Privacy policy

HaloSEO is a tool that writes and publishes blog posts to your website. Most of what we hold is about your website rather than about you personally, and this page is specific about which is which.

This service is operated by [legal entity name], [registered business address]. We are the controller of the personal data described here. Questions, requests and complaints go to support@getautopilotseo.com.

What we collect

Information you give us

• Your email address, when you start a trial or create an account. It identifies your account and is how we contact you.
• Your mobile number, if you choose to give us one. See text messages below for what we send and how to stop it.
• Your website address, and the answers you give during onboarding: what your business does, roughly where it operates, who your customers are, and how often you want to publish. These feed the content plan.
• Your publishing settings: how your site is connected, which path your blog lives at, and your schedule.
• Anything you write to support. Emails and messages you send us are kept so we can answer them and refer back to them.

Information we collect from your website

When you connect a site, we fetch its public pages the way any visitor or search engine would, to work out what you sell, how you write and what platform you are on. We do not log into your site, and we do not ask for hosting credentials.

Information collected automatically

• Product analytics. We record which steps of signup and onboarding are reached, so we can see where people get stuck. This uses a random identifier stored in your browser. It is not your name or email, and we do not use it to build a profile of you elsewhere.
• Third-party website analytics. Our marketing pages use a general-purpose analytics service to count visits and see which pages bring people in. It sets its own cookies and receives your IP address and browser details. It is used on our own site, not on the blogs we publish for you.
• Blog post views. Posts we publish for you count their own page views, so you can see which articles are working. We count views, not visitors: no cookie is set on your readers and nothing about them is stored.
• Ordinary server logs kept by our hosting provider, including IP address and browser type, used for security and debugging.

Payment information

Payments are processed by Stripe. We never see or store your card details. What we keep is your subscription status, the plan you are on, your renewal date and the email address attached to the subscription.

Text messages

If you give us a mobile number, we may use it to send you text messages about the service: that your first posts are live, that a connection has broken, that a payment has failed, and occasional messages about features and offers.

• You choose to give it. A mobile number is never required to use HaloSEO, and we do not buy phone numbers or take them from third parties. Where the law requires your written consent before we can text you about offers, we ask for it separately from anything else you are agreeing to, and we keep a record of it.
• Stopping. Reply STOP to any message and we will stop texting that number. Reply HELP for help, or email support@getautopilotseo.com. Opting out of texts does not close your account or stop essential emails about billing and security.
• Frequency and cost. Message frequency varies. We do not charge for messages, but your mobile carrier’s message and data rates may apply. Delivery depends on your carrier and is not guaranteed.
• Who sees the number. Your number is shared with the messaging provider that delivers the message on our behalf, and with your own carrier to deliver it. We do not sell phone numbers, and we do not share them with anyone for their own marketing. Consent to receive texts from us is never shared with third parties.
• What we keep. The number itself, whether you have consented or opted out, and when. We keep an opt-out record after you unsubscribe, because that is the only way to be sure we do not text you again.

Why we are allowed to hold it

We hold your account details, site information and settings because we cannot provide the service without them. We hold payment records because we are required to keep records of what we have sold. We use product analytics on the basis of our legitimate interest in knowing whether our own signup works, and we keep that data minimal for exactly that reason. Where we send marketing messages, we rely on your consent, and you can withdraw it at any time.

Who else processes your data

We do not sell your data, and we do not share it for anybody else’s advertising. Running HaloSEO does mean your data passes through a small number of specialist providers acting on our instructions:

• A hosting and content delivery provider, which serves the site and keeps ordinary server logs.
• A managed database and file storage provider, which holds your account, your site settings, your posts and their images.
• A payment processor, which takes your card details directly from you and tells us only whether your subscription is active. See the payment section above.
• AI model providers, which generate the text for each post. They receive the topic, keywords and business context needed to write that post.
• Email and text messaging providers, which deliver the messages we send you.
• An analytics provider, for the visit counts described above.

Each of them is bound to use your data only to provide their service to us. If you would like to know exactly which companies these are, before signing up or at any time afterwards, email support@getautopilotseo.com and we will tell you.

We may also disclose information if we are legally required to, to establish or defend legal claims, or to protect the security of the service. If the business is ever sold or merged, account data would pass to the buyer under this same policy, and we would tell you before that happened.

Where your data is held

Our providers operate in the United States and elsewhere, so your information may be stored or processed outside the country you live in, including in countries whose data protection laws differ from your own. Where we transfer personal data out of the UK or the European Economic Area, we rely on the European Commission’s standard contractual clauses, or an equivalent approved safeguard, with the provider concerned.

How we protect it

Data is encrypted in transit. Access to production systems is limited to people who need it, protected by individual accounts, and our database enforces row-level rules so one customer’s data cannot be read through another customer’s session. We never ask for, and never store, the password to your own website or hosting.

No service can promise perfect security. If a breach affects your personal data and creates a real risk to you, we will tell you and the relevant regulator without undue delay, and within any deadline the law sets.

How long we keep it

• Account and site data is kept while your account is open, and deleted within 90 days of you closing it.
• Billing and tax records are kept for as long as accounting and tax law requires, typically six to seven years, even after an account closes.
• Support messages are kept for two years.
• Product analytics is kept for 14 months.
• Text-message opt-outs are kept indefinitely, because forgetting an opt-out would mean texting somebody who asked us not to.

Posts already published to your own website are yours and stay on your site; deleting your HaloSEO account does not remove them from your server.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop sending you marketing. Write to support@getautopilotseo.com from the address on your account and we will action it, normally within 30 days. We will not charge you for asking and we will not treat you differently for having asked.

If you are in the UK or the European Economic Area, you also have the right to object to or restrict certain processing, the right to receive your data in a portable form, and the right to complain to your data protection supervisory authority.

If you are in California, you have the right to know what personal information we collect and why, to request deletion or correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by California law, and we do not use it for cross-context behavioural advertising.

Storage in your browser

On our own product pages we use your browser’s local storage rather than tracking cookies: one entry keeps you signed in, one keeps your onboarding answers so you do not lose them on a refresh, and one holds the random analytics identifier described above. Clearing your browser data clears all three. The third-party analytics on our marketing pages sets its own cookies, which you can block in your browser without affecting the product. We do not currently respond to Do Not Track signals, because there is no agreed standard for what a site should do with one.

Automated content

Articles are generated by AI models from the brief you give us. No decision that produces legal or similarly significant effects for you is made automatically: your account, your billing and your access are handled by people.

Children

HaloSEO is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16. If we learn we have, we delete it.

Changes

If we change how we handle data, we will update this page and the date at the top of it. If a change is significant, we will email account holders rather than quietly editing the page.

Contact

Questions about any of this go to support@getautopilotseo.com, or write to [legal entity name], [registered business address].