Back to Home

Privacy Policy

Last Updated: October 2026

Your privacy is important to us. This policy explains how we collect, use, and protect your data at SEOcluster.ai.

Quick Navigation

→ Information We Collect→ How We Use Data→ Data Security→ Google API Policy→ OAuth Permissions→ Delete Google Data→ Your Rights

1. Information We Collect

Personal Information You Provide

  • •Contact Information: Email address, name
  • •Authentication Data: Google account information (email, profile picture, user ID) when you sign in with Google
  • •Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
  • •Usage Data: Keywords, URLs and files you upload or import, pages we crawl for you, and the clusters, briefs, drafts, audits and redirect maps you create

Automatically Collected Information

  • •Log Data: IP address, browser type, operating system, access times, pages viewed
  • •Cookies and similar storage: Used to keep you signed in, and by our analytics tools (PostHog and Google Analytics)
  • •Product analytics: Pages viewed, clicks and in-app events. PostHog also records sessions (how pages are used, including mouse movement and clicks) so we can find problems. Everything you type into form fields is masked in these recordings, but they can show other content on the page, such as your reports.
  • •Bot protection: Google reCAPTCHA v3 runs on the sign-in and sign-up pages and receives browser and device information
  • •Google Search Console data: Queries, pages, clicks, impressions, CTR and position for the properties you choose to connect

2. How We Use Your Information

We use your information to:

  • ✓Provide the Service: Process keywords, generate clustering analysis, create AI-powered content briefs
  • ✓Manage Your Account: Authenticate users, manage subscriptions, track usage limits
  • ✓Process Payments: Via Stripe for paid subscriptions (Essential and Pro plans)
  • ✓Email You: Account and service emails, such as password resets. When you sign up, your email address is added to our email list (run on Brevo) so we can send account and product updates. Any promotional email includes an unsubscribe link.
  • ✓Improve the Service: Analyze usage patterns, fix bugs, develop new features

We do NOT:

  • ✗Sell your personal data to third parties
  • ✗Use your keyword data for any purpose other than providing the Service to you
  • ✗Share your data with advertisers or data brokers, or use it for advertising

3. Data Storage & Security

Where We Store Data

We store and process your data on Google Cloud in Australia and the United States.

  • • Account and product data: Google Cloud Firestore, Sydney region (australia-southeast1)
  • • Processing: our servers run on Google Cloud Run in the United States (us-central1), so your data is processed there
  • • Uploaded files and exports: Google Cloud Storage
  • • Search Console connection tokens: Google Secret Manager
  • • Payment details: Stripe (we do not store card numbers)

How We Protect Data

  • • TLS/SSL encryption
  • • Access controls
  • • Google OAuth 2.0
  • • Database backups expire after 14 days. Server logs are kept for a limited period under our Google Cloud logging settings and then deleted automatically

Data Retention

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Account, product and Search Console data deleted within 30 days of your deletion request (our deletion process removes it straight away; backup copies expire within 14 days, and any copies in server logs are deleted automatically when those logs expire)
  • Anti-abuse record: We keep a minimal record of deleted accounts (email address and deletion date) to prevent repeat free-plan sign-ups
  • Analytics data: Kept according to the retention settings of our PostHog account
  • Anything else: Email support@seocluster.ai to ask us to delete any remaining data about you
  • Billing Records: Kept for 5 years for Australian tax purposes, held by Stripe

Service Providers That Receive Data

We use these providers to run the Service. They only get the data needed for the feature you use.

  • Google Cloud and Firebase: Hosting, sign-in, database, file storage and our servers. Receives: All account and product data.
  • OpenAI: Content briefs, page drafts, strategy notes, site audit and competitor analysis, URL migration review, and backup for cluster names. Receives: Keywords, URLs, page text and Search Console metrics needed for the task.
  • Anthropic: Page Edits on the Pro plan, and site audit reports. Receives: Page text, keywords and audit findings.
  • xAI: Cluster names and local-search checks. Receives: Keyword lists and your site URL.
  • Serper: Looking up Google results to check which keywords belong together, and for competitor checks. Receives: Search queries (your keywords).
  • Stripe: Payments and subscriptions. Receives: Name, email and billing details.
  • Brevo: Account emails and our email list. Receives: Email address.
  • PostHog: Product analytics and session recordings. Receives: Pages, clicks, device and browser data, your account ID, and your email address at sign-up.
  • Google Analytics: Website traffic analytics. Receives: Pages viewed, events, device and browser data.
  • Google reCAPTCHA: Bot protection on sign-in and sign-up. Receives: Browser and device data.
  • Sentry: Error monitoring. Receives: Technical error details when something breaks. On our servers we switch off Sentry's default collection of personal data.

For AI features, we send the data needed for each task to OpenAI, Anthropic or xAI so they can generate the output. They handle it under their own API and business terms: OpenAI, Anthropic and xAI.

Several of these providers are based in the United States, so your data may be stored or processed outside Australia.

The video on our homepage is a YouTube (privacy-enhanced mode) embed that only loads when you press play.

4. Google API User Data Policy

Limited Use Disclosure

SEOcluster.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Google Data

We only use Google Search Console data to:

  • •Import keywords and search performance metrics
  • •Provide performance analysis (clicks, impressions, CTR, position)
  • •Generate keyword clusters and content briefs

We do NOT:

  • ✗Sell your Google data, or share it with anyone other than the service providers in Section 3 that process it for features you use (for example, AI providers that write briefs from your queries)
  • ✗Use your Google data for advertising purposes
  • ✗Use your Google data to develop, improve or train our own AI models
  • ✗Access Google Drive, Gmail, Sheets, or any other Google services

5. Google OAuth Permissions Requested

Scope We Request

To connect Search Console, SEOcluster.ai requests one scope:

https://www.googleapis.com/auth/webmasters.readonly

Purpose: This scope provides read-only access to your Google Search Console data, allowing us to import your search performance metrics (queries, clicks, impressions, CTR, and position).

If you sign in with Google, Google also shares your basic profile (name, email address and profile picture) through the standard email and profile scopes.

What We Do NOT Request

We explicitly do NOT request access to:

  • ✓Google Drive (no drive.file or drive scope)
  • ✓Google Sheets (no spreadsheets scope)
  • ✓Gmail (no gmail scope)
  • ✓Google Calendar, Contacts, or any other Google services

6. How to Delete Your Google Data

Delete via SEOcluster.ai

You can delete your account and product data from the Settings page in your dashboard. Deleting your account permanently removes:

  • •All imported Google Search Console data
  • •All keyword clusters you've created
  • •All content briefs you've generated
  • •Your business profile and account settings
  • •Site audits, crawls, redirect maps, uploaded files and exports, and your stored Search Console connection

Deleting your account also cancels any active subscription and removes your email address from our Brevo list. Analytics data in PostHog is not removed automatically; it is kept according to the retention settings of our PostHog account. Email support@seocluster.ai if you want it, or any other remaining data, deleted.

We may retain minimal billing, fraud-prevention and legal records where required (see Data Retention above), including a minimal record of your email address and deletion date to prevent free-plan abuse. A new free account can't be created with the same email for 30 days after deletion. These records are not used to restore deleted product data.

Revoke Access via Google

You can revoke SEOcluster.ai's access to your Google Search Console data at any time directly through Google:

Manage Google Permissions →

After revoking access, we will no longer be able to read your Search Console data. Previously imported data will remain in your SEOcluster.ai account until you delete it.

7. Your Rights

Australian Users' Rights

Under the Australian Privacy Act 1988, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request corrections to inaccurate data
  • Deletion: Request deletion of your account and data
  • Complaint: Lodge a complaint with the OAIC

European Users' Rights (GDPR)

If you're in the EEA, you also have:

  • Portability: Receive your data in machine-readable format
  • Restriction: Request we limit processing of your data
  • Objection: Object to processing based on legitimate interest
  • Withdraw Consent: Revoke consent for GSC data access

How to Exercise Your Rights

Email us at: support@seocluster.ai

We will respond within 30 days for both Australian and GDPR users (may extend to 60 days for complex requests).

Questions About Your Privacy?

We're here to help. Contact us for any privacy-related questions or requests.

Email: support@seocluster.ai

Business Name: Jimmy Albert Jean Faccioli (trading as SEOcluster.ai)

ABN: 13 137 862 710

Response Time: Within 30 days

This is a summary of our privacy practices. For the complete policy with all sections including GDPR compliance, cookies, third-party services, and more, please contact us.

← Back to HomeView Terms of Service →