Privacy Policy

2. Data We Collect

We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Website, or otherwise when you contact us.

• Account Information: Name, email address, password, billing information.
• Usage Data: How you interact with our application, which features you use, and generation volumes.
• Integration Data: CMS API keys, Google Search Console Oauth tokens (stored encrypted).

3. How We Use Your Data

We use personal information collected via our Website for a variety of business purposes described below:

• To facilitate account creation and logon process.
• To fulfill and manage your orders and subscription.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries/offer support to users.

4. AI & Model Training

We do not use your proprietary data to train our foundational models.

Any content you generate, seed keywords you research, or drafts you publish through Seobox remain strictly confidential. If you opt-in to custom fine-tuning (Enterprise tier), that model is isolated entirely to your workspace and is never shared.

5. Data Sharing & Third Parties

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.

Examples include:

• Payment Processors: For secure handling of billing information (e.g., Stripe).
• Cloud Hosting: To securely store your content and app data (e.g., AWS, Vercel).
• LLM Providers: Content sent for analysis or generation is passed securely via API. No personal data is used to train these external models.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

All sensitive information, such as your CMS API keys and Oauth tokens, are encrypted at rest using AES-256 encryption.

7. Your Rights (GDPR/CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• The right to request access and obtain a copy of your personal information.
• The right to request rectification or erasure of your data.
• The right to restrict the processing of your personal information.
• If applicable, the right to data portability.

To exercise these rights, please contact our Data Protection Officer using the contact details provided in Section 8.