Privacy policy

NextSEO ("NextSEO", "we", "us") runs a blog growth platform at nextseo.ai. It reads your website and, if you allow it, your Google Search Console data, finds the topics your site should cover, writes articles in your voice and publishes them to the site you connect.

This policy covers the marketing website, the blog, the NextSEO dashboard and any NextSEO email or notification. For the personal data of the people who visit the websites you connect, you decide why it is used, and we act as your service provider for that content.

If you do not agree with this policy, please do not use NextSEO.

We collect the following, grouped by where it comes from.

• Account details: your name, email address, a hashed password if you sign up with email (we never store the password itself), and your Google account identifier if you sign in with Google.
• Your websites: the addresses you add, the public pages we read, and the brand profile built from them (topics, tone, headings, internal links, calls to action, images).
• Competitors and keywords: the competitor sites you pick or accept, and the keywords and search results we look up for your topics.
• Search Console data: for each property you connect, the pages and queries with clicks, impressions and average position. This is read only access.
• Content you create with us: ideas, outlines, drafts, versions and edits of articles, generated images, and the chat messages you send to the writing assistant.
• Publishing connections: the details needed to publish for you, such as a WordPress address, a username and an application password or token, or a Blogger authorisation from Google. We use them only to publish and to test the connection.
• Billing information: your plan, billing status and invoices. Card details are entered with our payment processor and we do not receive or store full card numbers.
• Usage and device data: pages and features you use, actions the autopilot took on your behalf, log data such as IP address, browser, device type and time, and error reports.
• Notifications: if you turn on browser notifications, the subscription details your browser gives us so we can send them.
• Messages: what you send to our support, and your preferences for emails from us.

We use it for these purposes, and where the law requires a legal basis we rely on the one in brackets.

• To provide NextSEO: create your account, read your site, find ideas, write, edit and publish articles, run autopilot within the limits you set, and show results (to perform our contract with you).
• To bill you and prevent fraud: process payments, issue invoices, spot abuse of the free trial (contract, and our legitimate interest in keeping the service safe).
• To keep the service reliable and secure: monitor errors, investigate incidents, enforce our terms (legitimate interests).
• To improve NextSEO: understand which features are used so we can fix and simplify them. We use aggregated or de-identified information where we can (legitimate interests).
• To contact you: product messages that you need, such as a draft ready for review, a billing notice or a security alert (contract), and occasional product news that you can switch off at any time (consent or legitimate interests, depending on where you live).
• To meet legal duties: tax, accounting, responding to lawful requests (legal obligation).

We do not use your private content to train our own models, and we do not build advertising profiles from it.

NextSEO uses Google sign in and, if you choose, Search Console and Blogger. Each is optional and each asks for your consent on a Google screen first.

• Sign in: your name, email address and Google account identifier, used to create and secure your account.
• Search Console: the read only scope to view performance data of the properties you pick. We use it to find findings, improve pages and choose better topics. We cannot edit your Search Console settings or submit anything on your behalf.
• Blogger: if you connect a Blogger blog, the permission to create and update posts on that blog so we can publish the articles you approve.

NextSEO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you asked for in NextSEO. We do not sell it, we do not use it for advertising, and we do not let people read it except to give support you asked for, to keep the service secure, to follow the law, or when the data is aggregated and de-identified.

You can disconnect at any time in NextSEO under Settings, or remove NextSEO in your Google Account permissions page at myaccount.google.com/permissions. After you disconnect we stop reading and delete the stored Search Console data for that property when you ask us to, or when you delete the site or your account.

To write and analyse, NextSEO sends text to third party AI models through a routing service. Depending on the task and your plan these include models from OpenAI, Anthropic, Google (Gemini) and Perplexity. We send only what the task needs, for example the page text, the topic, your brand profile and the prompt for an article or an image. We do not send your password, payment details or your Google tokens.

AI visibility checks send short customer style questions about your topics to assistants and read back which brands they mention.

We also buy search and keyword data (for example search volumes and search result pages) from data providers. For this we send keywords, domains and locations. We do not send personal data about you.

These providers process the content on our behalf under their business or API terms, which generally say that customer content sent through the API is not used to train their models. Their terms can change, so please read theirs if this matters to you. Please do not put sensitive personal data into the writing assistant.

AI output can be wrong or similar to other output. You review it before it is published, or you choose autopilot and accept the limits described in our terms.

We share information only in these cases.

• Service providers who run parts of NextSEO for us, under written terms that limit their use: cloud hosting and storage, databases and queues, email delivery, payment processing, error monitoring, AI model providers and data providers (see above).
• The places you tell us to publish to: WordPress, Blogger or another CMS you connect, receive the articles and images you approve.
• Professional advisers and authorities when the law requires it, when we must protect our rights, users or the public, or to enforce our terms.
• A buyer or successor if NextSEO is part of a merger, acquisition or sale of assets. We would tell you first and the promises in this policy would continue to apply unless you agree to a change.
• Anyone else, only with your clear consent.

We do not sell personal information and we do not share it for cross context behavioural advertising.

We keep this small. The dashboard uses cookies or local storage that are needed to keep you signed in, protect your session and remember settings such as your last selected site. The marketing website and the blog do not set advertising cookies.

If we add analytics or a chat widget in the future, we will list it here and ask for consent where the law requires it. You can clear or block cookies in your browser, but the dashboard needs the essential ones to work.

• Account, sites, articles and settings: for as long as your account is open.
• Search Console data and site analysis: for as long as the site is connected, then removed when you delete the site or your account.
• After you ask us to delete your account: we delete or anonymise your data within 30 days. Encrypted backups can take up to 35 more days to expire.
• Billing and tax records: as long as tax and accounting law requires, usually up to seven years.
• Security and error logs: up to 90 days unless we need them longer to investigate an incident.

Articles that were already published to your website are on your website. Deleting your NextSEO account does not remove them from there.

We use encryption in transit (HTTPS), hashed passwords, access controls so only the people who need access can reach production data, separation between customers' data, and monitoring of unusual activity. Google and publishing connections use scoped permissions so they can be revoked from your side at any time.

No service can promise perfect security. If we learn of a breach that affects your personal data, we will tell you and the authorities as the law requires, without undue delay.

We and our providers may process information in countries other than yours, including the United States and the European Economic Area. When we transfer personal data from the EEA, the UK or Switzerland, we rely on approved safeguards such as standard contractual clauses or an adequacy decision.

Depending on where you live (for example the EEA, the UK, California and other US states), you can:

• ask for a copy of your personal data and for it in a portable format;
• correct data that is wrong;
• delete your data, or restrict or object to some uses;
• withdraw consent you gave earlier, without affecting what happened before;
• opt out of the sale or sharing of personal information (we do neither);
• not be treated worse for using these rights.

Most of this you can do yourself: edit your details and connections in Settings, export or delete articles, disconnect Google, and turn off emails and notifications. For anything else, or to delete your account, email hello@nextseo.ai from the address on your account. We reply within 30 days, and we may need to confirm it is you first.

If you think we have not handled your data properly, tell us first so we can fix it. You also have the right to complain to your data protection authority.

NextSEO is for businesses and is not meant for anyone under 16. We do not knowingly collect data from children. If you think a child has given us personal data, email us and we will delete it.

NextSEO reads public pages of your site and the aggregated Search Console data you allow. It does not place tracking code on your website and does not collect data about your visitors. The articles we publish are ordinary web pages on your site, so your own privacy policy and cookie notice cover your visitors.

When we change this policy we update the date above. For changes that matter, such as a new kind of provider or a new purpose, we will email account owners or show a notice in the dashboard at least 30 days before they apply, unless the law or a security issue needs a faster change.

Email hello@nextseo.ai for any privacy question or request. Please use the address of your NextSEO account so we can find you quickly.