Privacy Policy

At SEOVault AI, we take your privacy and the security of your WordPress content seriously. This Privacy Policy explains how the SEOVault AI Chrome Extension, the SEOVault AI Web App, and the SEOVault website collect, use, and protect your information.

1. What Data We Access and Why

SEOVault AI is designed to assist WordPress authors with SEO analysis, content optimization, internal linking, and writing support — using either our Chrome extension or a lightweight WordPress connector plugin that links the SEOVault AI web app to your site.

WordPress Content

When you use the extension, we access content inside your Gutenberg editor, including:

• Draft text
• Headings
• Titles
• Metadata
• User-selected text

This access is used only to provide SEO analysis, diagnostics, AI-assisted features, and internal link suggestions.

No Permanent Storage of Drafts

Your WordPress drafts are processed in real time.

• We do not permanently store full article drafts
• We do not archive or reuse your content
• We do not publish or share your drafts

Temporary processing may occur solely to return requested results.

2. AI Processing & Data Handling

SEOVault AI uses third-party AI and search APIs to power analysis, diagnostics, and content generation features.

When you use AI-powered features:

• Portions of your content, selected text, or focus keywords may be sent to external APIs (such as Gemini, OpenAI, Perplexity, Mistral, or other LLMs) only to generate results
• Data is processed on demand and is not used to train our own models
• We do not sell, reuse, or distribute your content
• You remain the owner of all content at all times

3. Third-Party Services and APIs

To deliver SEO insights and AI functionality, SEOVault AI integrates with third-party services.

AI & Research Providers

To deliver high-precision SEO analysis and content generation, SEOVault AI utilizes an orchestration of industry-leading Large Language Models (LLMs) and real-time search APIs. This system dynamically selects the most capable processing engine for each specific task (such as SERP analysis or content drafting).

All data transmitted to these third-party providers is processed in real-time, is not used to train the underlying models, and is protected by enterprise-grade confidentiality agreements.

Pro Tip for Data Safety: While our enterprise-grade API configurations ensure your data is not used for training, as a general best practice for all AI-powered tools, we recommend that you do not include highly sensitive personal information (such as passwords, financial records, or private identification numbers) within your WordPress drafts when utilizing AI analysis features.

Authentication

Google Authentication — used to securely manage user accounts and subscriptions. We only access basic profile information (such as email address) to identify your account.

Google Search Console and Google Analytics Access

SEOVault AI accesses Google user data only after a workspace owner or administrator explicitly connects a Google account through Google OAuth and grants the requested permissions.

For this integration, SEOVault AI requests the following Google OAuth scopes:

• openid
• email
• https://www.googleapis.com/auth/webmasters.readonly
• https://www.googleapis.com/auth/analytics.readonly

SEOVault AI uses these scopes for read-only access. SEOVault AI does not write to, modify, or delete data inside a user's Google Search Console or Google Analytics account.

Data Accessed

When a user connects Google Search Console and Google Analytics, SEOVault AI may access, collect, or process the following Google user data:

• Basic Google account information needed to identify the connected account, such as the connected Google account email address.
• Search Console property metadata, such as site/property identifiers and permission level.
• Search Console performance data for selected date ranges, including pages, queries, clicks, impressions, click-through rate, and average position.
• Google Analytics 4 property metadata, including property IDs and display names.
• Google Analytics 4 traffic and landing page data for selected date ranges, including landing page paths, session source, session medium, default channel group, sessions, engaged sessions, engagement rate, average session duration, bounce rate, conversions, and page views.
• OAuth connection metadata, including granted scopes, connection timestamp, and an encrypted refresh token used to maintain the authorized connection.

Data Usage

SEOVault AI uses Google user data only to provide and improve user-facing SEO and AI Visibility features inside the user's workspace. This includes:

• Allowing users to connect a Google account and select Search Console and Google Analytics properties for their workspace.
• Mapping Search Console and Google Analytics properties to sites connected to the workspace.
• Displaying Google Search Signals, SEO performance, traffic insights, top pages, landing pages, and observable AI referral summaries inside the AI Visibility feature.
• Generating selected-page insights, including matching Search Console query data against the user's page content to identify SEO and AI-readiness opportunities.
• Refreshing Google access tokens server-side when needed so the authorized connection continues to work until the user disconnects it.

SEOVault AI does not use Google user data to serve ads, for retargeting, for sale to data brokers, or to train SEOVault AI or third-party AI models.

Data Sharing

SEOVault AI does not sell Google user data and does not share Google user data with advertisers, data brokers, or unrelated third parties.

Google user data may be processed by service providers that help us operate SEOVault AI, such as hosting, database, infrastructure, monitoring, and security providers. These providers process data on our behalf only as needed to provide, secure, and maintain the service.

Within SEOVault AI, Google-derived data may be visible to authorized members of the same workspace according to the workspace's access controls.

We may disclose data when required by law or when necessary to protect users, prevent abuse, enforce our terms, or secure the service.

Data Storage and Protection

SEOVault AI stores Google connection records and selected Google-derived workspace summaries in our backend systems only as needed to provide the AI Visibility feature.

OAuth refresh tokens are encrypted before storage and stored in our backend database. Google access tokens are obtained server-side when needed and are not stored as part of the workspace connection record.

Google OAuth client credentials and token-encryption keys are stored as server-side secrets and are not exposed in the browser.

Traffic between the user's browser, SEOVault AI, our backend systems, and Google APIs is protected using HTTPS/TLS encryption.

We use access controls and operational safeguards designed to limit access to Google user data to the systems and personnel needed to provide, maintain, support, and secure the service.

Data Retention and Deletion

Temporary OAuth state records are deleted after use or expire after approximately 10 minutes.

The stored Google connection record, including the encrypted refresh token, connected email, granted scopes, and connection metadata, is retained until the workspace owner or administrator disconnects Google from the Connections page or requests deletion.

Disconnecting Google stops future access to Google Search Console and Google Analytics data and deletes the stored Google OAuth connection token record. Disconnecting Google does not automatically delete Google-derived summaries that were previously imported into the workspace.

SEOVault AI may retain previously imported Google-derived workspace summaries so the AI Visibility feature can show imported results and historical context. This may include site-to-property mappings, import logs, page-level Search Console metrics, selected-page query insight summaries, Google Analytics landing page metrics, referral/source summaries, and related AI Visibility summaries.

Users may request deletion of stored Google connection data and previously imported Google-derived workspace data by emailing support@seovaultai.com. After verifying the request, we will delete the relevant Google connection records and Google-derived workspace data, subject to legal, security, fraud-prevention, and backup retention obligations.

4. Payments & Billing

SEOVault AI uses Paddle.com as its payment processor and Merchant of Record.

When you make a purchase:

• Paddle processes billing details, payment method, tax location, and transaction records
• SEOVault AI does not store your full payment information
• Paddle's handling of personal data is governed by its own privacy policy

5. Extension Permissions Explained

The SEOVault AI Chrome Extension requests certain permissions that are necessary to provide its WordPress publishing, SEO, and AI-assisted functionality.

The extension requests the following permissions strictly for product features:

• storage — used to save user preferences, local settings, connected WordPress site configuration, SEO snippets, focus mode settings, and other extension data locally within the browser.
• identity — used to authenticate users through supported sign-in providers and verify account access, subscriptions, credits, and feature entitlements.
• tabs / activeTab — used to detect when the user is working inside supported WordPress admin or editor pages and to enable user-triggered actions such as screenshot capture and page analysis.
• scripting — used to enable communication between the extension side panel and supported WordPress editor pages, including Gutenberg integration and publishing workflows.
• contextMenus — used to provide user-triggered right-click actions such as screenshot capture, saving selected text to SEO Snippets, citation tools, and word-count analysis.
• host_permissions — used to allow the extension to operate on WordPress sites that the user explicitly chooses to connect, including editor integration, sitemap access, internal linking workflows, and WordPress-related functionality.

Screenshot Handling

The extension includes a screenshot utility. Images captured through this feature are processed locally through your browser and system clipboard. Screenshots are not uploaded to or stored on SEOVault AI servers unless you explicitly choose to use a feature that requires remote processing.

SEO Snippets (Local Storage)

User-selected text saved to SEO Snippets is stored locally within your browser. This information is not uploaded to SEOVault AI servers and remains under your control on your device.

AI Processing & Backend Communication

Certain premium AI features require communication with SEOVault AI backend services in order to generate results.

Examples include, but are not limited to:

• AI Humanizer
• Deep Analysis (DAC Score)
• Article Generation
• Outline Generation
• FAQ Generation
• TL;DR Generation
• Brand Kit Analysis
• Other AI-assisted content workflows

When you explicitly invoke one of these features, content necessary to provide the requested functionality may be transmitted to SEOVault AI backend services and supporting AI providers for processing.

Such content is transmitted solely for the purpose of providing the requested feature and is not used to monitor unrelated browsing activity.

Authentication

SEOVault AI uses authentication services to manage user accounts, subscriptions, credits, and premium feature access.

When you sign in, we may process basic account information such as your email address and authentication identifiers in order to identify your account and provide access to your purchased services.

Installation & Diagnostic Identifiers

The extension may generate a random installation identifier used for extension functionality, diagnostics, abuse prevention, service reliability, and account-related operations. This identifier is not intended to identify you personally.

Uninstall Feedback

If you uninstall the extension, Chrome may open an uninstall feedback page. This page may receive limited diagnostic information such as extension version, login status, subscription tier, and a non-reversible hashed account identifier to help us understand product usage and improve the service.

No article content, screenshots, SEO snippets, passwords, browsing history, or personal files are transmitted as part of uninstall feedback.

No General Browsing History Collection

SEOVault AI does not collect or store your general web browsing history.

The extension checks browser tabs only when necessary to determine whether supported WordPress pages are open, to enable connected-site functionality, or to perform actions that you explicitly request.

Permissions are used only to support SEOVault AI functionality and are not used for unrelated tracking, advertising, or monitoring of general browsing behavior.

6. Data Protection & Disclosure

• No Sale of Data: We do not sell, trade, or rent your personal data or WordPress content
• Security: Data transmitted between your browser and our API partners is encrypted using SSL/TLS
• Limited Access: Only essential systems and services access data required to operate features you explicitly use

Limited Use Disclosure: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertisements or for any purpose other than providing the core functionality of SEOVault AI.

7. Your Rights and Control

You are always in control of your data.

• You may stop all data access by uninstalling the extension
• You may clear locally stored preferences via your browser settings
• If applicable, you may request access to or deletion of account-related data, including stored Google connection/import data, subject to legal obligations

8. Contact Us

If you have any questions about this Privacy Policy or how SEOVault AI handles data, contact us at:

support@seovaultai.com

Data Protection Officer: Nuri Ciftcioglu. For formal privacy inquiries or data deletion requests, please contact us at support@seovaultai.com.

---

Website Privacy (SEOVaultAI.com)

The following applies to visitors of our website and the WordPress-hosted blog/documentation sections of SEOVaultAI.com.

Who We Are

Our website address is: https://seovaultai.com

Comments

When visitors leave comments, we collect the data shown in the comments form, IP address, and browser user agent string to help with spam detection. An anonymized hash of your email address may be shared with the Gravatar service.

Media

If you upload images to the website, avoid embedding location data (EXIF GPS). Visitors may download and extract location data from images.

Cookies

• Comment cookies may store your name, email, and website for convenience (1 year)
• Login cookies manage authentication and display preferences
• Publishing cookies store post ID references only and expire after 1 day

We also use analytics services such as Google Analytics and Microsoft Clarity to understand navigation patterns, clicks, scroll behavior, and usability issues across our marketing site and web app. These tools help us diagnose friction, demand, and product issues faster. Sensitive form fields and input content are masked by default where supported, and analytics preferences can be managed through our cookie controls.

Embedded Content from Other Websites

Articles may include embedded content (videos, images, articles). Embedded content behaves as if you visited the external website directly and may collect data or track interactions.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email.

Data Retention

• Comments and metadata are retained indefinitely
• Registered users' profile data is stored until modified or deleted
• Administrators can access this data for management purposes

Your Data Rights

You may request:

• An export of personal data we hold
• Deletion of personal data (excluding legally required records)

Where Your Data Is Sent

Visitor comments may be checked through automated spam detection services.