Legal

Privacy Policy

Version 2026-10-09

This Privacy Policy explains how AIC services ("we", "us"), based in Egypt, collects, uses and protects personal data when you use SEO OS at https://seo.ai-consultant-service.com (the "Service"). It also applies to our main website, https://ai-consultant-service.com, where it links here.

Effective date: 9 October 2026. Questions: george@ai-consultant-service.com.

1. Who is responsible for your data

AIC services, Egypt, is the controller of the personal data described here. You can reach us at george@ai-consultant-service.com.

When you use the Service for your own website or your clients' websites, you decide what data about those websites goes into it. For data about your own customers or website visitors that you choose to process through the Service, you are the controller and we act on your instructions.

2. What we collect

• Account details: your name, email address and a password (stored only as a one-way hash, never in readable form).
• Your country and time zone: taken once, when your account is first opened, from your device's settings or your internet connection, so that dates and numbers are written your way and scheduled work runs at your hours. Your IP address is not stored for this. You can change both on your account page.
• Project details you enter: website address, business name and type, country and language, audience, tone of voice, competitors, and your notes.
• Website content: pages of your website that the Service reads (crawls), the keywords you import or add, and the articles and page changes the Service writes for you, including the text before and after each change.
• Connections you set up: login details for your WordPress or Shopify site, your AI provider API key, and your Google connection. These are stored encrypted.
• Google data you allow us to read: see section 4.
• Usage records: which features you used and when, such as AI calls, keyword data purchases and plagiarism checks, used to apply your plan's allowances.
• Your acceptance of these documents and your cookie choice: which version you accepted and when. We do not store your IP address with it.
• Technical logs: short-lived server logs used to keep the Service running and secure. Email addresses are not written to them.
• Payment details: when paid plans are billed online, payments are handled by our payment provider; we never see or store your full card number.

3. How we use it, and on what legal basis

• To provide the Service you signed up for: running your projects, writing and publishing content you approve, showing your data (contract).
• To send the emails the Service needs: confirming your address, password resets, telling you your plan is active (contract).
• To keep the Service secure and prevent abuse, such as limiting repeated sign-in attempts and checking that sign-ups come from real people (legitimate interests).
• To apply your plan's limits and to answer questions about what you used (contract and legitimate interests).
• To measure our social media advertising, only if you choose "Accept all" in the cookie banner (consent). See section 8.
• To meet legal obligations, such as keeping payment records where the law requires it (legal obligation).

We do not sell your personal data.

4. Google user data

If you connect Google, the Service asks for read-only access to two things, and nothing else:

• Google Search Console (read-only, scope "webmasters.readonly"): the search queries, clicks, impressions and positions for the website you connect, and whether Google has indexed its pages.
• Google Analytics (read-only, scope "analytics.readonly"): traffic figures for the property you choose.

We use this data only to show you your website's search and traffic performance and to power the Service's features for your website, such as choosing keywords, finding pages worth improving, and grouping keywords into topics. The Service never changes anything in your Google account.

SEO OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

In particular: we do not sell Google user data; we do not use it for advertising, including retargeting or personalised adverts; we do not use it to train or improve general artificial intelligence or machine learning models; and people at our company do not read it unless you ask us to (for support), it is needed for security or to comply with the law, or it has been made anonymous. When a feature needs it, keywords from Search Console may be sent to the AI provider you connected (section 5), only to produce the result you asked for.

You can disconnect Google at any time in the Service, which deletes the stored connection, or remove access at https://myaccount.google.com/permissions.

5. Who we share data with

We use these service providers to run the Service. Each receives only what its task needs:

• Hostinger: hosts our servers and database.
• Backblaze: stores our encrypted database backups (section 6). They are encrypted on our server before they are sent, and Backblaze cannot read them.
• Our email delivery provider: sends the Service's emails.
• OpenAI: writes and analyses content, using the API key you connect; your own OpenAI account terms apply to that use.
• DataForSEO: supplies Google ranking and search volume data; it receives the keywords and the country or language to look up.
• Copyscape: checks new articles for plagiarism; it receives the article text.
• Google: Search Console, Analytics and PageSpeed data (section 4), and page speed checks of your website address.
• Cloudflare: checks that sign-ups come from real people, when that check is switched on.
• Your own WordPress or Shopify site: receives the changes you approve.
• Our payment provider: processes payments for paid plans.
• Social media advertising platforms: only if you choose "Accept all" (section 8).

We may also disclose data if the law requires it, or to protect our rights, our users or the public.

If our business, or the part of it that runs the Service, is sold or merged into another, your data may pass to the new owner, who must keep to this policy. We will tell you before that happens.

Some of these providers are outside Egypt and outside the European Economic Area, including in the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep it

• Your account and project data: for as long as your account exists.
• When you delete your account: your account, projects, content, connections and files are deleted immediately.
• When you delete a project: its data is deleted, including stored search results that no other project of yours uses.
• Text of changes you rejected or undid: cleared 12 months after that day. Published changes keep their text, so undo keeps working.
• Usage records, job logs and stored search results: deleted after 12 months.
• Server logs: 7 days.
• Backups: every night we copy the database, your projects' settings and our own configuration. Copies on our server are kept for 14 days. Encrypted copies are also kept with our backup provider (section 5): one a day for 14 days, then one a week for 8 weeks and one a month for 12 months, after which they are deleted. Data you delete stays in these copies until they expire; we use them only to restore the Service after a failure.

7. Your rights

Depending on where you live (including under the EU and UK GDPR and Egypt's Personal Data Protection Law No. 151 of 2020), you may have the right to:

• access your data: download everything in your account from the Account page ("Download all my data");
• correct it: most of it you can edit yourself in the Service;
• delete it: delete your account from the Account page;
• restrict or object to certain uses, and receive your data in a portable form;
• withdraw consent at any time, for example your cookie choice ("Cookie settings" at the bottom of every page);
• complain to a data protection authority, such as the one in your country.

For anything else, email george@ai-consultant-service.com. We answer within 30 days.

8. Cookies, storage and advertising

The Service uses your browser's storage for what it needs to work: keeping you signed in and remembering a few screen preferences. These are essential and cannot be switched off.

We advertise SEO OS on social media platforms such as Facebook, Instagram, LinkedIn and TikTok. If you choose "Accept all" in the cookie banner, we may use those platforms' measurement tools (for example a "pixel") to see whether our adverts lead to sign-ups. If you choose "Only essential", we do not. You can change your choice at any time with "Cookie settings" at the bottom of every page.

9. Security

We use encrypted connections (HTTPS) everywhere, store passwords only as one-way hashes, encrypt your stored connection details, limit repeated sign-in attempts, and keep secrets out of our logs. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities where the law requires it.

10. Children

The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

11. Changes to this policy

When we change this policy, we update its version date and ask you to accept the new version the next time you use the Service.

12. The contact form on our main website

Our main website, https://ai-consultant-service.com, has a contact form. If you send it, we collect what you enter: your name, company name, website address, email address, WhatsApp number, industry and, if you write one, your message, together with the time you sent it.

We use this only to answer your enquiry, by email or WhatsApp, and to prepare a proposal for you (legitimate interests, and steps you ask us to take before a contract). It is stored in a Google Sheets spreadsheet that only we can open; Google is the provider that stores it.

Enquiries are kept for up to 12 months and then deleted, unless you have become a client. Your rights in section 7 apply to this data too; to use them, email george@ai-consultant-service.com.

13. Visitor statistics on our main website

Our main website uses Google Analytics, loaded through Google Tag Manager, to count visits and see which pages are read (legitimate interests). Unless you choose "Accept all" in the cookie banner, it sets no cookies and does not recognise you from one visit to the next. If you choose "Accept all", it uses cookies to recognise returning visitors (consent). Google is the provider that receives this data.

You can change your choice at any time with "Cookie settings" at the bottom of every page.