Privacy Policy

Welcome to SEO Ladders ("we", "our", "us"). SEO Ladders is an AI-powered SEO toolkit built for founders who ship their own content — Keyword Research, Competitor Gap, Rank Tracker, Article Writer, Article Optimizer, Content Refresh, SEO Agent, and AutoBlog (scheduled publishing). The same capabilities are available through a REST API, an MCP server (Claude Code, Cursor, Windsurf, Codex), and HMAC-signed webhooks. This Privacy Policy explains how we collect, use, and protect your personal information when you use the platform, website, developer interfaces, and related services.

We collect information to operate and improve our service. This includes:

• Account details (name, email)
• Workspace settings you configure (target site URL, domain rating, brand voice profile, target audiences, locale)
• Saved keywords, competitor lists, rank-tracking history
• Articles you generate or edit (drafts, published versions, revisions)
• Site-audit and optimization reports tied to your workspace
• API keys you create (stored hashed — we never retain the plaintext after creation)
• Webhook signing secrets and delivery logs (status, response codes)
• Connected-platform credentials (WordPress site URL, application password)
• Usage information (which tools you use, surface-level quota counters)
• Payment information (processed by Polar — we never store card numbers)

We use your data to deliver the toolkit, run the AI pipelines you trigger, and meter your subscription:

• To run keyword research, competitor gap, and rank tracking against live SERP data
• To generate articles, images, schema, FAQs, and citations on your behalf — using your brand voice and domain rating
• To deliver SEO Agent audits, Article Optimizer scores, and Content Refresh detections
• To publish articles to your connected CMS (WordPress) or webhook destinations
• To deliver signed webhook events when articles, batches, optimizations, or refreshes complete
• To meter usage against your plan quotas and surface usage in your dashboard
• To process payments and manage your subscription via Polar
• To communicate updates, security notices, and support replies

We share data with service providers strictly to deliver the features you use:

• Supabase / cloud hosting — application data and storage
• DataForSEO — keyword volume, KD, SERP results, rank tracking
• Anthropic & OpenAI — article generation, optimization analysis, AI editing
• Image generation providers — AI illustrations for your articles
• Polar — subscription billing and payment processing
• Resend — transactional email (magic links, status notifications)
• WordPress sites you connect — to publish drafts and final articles
• Webhook URLs you configure — to deliver event notifications you've subscribed to

We retain your personal data while your account is active. After cancellation:

• Workspace data (articles, keywords, audits) is retained for 90 days, then permanently deleted unless you reactivate
• Webhook delivery logs are retained for 30 days for debugging and audit
• Anonymized usage metrics may be retained longer for service-level analytics
• Billing records are retained as required by financial reporting regulations

You may request immediate deletion of your data at any time by contacting us — see Contact Us below.

We use industry-standard encryption, access controls, and security measures to protect your data:

• Data in transit: TLS 1.2+ on all endpoints
• API keys: stored as one-way hashes — the original is shown once at creation
• Webhook signing secrets: rotatable on demand via API or dashboard
• Webhook payloads: signed with HMAC-SHA256 over the raw body
• Auth: passwordless (magic-link) with short-lived tokens
• Database: managed Postgres with row-level security policies

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to reasonable industry practice.

Depending on your location, you may have the following rights:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

SEO Ladders integrates with the following third parties to deliver the toolkit. When you use these features, the respective provider's privacy policy applies to data shared with them:

• WordPress sites you connect — you provide the URL and application password; we use them only to publish articles you trigger
• Webhook URLs you configure — we send signed payloads to the destinations you specify
• DataForSEO — keyword and SERP queries you initiate are sent to their API
• Anthropic & OpenAI — article generation and editing prompts are sent to their APIs
• Polar — payment events and subscription state
• Resend — transactional email delivery

We do not authorize any of these providers to use your content for their own product training.

Your content stays yours. Specifically:

• We do not train AI models on your articles, keywords, audits, or workspace data
• We do not allow our AI providers (Anthropic, OpenAI, image gen) to retain your prompts or outputs for training — these calls run with training opt-out where supported
• Aggregated, anonymized statistics (e.g., 'X articles generated this month' across all users) may be used for product analytics
• Generated articles, images, and analyses belong to you — see the Terms of Service for content ownership

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Continued use of the service after updates means acceptance of the revised policy.

For privacy concerns or questions, please contact us at: