Privacy Policy
Last updated: 30 October 2026
This policy explains what data Auto-Seo.co.uk collects, why we collect it, and how we look after it. We are GDPR compliant and based in the United Kingdom. If you have any questions, email hello@auto-seo.co.uk.
1. Who we are
Auto-Seo.co.uk is an AI-powered SEO automation platform run from the United Kingdom. We are the data controller for the personal information you submit through this website.
2. What we collect
- Information you give us when you sign up: name, business email, website URL, billing details (handled by Worldpay for card payments and GoCardless for Direct Debit), and the keyphrases / topics you want us to target.
- Information about the websites you connect to Auto-SEO, including WordPress credentials (encrypted), site content, and articles published.
- Standard technical information when you visit the site: IP address, browser type, pages viewed, used for security and analytics only.
- Communications you send us (emails, support requests).
3. Why we collect it
- To run the Auto-SEO platform and deliver the SEO articles, rankings tracking, and backlinks you've subscribed to.
- To bill you and meet our financial record-keeping obligations (handled jointly with Worldpay (card payments) and GoCardless (Direct Debit)).
- To improve the service — anonymised usage patterns help us see what works.
- To respond to support and sales enquiries.
- To contact you by email, phone, SMS and WhatsApp about your account, free trial, support and our products and services, and (where you have given us your mobile number) to let our sister companies tell you about products and services we think will interest you. You can opt out of marketing messages at any time by replying STOP or emailing us.
- To meet legal obligations (fraud prevention, accounting, lawful basis records).
4. Lawful basis
We rely on contract performance to deliver the service to paying customers, on consent where you've ticked an opt-in box, and on legitimate interest for fraud prevention and product analytics.
5. How long we keep it
Account data: kept while your account is active and for 6 months after closure (in case you reactivate). Billing records: kept for 6 years to meet UK accounting requirements. Articles we've generated for you: stored in your account until you delete them. Marketing-form enquiries: up to 24 months from last contact.
6. Who we share it with
We do not sell your data. We share it only with:
- Our sister companies, so they can contact you by email, SMS or WhatsApp about their products and services; you can opt out at any time.
- Service providers who help us run the platform: cloud hosting (UK + EU), Worldpay (card payments), GoCardless (Direct Debit), OpenAI (article generation), Unsplash (stock imagery). All under written data-processing agreements.
- Authorities where we are legally required to do so.
7. International transfers
Our infrastructure is UK-hosted. Where any sub-processor operates outside the UK/EU (e.g. OpenAI in the US), we use Standard Contractual Clauses or equivalent safeguards.
8. Your rights
You have the right to access, correct, delete, port or restrict the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email privacy@auto-seo.co.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
9. Cookies
This site uses only essential cookies needed for the login session and basic security. We do not run third-party advertising trackers.
10. Google user data (Google Business Profile)
Some Auto-SEO features connect to the Google Business Profile APIs. This section explains what we access from a Google Account, why we access it, how we look after it and how you can stop it at any time.
When we access it
- Clients who use our Google Business Profile optimisation. You add our team’s Google account (autoseo.co.uk@gmail.com) as a Manager of your listing, and we connect that account to Auto-SEO. We then read your listing and make the changes you have asked us to make.
- Anyone who connects their profile to our free local audit. If you choose “Connect your Google Business Profile”, you sign in with your own Google Account and give your permission. We read your own listing to build your audit. In this mode we only read your data: we never change anything on your listing.
What we access
- The Google permission “See, edit, create and delete your Google business listings” (the business.manage scope), plus your email address so we know which Google Account connected.
- Listing details: business name, address or service area, phone number, website, categories, description, opening hours, services and verification status.
- Reviews, star ratings and existing replies, your posts, and your photos and photo count.
- Performance figures for your listing: views on Google Search and Maps, calls, website clicks, direction requests, messages, bookings and the search terms people used to find you.
How we use it
- Free local audit: to show how complete your profile is, your review and performance figures, and practical suggestions to improve it. Read only.
- Clients: to publish posts and photos, reply to reviews once the reply has been approved, update the description, opening hours, services and categories you have agreed, and report your results. We never delete anything from your listing.
- We use Google user data only to provide and improve these features for you. We never sell it, never use it for advertising, never use it to build profiles for anyone else and never use it to train general AI models.
- Our team only looks at your Google data when it is needed to provide the service you asked for, to keep the service secure, or to meet the law.
Who we share it with
We do not sell or rent Google user data. We share it only with the service providers that help us run these features, under written data-processing agreements and only to provide the feature: our UK hosting, and the AI writing service that drafts text such as review replies (you approve every reply before anything is posted). We also share it with authorities where the law requires us to.
How we store and keep it
- Google access tokens are encrypted at rest (AES-256) on our UK-hosted servers and are never shown on screen or in emails.
- Free local audit connections: your Google token and the data we read are deleted automatically 30 days after you connect, or straight away when you press Disconnect. The only exception is if you become one of our Google Business Profile optimisation clients, in which case we keep them while you remain a client.
- Client connections: kept while you are a client, and deleted within 30 days of you leaving or removing our access.
How to stop our access
- Press Disconnect on the free local audit page. This cancels the permission and deletes our copy of your token and data.
- Remove Auto-SEO from your Google Account at any time on Google’s Third-party connections page.
- Clients can remove our account in Business Profile settings, under People and access.
- Email privacy@auto-seo.co.uk and we will delete your Google data.
Limited Use. Auto-SEO’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
11. Changes to this policy
If we change this policy materially we will update the date at the top and, where appropriate, notify you by email.