Privacy Policy

Last updated: April 20, 2026

1. Who we are

SEOGraphy (“we”, “us”, or “our”) is a software product operated by Apptimistic. This Privacy Policy explains how we handle information collected through seography.io, app.seography.io, and any related services.

2. Information we collect

We collect only what's needed to operate the service:

• Account info: email address and (for social sign-in) name and profile image from your OAuth provider.
• Content you create: blog ideas, article drafts, images, and publishing history.
• Integrations: WordPress site URLs, usernames, and application passwords. App passwords are encrypted with AES-256 at rest - we never store them in plain text.
• Billing: subscription status and Stripe customer IDs. Payment card details are handled by Stripe - we never see or store them.
• Usage data: article counts, feature usage, and basic analytics (page views, referrer, user agent) for product improvement.
• Waitlist: email, signup source, IP, and user agent when you opt into our pre-launch waitlist.

3. How we use your data

• Provide, maintain, and improve the service.
• Generate articles and images at your request via AI providers.
• Publish content to the platforms you've connected.
• Send transactional email (verification, password reset, billing).
• Detect and prevent abuse, fraud, and security incidents.
• Comply with legal obligations.

We do not use your content to train third-party AI models, and we do not sell your data to anyone.

4. Third-party processors

We rely on a small set of vendors to operate the service. Each is bound by its own privacy terms:

• Supabase - database and authentication hosting.
• Vercel - application hosting and edge delivery.
• Anthropic - AI text generation (Claude).
• fal.ai and OpenAI - AI image generation.
• Stripe - payment processing.
• Resend - transactional email.
• Upstash - rate limiting on our public SEO tool endpoints.

5. Data retention

We retain account and content data for as long as your account is active. When you delete your account, we remove your personal data and content within 30 days, except where we're required to retain limited records for legal, tax, or accounting purposes.

6. Your rights

Depending on your location (GDPR, CCPA, UK GDPR, and similar laws), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Export your data in a portable format.
• Object to or restrict processing.
• Withdraw consent for marketing communications.

To exercise any of these rights, email us from the address on your account at privacy@seography.io.

7. Security

We use industry-standard encryption in transit (TLS) and at rest. WordPress credentials are encrypted with AES-256 using a key that never leaves our server environment. Passwords are hashed with bcrypt. Row-level security policies in our database restrict access to your own data.

8. Cookies

We use essential cookies for authentication and session management. We use a minimal amount of analytics to understand how people use the site. We don't use cross-site ad tracking.

9. Children

SEOGraphy is not directed at children under 13 (or 16 in the EEA), and we don't knowingly collect data from children. If you believe a child has provided us data, contact us and we'll delete it.

10. International transfers

Our infrastructure is primarily based in the United States and the European Union. By using SEOGraphy, you consent to the transfer of your data to these jurisdictions, subject to appropriate safeguards.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email or in-product notice at least 14 days before they take effect.

12. Contact

Questions, requests, or complaints? Email privacy@seography.io. We respond within 7 business days.