Legal

Privacy Policy

Last updated: November 25, 2025

This Privacy Policy explains how AI Business Insight Pty Ltd (ABN 68 681 570 543), trading as SEO ANALYSER, handles your personal information in line with the Australian Privacy Principles (APPs), GDPR/UK GDPR, CCPA/CPRA, Nevada SB 220, and other applicable privacy laws. By using our website and SaaS products (together, the “Services”), you agree to this Policy.

1. Who we are

AI Business Insight Pty Ltd (ABN 68 681 570 543), trading as SEO ANALYSER (“SEO ANALYSER”, “we”, “us”, “our”), owns and operates:

  • The website: https://seoanalyser.com.au and related subdomains
  • Our hosted SaaS SEO analysis and reporting platform (the “Application”)

Privacy enquiries: [email protected]

2. Scope of this Privacy Policy

This Policy explains how we handle “personal information” / “personal data” under:

  • The Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)
  • The EU GDPR and UK GDPR
  • US state privacy laws such as CCPA/CPRA and Nevada SB 220

It applies when you use our Services, connect third-party tools (such as Google Search Console or Google Analytics), receive marketing communications, or interact with us via email or support. It does not apply to Customer Content that we process solely as your data processor—your own privacy notices govern that content.

3. What we collect

We collect different categories of data depending on how you interact with us:

CategoryExamplesCollected from
Account DataName, email address, business name, password hash, plan type, roleAccount creation, profile updates
Payment DataLast 4 digits of card, expiry, billing postcode (via Stripe), invoicesCheckout, billing management
Scan / Audit DataWebsite URLs audited, audit results, project settings, white-label logosRunning audits or generating reports
Usage & Device DataIP address, cookie ID, browser type, OS, referrer URL, pages viewed, time on page, in-app actionsCookies, pixels, server logs
Marketing DataNewsletter preferences, campaign source, ad IDs, marketing tagsForms, emails, cookies, partners
Support RecordsSupport tickets, chat logs, emails, bug reports, attachmentsSupport channels and email
Aggregated StatisticsDe-identified site performance trends, aggregated audit outcomesDerived internally
Google user dataData retrieved from Google APIs after OAuth consent (see Section 6)Explicit OAuth consent

Free Visitor Audits

For free visitor SEO audits we set a first-party cookie and log IP addresses/domain names to enforce a “four-audits-per-domain-per-24-hours” limit. No other personal details are required.

4. How we collect information

We collect personal information in the following ways:

  • Directly from you: forms, account creation, subscriptions, surveys, or communications.
  • Automatically: cookies, pixels, and log files when you use the website or Application.
  • Integrated third-party services: payment processors (Stripe), analytics (Google Analytics), and email tools.
  • Public/third-party sources: WHOIS data, SERPs, or other SEO datasets that enrich audits.

5. Why we use your information

We use personal information for the following purposes and legal bases:

PurposeAU legal basisGDPR/UK GDPR basis
Provide, operate, and secure the ServicesAPP 3, 6Performance of contract; Legitimate interests
Create and manage your accountAPP 3Performance of contract
Process payments and manage billingAPP 3Performance of contract; Legal obligation
Run audits and generate SEO reportsAPP 3, 6Performance of contract; Legitimate interests
Enforce fair use, prevent abuse and fraudAPP 6Legitimate interests
Send service-related communicationsAPP 6Performance of contract; Legitimate interests
Send marketing communications (where permitted)APP 6/7Consent where required; Legitimate interests
Improve and develop our ServicesAPP 6Legitimate interests
Comply with legal, tax, and regulatory obligationsAPP 3, 6Legal obligation

You may opt out of marketing emails using the unsubscribe link or by emailing [email protected]. Service communications (billing, security) are not optional.

6. Use of Google APIs and Google user data

When you explicitly connect Google Search Console or Google Analytics, we access Google user data through OAuth. Our use and transfer of this data adheres to the Google API Services User Data Policy, including Limited Use requirements.

6.1 Data we access

  • Google Search Console properties, performance metrics, and coverage data
  • Google Analytics properties, aggregated traffic metrics, conversion events
  • Basic profile information when you use Google Sign-In (name, email, account ID)

6.2 How we use it

  • Deliver requested features (audits, dashboards, insights, reporting)
  • Maintain and secure API integrations, detect abuse, and resolve technical issues
  • Improve features in aggregate without building marketing lists or training general-purpose AI/ML models

We do not use Google user data for ads, retargeting, or selling/licensing to third parties.

6.3 Sharing or transfers

Transfers of Google user data are limited to:

  • Infrastructure and security providers processing data on our documented instructions
  • Legal compliance where required

6.4 Storage, retention, and control

Google user data is retained only while the integration remains active. Disconnecting an integration stops further collection and triggers deletion or de-identification within a reasonable period, subject to legal and backup requirements.

You can revoke SEO ANALYSER’s access through your Google Account permissions or by emailing [email protected] to request deletion consistent with Section 11.

7. Role as Data Controller vs Data Processor

7.1 Data Controller

We act as the data controller for activities such as operating the Services, managing subscriptions, running audits, analysing usage, and complying with laws.

7.2 Data Processor

When you upload “Customer Content” (e.g., personal data relating to your own users), we act as your data processor/service provider. You are responsible for ensuring you have a lawful basis to process that data, and we handle it strictly on your instructions as described in our Terms of Service and any data processing addendum.

8. Disclosure to third parties

We disclose personal information only when necessary to operate the Services or comply with law:

RecipientPurposeMain locations
Stripe PaymentsPayment processing, billing, fraud preventionAU, USA
OVH AustraliaCloud infrastructure and hostingAU
Amazon Web Services (SES)Transactional and marketing email deliveryUSA
Google LLC – API ServicesIn-app SEO insights that rely on Google data you connect (strictly limited use per Section 6)Global (incl. USA)
Google LLC – Analytics toolsTraffic analytics on public marketing pages onlyGlobal (incl. USA)
Retention.comEmail retargeting on public marketing pages only (no access to connected Google data)USA
Moz or similar SEO data providersEnriching audit results with external SEO metricsUSA
Professional advisersAccounting, legal, and business advisory servicesAU
Government, regulators, or law enforcementCompliance with laws, court orders, or regulatory obligationsAs required

We do not sell or “share” personal information (including Google user data) under CCPA/CPRA definitions, nor do we use that data to train general-purpose AI or ML models. If SEO ANALYSER undergoes a merger or acquisition, personal information may be transferred subject to confidentiality and this Policy (or an equally protective policy).

9. International transfers

We may transfer personal information outside Australia, the EU/EEA, or the UK (including to the United States). Where we do, we rely on APP-compliant steps, Standard Contractual Clauses, or comparable safeguards to ensure recipients protect data consistently with this Policy and applicable law.

10. Cookies & online advertising

We use cookies and similar technologies for essential operations, analytics, and limited marketing on public pages. Managing cookies via your browser may impact functionality.

Cookie typePurposeTypical lifespan
EssentialLogin sessions, security, load balancingSession / up to 24 hours
Audit-limitEnforcing free audit quotas per domainUp to 24 hours
AnalyticsTraffic and usage analysis (e.g., GA4, GSC)Up to 2 years
RetargetingTargeted ads on public marketing pages only (e.g., Retention.com)Up to 1 year

Retargeting operates only on public marketing pages and is never combined with Google user data obtained through OAuth connections.

Google user data is never used for targeted or personalised advertising.

11. Data retention & deletion

We retain personal information only as long as needed for the purposes outlined above or as required by law:

Data setRetention
Free-tier audit data3 days
Pro Plan / paid audit dataLife of account + 90 days after cancellation
Google user data (API data)Stored while the integration remains connected, then deleted or de-identified within a reasonable period after disconnection (subject to legal/backups)
Payment and billing records7 years (tax and accounting purposes)
Support logsUp to 5 years
Backup archivesRolling 30–90 days, then overwritten

We honour earlier deletion requests when feasible and not in conflict with legal, accounting, or security obligations.

12. Security

We implement technical and organisational measures to protect personal information, including TLS 1.3, AES-256 encryption (where appropriate), role-based access, MFA for administrative access, infrastructure monitoring, regular security testing, incident response procedures, and ongoing employee training. No method is completely secure, but we work to minimise risks to a commercially reasonable level.

13. Your rights

13.1 Australia (APPs)

Request access to or correction of personal information we hold. We respond within a reasonable time and may require identity verification.

13.2 EEA and UK (GDPR/UK GDPR)

Rights may include access, rectification, erasure, restriction, portability, objection, and withdrawing consent. You may also lodge a complaint with your supervisory authority.

13.3 California and certain US states (CCPA/CPRA and similar laws)

Request to know, delete, or correct personal information, and opt out of “sale” or “sharing” (SEO ANALYSER does not sell/share data as defined under CCPA/CPRA). No discrimination for exercising these rights.

13.4 Nevada

You may opt out of the sale of certain personal information; we do not sell data as defined by Nevada law.

13.5 Exercising your rights

Email [email protected] specifying the right you wish to exercise, providing enough information to verify your identity and request. We respond within legally required timelines (typically 30 days in Australia and one month under GDPR/UK GDPR).

14. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect personal information from minors, and we will delete any such data if discovered.

If you believe a minor’s data has been collected, contact [email protected] immediately.

15. Complaints

Email [email protected] with full details of your concern. We investigate and respond within a reasonable time. If you are unsatisfied, you may escalate to the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.

16. Changes to this Policy

We may update this Privacy Policy periodically. Material changes trigger an updated “Last updated” date and additional notice where required (email or in-app). Where required by law, we will obtain consent before applying material changes.

17. Contact

To request access to, review, update, or delete your personal data—or to ask questions about this Policy—contact us at:

[email protected]