Privacy policy

SEO Flock is run by SEO Flock Ltd ("we", "us"). SEO Flock Ltd is registered in England and Wales. Registered office: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE. We are the controller of the personal data described here under UK data protection law. You can reach us at hello@seoflock.com.

This policy covers the SEO Flock website and app. It explains what we collect, why, who else handles it, and the choices you have.

We only collect what we need to run SEO Flock for you.

• Account details: your email address and password. Passwords are handled by our sign-in provider and stored hashed. We never see or store your password in readable form.
• Your sites: the web addresses and names you add, plus the results of our audits of their public pages (page addresses, titles, descriptions, headings, text excerpts, status codes and the issues we find).
• Keywords: the search terms you ask us to track, and where your sites rank for them.
• Google data: if you connect Google, your Google account email address and read-only Search Console data for the properties you link (clicks, impressions, click-through rate, average position, and the searches and pages behind them). See "Google user data" below.
• Waitlist: if you join the waitlist, your email address and the date you joined. We use it only to tell you when SEO Flock has a place for you, and to send one confirmation email. Reply to that email, or write to us, and we will remove you.
• Usage records: how many AI credits you have used and what each AI request was for, so we can apply your plan's limits.
• Technical data: a session cookie that keeps you signed in, and basic server logs (such as IP address and time of request) that our hosting provider keeps for security and fault-finding.

If you accept analytics cookies on our public pages (the home page, pricing, sign-in and policies), Google Analytics also records how you use those pages. See "Cookies" below. We do not run advertising trackers, and we do not use analytics inside the signed-in app.

When you choose Connect Google, SEO Flock asks for these permissions: your email address, and read-only access to Google Search Console (the webmasters.readonly scope). We cannot change anything in your Search Console or Google account.

We use that access for one purpose: to show you how your own sites perform in Google Search, and to base your SEO suggestions on that data. We read the data when you connect, when you sync, and on a daily schedule for sites you have linked.

How we protect it: your Google refresh token is encrypted before it is stored, Search Console data is stored against your account only and is never shown to other customers, and people on our team do not read it unless you ask us to help with a problem, we need to investigate abuse or a security issue, or the law requires it.

SEO Flock's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell Google user data, and we do not use it for advertising.
• We do not use Google user data to train generalised AI or machine-learning models.
• We do not transfer Google user data to anyone except as needed to provide the features you see in SEO Flock (for example, the AI suggestions described below), to keep the service secure, or to comply with the law.

You can disconnect Google at any time from the Google page in SEO Flock. That deletes the stored token and asks Google to revoke it. You can also remove SEO Flock yourself at myaccount.google.com/permissions.

• To provide SEO Flock: audit your sites, show your Search Console results, track rankings and write suggestions (this is our contract with you).
• To keep the service secure and fair: stop abuse, apply plan limits and fix faults (our legitimate interest in running a safe service).
• To contact you about your account, such as sign-in and password emails (our contract with you).
• To meet legal obligations, such as tax records once paid plans exist.

We do not use your data to make decisions that have legal or similarly significant effects on you.

SEO Flock uses Claude, an AI model from Anthropic, to draft page titles, descriptions, structured data and content ideas. To do that we send Anthropic the content it needs for the job: the text and tags of the page in question and, for some features, Search Console figures such as the top searches that bring people to that page.

We send only what each request needs, and Anthropic handles it on our behalf under its commercial API terms, which do not allow your inputs to be used to train its models. AI output can be wrong, so please check it before you use it.

We do not sell your data. We use a small number of service providers who process it for us:

• Supabase: database and sign-in. Our database is hosted in London.
• Anthropic: the AI model that writes suggestions.
• Google: Search Console data, only if you connect it. Google Analytics, only if you accept analytics cookies on our public pages.
• Our hosting provider: runs the website and app.
• Resend: our email delivery service. It sends the waitlist confirmation, sign-in and password-reset emails.
• A payment provider: when paid plans are switched on we will add it here. We will not store card details ourselves.

We may also share data where the law requires it, or to protect our rights or other people's safety.

Some of our providers, including Anthropic and Google, process data in other countries such as the United States. When that happens we rely on safeguards the law recognises, such as the UK's approved international data transfer terms or an adequacy arrangement, so your data stays protected.

We keep your data while your account is open. If you disconnect Google, we delete the stored token straight away. If you delete a site, its audits, keywords and Search Console data go with it.

While your account is open we also trim old data automatically. Only your latest audit keeps its page-by-page detail (earlier audits keep just their score), search and ranking history is kept for about 13 months, finished suggestions for 90 days, and AI usage records for about 3 months.

If you delete your account from the Account page, we delete your account and everything attached to it, including sites, audits, keywords, usage records and Google connection. Copies in our providers' backups can take a little longer to clear. We may keep limited records where the law requires it, such as invoices once paid plans exist.

Every connection to SEO Flock is encrypted in transit. Google tokens are encrypted at rest, access to our database is restricted to our servers, and each account can only see its own sites. No system is perfectly secure, so if we ever find a breach that affects you we will tell you and the regulator as the law requires.

Some cookies are strictly necessary and need no consent: a sign-in cookie that keeps you logged in, a short-lived cookie that protects the Connect Google step, a cookie that remembers your cookie choice, and a setting that remembers your light or dark theme.

On our public pages we would also like to use Google Analytics cookies to understand which pages are useful. We only do this if you click Accept in the cookie banner, which is our lawful basis (your consent). If you decline, no analytics cookies are set and no data is sent to Google Analytics. You can change your mind at any time with "Cookie preferences" in the footer. We do not load analytics inside the signed-in app.

The full list of cookies is in our cookie policy at /cookies.

Under UK data protection law you can ask us to:

• tell you what data we hold about you and give you a copy
• correct anything that is wrong
• delete your data (you can also do this yourself from the Account page)
• restrict or object to how we use it
• give you your data in a portable format

To use any of these, email hello@seoflock.com. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

SEO Flock is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.

We may update this policy as SEO Flock grows. The date at the top shows when it last changed. If a change matters, we will tell you by email or in the app before it takes effect, and we will ask for your consent again if the law requires it, for example before using Google data in a new way.

Questions about privacy or your data? Email hello@seoflock.com.