OWLSEO legal information
Privacy Policy
How OWLSEO collects, uses, shares and protects personal information across the website, free scan, checkout, WordPress plugin and customer support.
1. Controller and scope
The controller is the person or legal entity operating the OWLSEO service under the OWLSEO brand (“OWLSEO”, “we”, “us”), at Bikurim 50, Haifa, Israel. Contact: support@owlseo.ai.
This Policy applies to owlseo.ai, the free SEO + GEO scan, checkout, customer accounts, the OWLSEO WordPress plugin, generated content, support and related communications. When a business customer submits personal information contained in its own website or content and determines why it is processed, that customer may be the controller and OWLSEO may act as its service provider or processor.
Providing account, contact and payment-token information is necessary to create an account, start a trial or deliver a paid service. Other fields, such as marketing preferences or optional profile details, are voluntary. If required information is not provided, we may be unable to provide the requested feature.
2. Personal information we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, business name, email, phone, country and support communications. | You, your organization or a referring business. |
| Account and subscription | Plan, billing cycle, trial and subscription status, activation token, connected site and account events. | You, OWLSEO systems and the CRM. |
| Payment-related | Payment provider, customer/token identifiers, transaction status, card brand, last four digits and expiry. We do not receive or store the complete card number or security code. | PayPlus or PayPal. |
| Website and content | Website URL, public pages, WordPress connection details, prompts, keywords, business profile, drafts, images, publishing settings and generated output. | You, your connected website and publicly available webpages. |
| Scan and competitive research | Public page text and metadata, inferred business category and location, competitor domains, scan scores, findings and recommendations. | Public websites, search results and our analysis systems. |
| Device and usage | IP address, coarse country derived from network headers, browser/device information, timestamps, referring page, clicks, diagnostics, security and rate-limit logs. | Your browser, device, Vercel and analytics tools. |
| Cookies and marketing | Consent choices, cookie identifiers, campaign and conversion events. Meta and analytics technologies load only for the consent categories you allow. | Cookiebot, Google tools and Meta Pixel. |
We do not intentionally request special-category or highly sensitive information. Please do not place medical records, government identifiers, payment-card details, passwords or information about children in prompts, drafts or support requests.
3. Why we process information
| Purpose | Typical legal basis where GDPR/UK GDPR applies |
|---|---|
| Provide accounts, scans, subscriptions, plugin functions, generation, publishing and support. | Performance of a contract; steps requested before a contract. |
| Process trial enrollment, recurring payments, invoices, refunds and accounting records. | Contract; legal obligations. |
| Secure the Service, prevent fraud and abuse, enforce limits and diagnose errors. | Legitimate interests in security and service integrity; legal obligations. |
| Improve product quality, reliability and user experience using appropriately limited service data. | Legitimate interests, balanced against user rights; consent where required. |
| Measure traffic, conversions and advertising effectiveness. | Consent for non-essential cookies and related processing. |
| Send newsletters and promotional messages. | Consent or another basis allowed by applicable direct-marketing law. You can unsubscribe at any time. |
| Comply with law, court orders, tax duties and valid rights requests. | Legal obligation; establishment or defence of legal claims. |
We do not use scan scores or content recommendations to make decisions that produce legal or similarly significant effects about individuals. Automated systems generate suggestions, but customers decide what to use and publish.
4. Service providers and disclosures
We disclose information only as reasonably needed for the purposes above, under contractual, confidentiality and security commitments where appropriate. Current recipient categories include:
- Hosting and delivery: Vercel and infrastructure/database providers that host the website, API and scan records.
- Payments: PayPlus and, where offered, PayPal for payment tokenization, subscription management and transaction processing.
- AI processing: OpenAI and other enabled generation providers to analyze supplied/public website content and produce text, images or recommendations.
- Customer operations: OWLSEO’s CRM and support systems for account activation, subscription status and assistance.
- Consent and analytics: Cookiebot; Google Tag Manager and analytics tools for consented statistics; Meta Pixel for consented marketing measurement.
- Embedded media: YouTube when you consent to marketing cookies and choose to load embedded video content.
- Professional and legal: accountants, advisers, insurers, auditors, authorities or courts where reasonably necessary or legally required.
- Corporate events: a buyer, investor or successor in a merger, financing, reorganization or sale, subject to appropriate confidentiality and continued protection.
We do not sell personal information for money. Where applicable law treats disclosures for cross-context advertising as “sharing”, you may reject or withdraw marketing-cookie consent through Cookiebot. We do not disclose Customer Content for third parties’ independent direct marketing.
5. International transfers
OWLSEO operates from Israel and uses providers that may process information in Israel, the United States, Europe and other countries. Where required, transfers are supported by an adequacy decision, standard contractual clauses, contractual commitments or another lawful mechanism. Israel has its own rules governing transfers from Israeli databases and information received from the European Economic Area.
6. Retention
We keep information only for as long as reasonably needed for the stated purpose, security, dispute resolution and legal obligations. Typical criteria include:
- account, subscription and Customer Content: while the account is active and for a reasonable period after closure to support recovery, disputes and legal obligations;
- payment and accounting records: for the period required by tax, bookkeeping, anti-fraud and payment laws, which may be several years;
- free-scan records and entered email: while needed to provide, secure and improve the scan and follow-up funnel; completed scan results may be reused as a cache for up to seven days, but operational records can remain longer;
- security and diagnostic logs: for a limited period proportionate to troubleshooting, fraud prevention and system security;
- marketing data: until consent is withdrawn, the address is unsubscribed, or it is no longer needed.
We may retain a minimal suppression record to respect an unsubscribe or preserve evidence of a rights request. Aggregated or de-identified information may be retained where it can no longer reasonably identify an individual.
7. Your privacy rights
Depending on your location and the law that applies, you may request access to personal information, correction of inaccurate information, deletion, restriction, objection, portability, withdrawal of consent, or information about recipients and safeguards. Israeli law provides rights including inspection and correction of personal information in applicable databases. EEA and UK residents may also complain to their local supervisory authority.
California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive information and receive equal service if the California Consumer Privacy Act applies to OWLSEO and the request. OWLSEO does not currently claim that every CCPA threshold is met; we will honor rights required by applicable law.
Email a privacy request
Withdrawing consent does not affect processing already lawfully performed. Some information cannot be deleted immediately where retention is required for billing, fraud prevention, legal claims or another lawful reason.
8. Security
We use risk-appropriate technical and organizational safeguards, including encrypted transport, access controls, secret management, payment tokenization, logging and service-provider controls. No online service is completely secure. Notify us immediately if you suspect unauthorized account or website access.
9. Children
OWLSEO is not directed to children and users must be at least 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information so we can investigate and delete it where appropriate.
10. Third-party sites and customer websites
Links, WordPress sites, search engines, payment pages and third-party integrations have their own practices. This Policy does not control independent third parties. A customer that publishes content or collects visitor data on its own website is responsible for its own notices, permissions and legal compliance.
11. Cookies and similar technologies
Cookiebot stores consent choices and controls non-essential statistics and marketing technologies. For categories, providers, purposes and current lifetimes, see our Cookie Policy and the live declaration below. Rejecting non-essential cookies does not block core site access, though optional analytics, advertising and embedded-video functions may be unavailable.
12. Updates and contact
We may update this Policy when the Service, vendors or law changes. The date above identifies the current version. Material changes will be communicated by an appropriate notice and, where required, renewed consent. Changes do not retroactively make an unlawful use lawful.
Privacy questions or requests: support@owlseo.ai
Phone: +972-54-9792063
Postal address: Bikurim 50, Haifa, Israel.