Privacy
Last updated: May 2026 · This page is a working draft awaiting legal review.
What we collect
We collect the information you provide when you sign up (name, email), the workspaces and content you create inside the product, and provider API credentials you choose to connect. Connected provider keys are encrypted at rest with AES-256-GCM; the encryption key derives from a deployment secret your data is never shared with another tenant.
What we don't collect
We don't sell your data, we don't resell traffic to third-party data brokers, and we don't mine your content to train external models. Anthropic / OpenAI / Otterly / DataForSEO / Semrush / Ahrefs / Moz / Meta credentials you bring stay in your workspace; their usage is billed to you, not us.
How we use it
Account-level data (name, email) authenticates you and addresses you in transactional email. Workspace data (briefs, campaigns, snapshots) renders the dashboards you see. Audit logs record who did what for compliance and incident response.
Data retention
Workspace data is retained for the lifetime of your workspace. Deleting a workspace permanently removes its content (cascade across ~14 collections) within seconds; audit logs persist until then so the deletion event itself is captured. Backups roll off after 30 days.
Contact
For data requests (export, deletion, correction), email privacy@cseo.app. We respond within 30 days.