Privacy Policy

The controller of personal data is the provider of the Ai Seo Improve platform ("the Provider" — its legal name, company ID (EIK) and registered address are given at the end of this page). This policy explains what personal data we process, for what purposes, on what legal basis and with whom we share it, in accordance with Regulation (EU) 2016/679 (GDPR).

1. What data we process

• Account data — name, email address, hashed password, role (site owner/contributor).
• WordPress site data — the site's URL and, only once the User adds it explicitly, an Application Password for WordPress REST API access (not the site's main administrator password). This data is stored encrypted and is used solely to publish the generated content.
• Google Search Console data — when the User connects it explicitly, an OAuth token for reading search statistics (queries, clicks, positions), used to improve the generated content.
• Payment data — processed entirely by Paddle as the Merchant of Record; Ai Seo Improve does not store bank card data.
• Usage data — topics of the generated articles, keywords, generation history, technical logs (IP address, time of the request) for security and troubleshooting purposes.

2. Legal basis and purposes of processing

• Performance of a contract — to provide the service itself (generating and publishing content, managing the subscription).
• Legitimate interest — for platform security, abuse prevention and improving the service.
• Consent — for connecting Google Search Console and for marketing messages, if the User has explicitly subscribed to them.
• Legal obligation — keeping billing data as required by accounting law.

3. Who we share data with

For the service to work, certain data is processed by the following providers, acting as processors on our behalf:

• OpenRouter — receives the article's topic and context in order to generate text content with an artificial intelligence model.
• fal.ai — receives text descriptions (prompts) in order to generate accompanying images.
• Serper.dev — receives keywords in order to collect publicly available search engine results (SEO research).
• Paddle — receives account data in order to process payments and invoicing, acting as an independent controller for payment information.
• Google — when explicitly connected, to read Search Console statistics.
• Sentry (Functional Software, Inc.) — receives technical data about errors on the platform (type of error, location in the code, internal account number) in order to detect and fix them. The data is stored in the European Union and does not include email addresses, IP addresses, passwords or form contents.
• Hosting provider — stores the database and the generated files on the infrastructure Ai Seo Improve runs on.

Some of the providers listed process data outside the European Economic Area. In those cases we rely on standard contractual clauses approved by the European Commission, or on an equivalent mechanism ensuring adequate protection.

4. Retention period

Account data and generated content are kept while the account is active. When an account is closed, WordPress access data is deleted immediately; data required for accounting and tax purposes is kept for the statutory periods (usually 10 years). Technical logs are kept for a limited period (usually up to 12 months) for security purposes.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing. For details on how to exercise these rights, see GDPR — your rights.

6. Security

We apply technical and organisational measures to protect the data — encryption of sensitive data (including WordPress access) in the database, restricted staff access, and regular review of third-party providers' access. Despite these measures, no method of transmitting or storing data is 100% secure.

7. Cookies

The platform uses only strictly necessary cookies (session, CSRF protection, language setting) — see the Cookie Policy.

8. Changes to this policy

If we make material changes to how we process personal data, we will notify active users by email before the changes take effect.

This is an English translation provided for convenience. In the event of any discrepancy, the Bulgarian version prevails.