Data Protection Agreement & Privacy Policy • Version 4.2

Privacy by design.
GDPR, UK-GDPR & CCPA compliant.

Effective Date: October 21, 2026 • Applies to all Seospace AI workspaces, public SEO & DNS tools, API endpoints, and embeddable agency widgets.

Terms of Service
Zero Model Training

Seospace Neural Engine v4.2 never trains foundation models on private drafts, client URLs, or captured leads.

Tenant RLS Isolation

Every workspace, white-label config, and lead list is isolated via PostgreSQL Row-Level Security policies.

Public DOM Telemetry Only

Our scanner only inspects publicly reachable HTTP headers, HTML metadata, and public DNS records.

1-Click Data Erasure

Export your saved audits and leads as JSON/CSV or request complete workspace deletion anytime.

1. Executive Privacy Summary

Seospace AI Inc. (“Seospace AI”, “we”, “our”, or “us”) provides an autonomous Technical SEO, Conversion Rate Optimization (CRO), Generative Engine Optimization (GEO), WCAG 2.2 accessibility, and live DNS security auditing platform for digital agencies, SaaS founders, and marketing teams. This Privacy Policy & Data Processing Agreement (DPA) explains how we collect, process, store, and protect information across https://seospace-kappa.vercel.app and all associated APIs.

Core Commitment: We never sell, rent, or broker personal data, audited client domain lists, white-label PDF reports, or leads captured through embeddable agency widgets to any third-party data broker or advertiser.

2. Information & Telemetry We Collect

We collect only the minimum data necessary to operate your workspace, persist saved URL audits and AI articles, and process subscriptions:

  • ✓Workspace Account Credentials: Full name, work email address, agency name, role tier, and salted/hashed authentication credentials when you sign up or sign in.
  • ✓Agency White-Label Configuration: Custom agency display name, logo URL, primary brand hex color, and booking CTA URL configured for branded PDF exports.
  • ✓Widget Lead-Capture Submissions: When a visitor submits your embeddable /widget form, we store their submitted name, work email, target URL, and calculated audit score inside your private Lead CRM table.
  • ✓Stripe Billing Metadata: Subscription tier (Starter, Professional Growth, Agency White-Label), Stripe Customer ID, and billing status. Full payment card numbers are processed exclusively by Stripe and never touch Seospace servers.

3. URL Scanner, RapidAPI & Cloudflare DNS Data

When you initiate a website audit on the homepage, dashboard, or via POST /api/audit:

RapidAPI & Direct HTML Inspection

Our scanner fetches publicly accessible HTML headers, title, meta, OpenGraph tags, heading tags (H1–H3), and public crawler files (/robots.txt, /sitemap.xml, /llms.txt). We do not scrape behind authentication walls.

Cloudflare 1.1.1.1 DNS-over-HTTPS

We query Cloudflare DNS-over-HTTPS to inspect publicly published A, AAAA, MX, SPF TXT, DMARC TXT, and NS records to evaluate deliverability and domain spoofing protections.

Enterprise AI Privacy Guarantee

4. Seospace Neural Engine v4.2 Zero-Training Policy

All automated SEO copywriting recommendations, before/after tag rewrites, keyword intent discovery, and long-form articles are generated by the Seospace Neural Engine v4.2. Prompts and workspace content are processed via stateless API calls with zero data retention by model providers and are never used to train or fine-tune foundation models. You retain 100% commercial ownership and copyright over all articles and reports generated in your workspace.

5. Authorized Subprocessors & Infrastructure

To deliver sub-15ms cached audit lookups and global edge availability, Seospace AI engages the following vetted infrastructure subprocessors:

SubprocessorPurposeRegionCompliance
Supabase (PostgreSQL + RLS)Encrypted relational storage for saved URL audits, AI articles & multi-tenant workspacesUnited States (AWS us-east-1)SOC2 Type II, HIPAA & GDPR DPA
Stripe, Inc.Subscription billing, checkout sessions, customer portal & invoice processingUnited States / Global EdgePCI-DSS Level 1 Certified
Vercel Inc.Edge serverless application hosting, TLS termination & global CDN deliveryGlobal Edge Network (US Primary)SOC2 Type II & ISO 27001
RapidAPI (url-to-metadata)On-demand extraction of public webpage OpenGraph, title & meta tags during URL scansUnited StatesTLS 1.3 Encrypted Transit
Cloudflare 1.1.1.1 DoHPublic DNS-over-HTTPS resolution for A, AAAA, MX, SPF & DMARC verificationGlobal Anycast NetworkSOC2 Type II & ISO 27001
Seospace Neural Engine v4.2Zero-retention inference for SEO copywriting diffs, keyword clustering & article generationUnited StatesZero Model Training on Customer Data

6. Saved-First Database Retention & Deletion

Audited URLs and generated SEO articles are persisted in our saved-first database so your team can revisit historical reports, track domain score improvements over time, and share public report links without re-running crawls. You may overwrite any cached snapshot with fresh live scans or request permanent deletion of any record at any time.

7. GDPR, UK-GDPR & CCPA Data Subject Rights

Regardless of your geographic location, we extend full GDPR and CCPA/CPRA rights to all users:

Right of Access & Portability (Art. 15 & 20)

Export all saved audits, AI articles, and CRM leads in machine-readable JSON or CSV format directly from your Dashboard.

Right to Erasure / Forgotten (Art. 17)

Request permanent deletion of your profile, agency branding, and associated audit snapshots within 72 hours.

Right to Rectification (Art. 16)

Update workspace details, refresh stale domain metadata snapshots, or edit published AI articles at any time.

Right to Opt-Out of Sale (CCPA)

Seospace AI does not sell personal information or share cross-context behavioral advertising data.

8. Cookies, LocalStorage & Session Tokens

Seospace AI uses strictly necessary browser storage keys (seospace_theme_mode for Light/Dark theme persistence, seospace_auth_session_v1 for workspace authentication, and seospace_saved_audits_v2 for instant client-side cache hydration). We do not load third-party ad tracking pixels.

9. Data Protection Officer (DPO) & Contact

For privacy inquiries, custom Enterprise Data Processing Agreements (DPAs), SOC2 questionnaires, or GDPR/CCPA erasure requests, contact our Data Protection & Trust office:

Seospace AI — Privacy & Trust Office
Email: privacy@seospace.ai • SLA: < 24 Business Hours
Contact Privacy Team