Privacy policy

ItzSEO is an SEO software platform that helps you research keywords, generate content, run technical audits, track rankings, and measure your visibility on AI search engines like ChatGPT and Perplexity. This page explains exactly what data we collect, why we collect it, and what we do (and don't do) with it.

We're a small independent team. We don't sell your data, we don't share it with advertisers, and we don't use it to train AI models. The only people who can see your project data are you, the people you invite to your workspace, and our team when responding to support requests.

• Email address and name — provided by you or by your Google account when you sign up. Used to identify your account, send you transactional emails (invoices, invitations, rank-change digests), and contact you about service-critical issues.
• Profile photo — pulled from your Google account if you sign in with Google. Used only to display your avatar inside the app.
• Workspace and project data you create — keywords, articles, audits, notes, tasks, comments, and any other content you produce. Stored in our database so you can access it whenever you sign in.

When you connect Google Search Console to a project, you grant ItzSEO access to the webmasters.readonly scope. We use this access exclusively to:

• List the GSC properties (sites) you have access to, so you can pick which one to attach to your ItzSEO project.
• Pull your site's aggregated search performance data: total clicks, impressions, average position, click-through rate, top queries, and top pages — for the past 28 days. This data is displayed in your dashboard and used to surface SEO opportunities (keywords just outside the top 3, pages losing impressions, etc.).

What we do NOT do with your GSC data:

• We do not modify your GSC properties. The connection is read-only.
• We do not share your GSC data with any third party.
• We do not use your GSC data to train AI models.
• We do not sell or rent your GSC data.
• We do not access GSC data for any properties beyond the one you explicitly attach to a project.

You can disconnect Google Search Console at any time from your project settings. When you do, we delete the OAuth tokens immediately and stop fetching new data. Aggregated metrics already displayed in your dashboard remain visible until you delete the project.

When you connect WordPress to a project (using a WordPress Application Password you generate), we use that connection exclusively to publish articles you generate inside ItzSEO and to list your existing categories, tags, and media library. We do not modify or delete posts or pages we did not create. Disconnecting WordPress in your project settings revokes this access immediately.

We use a session cookie set by our authentication provider (Clerk) to keep you signed in. We do not use third-party advertising or tracking cookies. We do not use Google Analytics on the application itself; the marketing site (itzseo.com landing page) uses privacy-respecting analytics that do not set personal cookies.

All payments are processed by Stripe. We never see or store your credit card number — Stripe handles that directly. We store only your Stripe customer ID, the plan you're on, and your invoice history. You can manage your billing or download invoices from your billing settings, which redirect you to a Stripe-hosted customer portal.

ItzSEO uses these third-party services to operate. Each is bound by their own privacy policy and terms:

• Anthropic — for Claude AI (content generation, brief generation, recommendations). Per Anthropic's API terms, your prompts and generated outputs are not used to train their models.
• OpenAI — for image generation (DALL-E 3) when you opt in to AI-generated featured or inline images.
• Perplexity — for AI search visibility scans (used only for the queries you explicitly add to track).
• Google — for Search Console data integration and Sign-in with Google.
• DataForSEO — for keyword research data (volume, difficulty, competition) and SERP rank tracking.
• Stripe — for payment processing.
• Resend — for transactional email delivery.
• Clerk — for user authentication and session management.
• Neon — for our PostgreSQL database hosting.
• Hostinger — for application hosting.

We retain your account and project data for as long as your account is active. If you delete your account, we delete all your project data within 30 days. We retain billing records for 7 years to comply with tax law. We retain operational logs (sign-in events, API request logs) for 90 days for security and debugging purposes.

You can:

• Export all your project data in JSON format from your account settings.
• Permanently delete your account and all associated data from your account settings.
• Disconnect any third-party integration (Google Search Console, WordPress) at any time.
• Opt out of any non-essential email — see your notification preferences.
• Request a copy of, correction to, or deletion of your personal data by emailing hello@itzseo.com.

We use industry-standard practices to protect your data: TLS in transit, encrypted-at-rest databases, hashed credentials, and scoped API keys. Access to production systems is limited to our engineering team. We will notify you within 72 hours of becoming aware of any breach affecting your data.

ItzSEO is not directed at children under 13 (under 16 in the EU) and we do not knowingly collect data from anyone in that age range. If you believe a child has provided us with personal information, please contact us and we will delete it.

If we materially change how we collect or use data, we will update the effective date at the top of this page and email all active users at least 30 days before the change takes effect.

Questions about this privacy policy or your data? Email hello@itzseo.com. We respond within 2 business days.