1. Data controller
[LEGALNAME — PENDIENTE], tax ID [TAXID — PENDIENTE], registered at [ADDRESS — PENDIENTE]. For anything concerning your data, write to hello@shipseo.dev.
2. What data we process
We distinguish between what you give us and what the service produces as it runs:
- Account data: email address, name and profile picture. These come from the provider you sign in with (GitHub, Google or Microsoft); we store no passwords, because you never create one with us.
- Billing data: handled by Stripe. We store only a customer identifier, never a card number.
- Sites you connect: their URLs and the public content of the pages we crawl.
- Your CMS credentials: stored encrypted and used only to apply the fixes you approve.
- Usage data: audits run, fixes applied, and consumption against your plan allowance.
- Technical errors: when something fails we record the error so we can fix it.
3. What we use it for
To provide the service: authenticate you, crawl the sites you declare, generate proposed improvements, and apply them when you authorise it.
To bill you for the plan you contracted and enforce usage limits.
To keep the service running: diagnose errors, prevent abuse, and protect security.
We do not sell your data or hand it to third parties for advertising.
4. Legal basis
We process account, connected-site and billing data because it is necessary to perform the contract you have with us.
We process usage data and error logs under legitimate interest in keeping the service secure and working.
We keep billing records for the periods tax law requires.
5. Who we share it with
Only the providers needed to run the service. Each processes data on our behalf and under contract:
- Clerk — authentication and account identity.
- Neon — database, hosted in the European Union (eu-central-1).
- Hetzner — application servers, in Germany.
- Anthropic — AI models. Receives the content of the pages we analyse and the instructions you give the content generator.
- Stripe — payment processing.
- Sentry — technical error logging.
6. Content sent to the AI
When you request a fix or generate content, we send Anthropic the text of the relevant page and your instructions. We do not send it your CMS credentials or your payment details.
If your pages contain other people’s personal data, be aware it will be sent as part of the page content.
7. How long we keep it
For as long as your account is active. If you close it, we delete the associated data except what we must keep by law, such as billing records.
Your CMS credentials are deleted as soon as you disconnect the integration.
8. Your rights
You can access your data, correct it, delete it, restrict or object to its processing, and request its portability. Write to hello@shipseo.dev and we will respond within the statutory period.
If you believe we have not handled your request properly, you can complain to the data protection authority in your country.
9. Changes
If we change this policy substantially, we will tell you before the change affects you.