service providers ("processors") who help us run OptSEO, under contracts that limit their use of it to providing their service to us, and where the law requires it.

Hosting and file storage: Vercel (our website, app and stored audit evidence). Our audit worker runs on Fly.io.
Database: Neon (managed Postgres).
Sign-in and account management: Clerk.
Email delivery: Resend (audit reports and service emails).
Payments: Stripe.
Business listing checks: Google Places API. To check whether your business is listed on Google, we send your business name and location to Google.
AI providers, via an AI gateway: we send the questions used for AI-assistant checks, which include public business details such as your business name, trade and location, through Vercel AI Gateway to AI providers including OpenAI, Anthropic, Google and Perplexity. We don't send your account details or payment information to them. [CONFIRM PROVIDER DATA-USE / TRAINING TERMS]

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or sale of the business (in which case this policy continues to apply to it).

5. Anonymized, aggregated insights

We may use anonymized, aggregated insights derived from customer data to improve the service, for example which types of fixes tend to help AI assistants read local business sites correctly. These insights are combined across many sites and don't identify you, your business or any individual. Your own data stays yours.

6. How long we keep it

Account and business profile data: while your account is open, and for [RETENTION PERIOD] after it closes, then deleted or anonymized.
Audits, scan evidence and probe answers: [RETENTION PERIOD].
Free-audit IP addresses and report emails: [RETENTION PERIOD].
Billing records: as long as tax and accounting law requires.
Change and approval history: while your account is open, so every change can be traced and undone.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict some uses, and to withdraw consent where we rely on it. You can update most account and business details in the app. For anything else, email info.optiweb.agency@gmail.com; we'll respond within 30 days. You can also complain to your local data-protection authority.

You can unsubscribe from non-essential emails at any time. Service emails about your account (such as billing) are sent while your account is open.

8. Cookies

optweb.co (this site): no advertising or analytics cookies. If you use the light/dark switch, your choice is saved in your browser's local storage (key optseo-theme) and never sent to us.
app.optweb.co: essential cookies set by our sign-in provider (Clerk) to keep you signed in and secure. The app doesn't work without them.
Payments: Stripe may set cookies on its own checkout and billing pages for fraud prevention.
Our script tag on your site: sets no cookies.

If we add analytics or other non-essential cookies, we'll update this policy and ask for consent where required.

9. Security

We protect data with encryption in transit, access controls, and by storing site connection secrets in protected form. No system is perfectly secure; if a breach affects your personal information we'll tell you as the law requires. Report security issues via our security contact.

10. International transfers

Our providers may process data in countries other than yours, including the United States. [TRANSFER MECHANISM, e.g. Standard Contractual Clauses — lawyer to confirm]

11. Children

OptSEO is a business service and isn't directed at children. We don't knowingly collect personal information from anyone under 16.

12. Changes to this policy

If we make a material change, we'll tell you by email or in the app before it takes effect. The "Last updated" date at the top shows when this policy last changed.

13. Contact

[LEGAL ENTITY NAME]
[ADDRESS]
Email: info.optiweb.agency@gmail.com
Data-protection contact: [DPO / PRIVACY CONTACT, if required]