This policy explains what information SEOAST collects, why, who receives it, how long it is kept, and the choices you have. SEOAST (seoast.ai, including its website, API and MCP server) is operated by AI Venture Holdings LLC ("AIVH", "we", "us").
Questions or requests: privacy@aiventureholdings.com.
The short version
- You can run audits without an account. For anonymous audits we do not store your name, email or network address. We store a one-way hash of your network address so we can enforce the daily limit.
- When we fetch a page for an audit, we analyze it in memory and do not keep its content.
- We collect contact details only when you give them to us: the contact form, an API key request, a paid plan, or a request to have a report emailed or texted to you.
- We use Google Analytics to understand how the site is used. We do not use advertising cookies, and we do not sell or share your personal information for advertising.
- You can ask us to see, correct or delete your information at any time.
What we collect and why
Audits you run
When you run a page audit, a full-site scan or a local-business audit, we fetch the pages you point us to and analyze them in memory. We do not store the content of those pages.
We store: - the result of each check and the score, so the next report can show what changed; - for audits without an API key, a one-way hash (SHA-256) of your network address instead of the address itself, and the audited URL only as a hash; - for audits with an API key, the audit linked to your key, with the audited URL in readable form so you can see your own history; - a count of requests per day, per key or per hashed address, to enforce usage limits.
Your browser also keeps your 20 most recent reports in its own local storage so you can reopen them. That copy stays on your device; you can clear it by clearing your browser's site data.
Shared reports. When you share a report, anyone with the link can open it. Share a link only with people you want to see the report.
Information you give us
- Contact form and API key requests: your email address, the topic, and, if you provide them, your name, company and message. We use this to reply to you and to issue and manage API keys.
- Report delivery: if you ask us to email you a report, your email address. If you also give us a mobile number and check the box agreeing to texts, your number, the time you agreed, and the wording you agreed to. We use these to send you the report and related messages about your audits. Message and data rates may apply. Reply STOP to any text to stop texts, or use the unsubscribe link in any email.
- Monitoring and alerts: the sites you monitor and the email address you want alerts sent to.
- Paid plans: your name, email address and billing details. Payments are processed by Stripe. We do not receive or store your full card number; Stripe gives us a customer identifier, the plan, payment status and, typically, the card brand and last four digits.
Information collected automatically
- Analytics. We use Google Analytics 4 to measure visits and how pages are used. It sets cookies in your browser. In the European Economic Area, the United Kingdom and Switzerland, analytics stays off unless you agree to it. We have turned off Google's advertising features: we do not use advertising cookies, remarketing or ad personalization.
- Rate limiting and security. We record a one-way hash of your network address to enforce daily limits and to prevent abuse. Contact-form submissions are limited per hashed address in the same way.
- Server logs. Our hosting provider records standard request information, such as your network address, browser type and the page requested, to operate and secure the service. Our own application logs do not record email addresses, network addresses or page content.
- Feedback button. The feedback button on our pages is provided by BugLoop, another AIVH product. If you send feedback, BugLoop receives what you write and technical details of the page you were on, so we can find and fix the problem.
The monitoring snippet
If you install the SEOAST monitoring snippet on your own website, it sends us technical information about your pages: page address, title and description presence, structured data types, rendering mode, page-speed measurements, structural changes and JavaScript error messages. It is not designed to collect information about your visitors, and we do not use it to identify them. You are responsible for describing the snippet in your own site's privacy notice where your law requires it. For data the snippet sends, we act as your service provider (processor) and use it only to provide monitoring to you.
What we do not do
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
Legal bases (EEA, UK and Switzerland)
We rely on: - performance of a contract, or steps you ask us to take before one: running audits, issuing API keys, providing paid plans and delivering reports; - legitimate interests: rate limiting, security, preventing abuse and improving the service, balanced against your rights; - consent: analytics cookies, and text messages and marketing emails, which you can withdraw at any time; - legal obligation: keeping records required by tax and accounting law.
Who receives your information
We share information only with service providers that process it for us under contract:
| Provider | Purpose |
|---|---|
| Vercel | Hosting and server logs |
| Supabase | Database |
| Stripe | Payments and billing |
| Resend | Sending email |
| Twilio | Sending text messages, when you agree to texts |
| Website analytics | |
| BugLoop (AIVH) | Feedback you choose to send |
We may also disclose information if the law requires it, to protect the rights, property or safety of our users, the public or AIVH, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to information transferred.
How long we keep it
| Information | Kept for |
|---|---|
| Anonymous audit results (linked to a hashed address) | 30 days |
| Audit history linked to an API key | 400 days, or until the key is deleted |
| Daily usage counts | 90 days |
| Contact-form and API key requests | 24 months after our last exchange |
| Report-delivery email and phone | Until you unsubscribe or ask us to delete them, or 24 months without activity |
| Monitoring settings and alert history | While the monitor is active, then 90 days |
| Billing records | As long as tax and accounting law requires, generally 7 years |
Your rights and choices
Wherever you live, you can ask us to: - tell you what personal information we hold about you and give you a copy; - correct it; - delete it; - stop using it for a particular purpose, or withdraw a consent you gave.
Email privacy@aiventureholdings.com. We may need to confirm your identity before acting, and we answer within 30 days (45 days where California law allows). You may use an authorized agent; we may ask for proof of their authority. We will not treat you differently for exercising these rights.
If you are in the EEA, the UK or Switzerland, you can also object to processing based on legitimate interests, ask us to restrict processing, receive your data in a portable format, and complain to your local data protection authority.
Opting out: use the unsubscribe link in any email, reply STOP to any text, decline analytics cookies where we ask, or use your browser's settings to block or delete cookies. We honor the Global Privacy Control signal as a request to opt out of any sale or sharing; since we do neither, there is nothing further to switch off.
Security
We encrypt data in transit, store API keys only as one-way hashes, store network addresses only as one-way hashes for anonymous use, and limit access to production data to the people who need it. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.
International transfers
SEOAST is operated from the United States, and our providers process information in the United States and other countries. Where we transfer personal information from the EEA, the UK or Switzerland, we rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses and the UK addendum.
Children
SEOAST is a tool for people who run websites. It is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
We will post any change on this page and update the effective date. If a change materially affects how we use information we already hold, we will tell you by email (if we have your address) or with a notice on the site before it takes effect.
Contact
AI Venture Holdings LLC Email: privacy@aiventureholdings.com