ChimpSEO Privacy Policy
This policy outlines how ChimpSEO processes information, protects connected services, and adheres to strict user data protection standards.
Overview
ChimpSEO is an AI-powered SEO automation platform. Depending on the features you use, the service processes account details, website project data, generated content, search performance metrics, integration credentials, and workflow activity.
We are committed to operating with complete transparency. We process data strictly to provide the features you explicitly request, protect your account, and deliver high-performance SEO automation.
Information We Process
Depending on your account tier and enabled integrations, ChimpSEO may process:
Google API Services & Limited Use Policy
ChimpSEO allows users to connect their Google accounts to streamline SEO performance tracking and keyword opportunity discovery. We request access only to specific, narrow read-only scopes with your explicit consent:
-
Google Search Console (
https://www.googleapis.com/auth/webmasters.readonly): Used solely to fetch read-only query statistics, click counts, impressions, CTR, and keyword ranking positions for verified user properties to identify high-impact content opportunities. -
Google Analytics 4 (
https://www.googleapis.com/auth/analytics.readonly): Used solely to fetch read-only organic traffic metrics, active users, session trends, and page engagement data to display ROI and traffic growth inside the user dashboard.
ChimpSEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Important Guarantees Regarding Google Data:
- No Data Transfer or Sale: We never transfer, sell, license, or provide Google user data to third-party data brokers, advertising networks, or unauthorized third parties.
- No AI Model Training: Google user data obtained through Google APIs is never used to develop, train, fine-tune, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.
- Human Review Restriction: Human personnel do not read or inspect your private Google Search Console or Analytics data unless you have given explicit consent for troubleshooting, it is necessary for security investigations, or it is required by applicable law.
How Information Is Used
We process your data strictly to execute the features you activate in your workspace:
- Displaying Search Console query opportunities and GA4 organic traffic trends in your dashboard.
- Generating AI-assisted SEO drafts, meta descriptions, FAQ schemas, and internal link suggestions.
- Publishing completed articles and programmatic landing pages to your connected WordPress website.
- Enabling scheduled Autopilot workflows to draft and publish content at your defined intervals.
- Managing billing, processing subscriptions, tracking usage limits, and securing user accounts.
Data Sharing & Disclosure
We do not sell, rent, trade, or monetize your personal information or connected search data. Data is only transferred in the following limited and necessary operational scenarios:
Data Security & Storage Safeguards
We implement robust technical, physical, and administrative safeguards to protect your personal information and connected credentials:
- Encryption at Rest: All sensitive OAuth refresh tokens, access tokens, and WordPress Application Passwords are encrypted at rest using industry-standard AES-256 encryption.
- Encryption in Transit: All data transmitted between your browser, our platform, and external APIs (including Google and Stripe) is encrypted using modern TLS 1.3 / HTTPS protocols.
- Tenant Isolation: Connected property data and tokens are strictly isolated per user workspace to prevent unauthorized cross-account access.
- Password Protection: User account passwords are saved using modern one-way cryptographic hashing algorithms (Bcrypt/Argon2) and are never stored in plain text.
Retention & Deletion Policy
We retain your data only for as long as your workspace remains active or as needed to provide you with uninterrupted SEO automation services.
Revoking Access & Instant Deletion:
- Disconnecting from Dashboard: You can disconnect your Google Search Console or Analytics integration at any time from your Project Integrations page. Upon disconnection, stored OAuth tokens are immediately destroyed.
- Revoking via Google: You can revoke ChimpSEO's access at any time directly through your Google Account Security Permissions page.
- Account Deletion: When you delete your ChimpSEO account, all account records, encrypted tokens, and cached analytics data are permanently purged from our active database within 48 hours.
Connected Third-Party Services
ChimpSEO connects with external services only when you explicitly configure them. These services govern data under their own independent terms:
- Google Services: Governed by Google's Privacy Policy and Google API Services User Data Policy.
- WordPress: Uses your WordPress site's native REST API and revocable Application Passwords.
- Stripe: Manages subscription payments and invoicing.
- Custom SMTP / IMAP: Used only if you configure an outreach mailbox for backlink discovery.
Outreach & Prospect Data
If you utilize backlink prospecting or outreach features, the platform processes public web contact details and email logs configured for your campaigns. Users are solely responsible for ensuring outreach campaigns comply with applicable anti-spam and privacy regulations (such as CAN-SPAM and GDPR).
Cookies & Session Management
ChimpSEO uses essential, secure first-party session cookies required for authentication, CSRF security, and maintaining your login session across dashboard pages. We do not use third-party tracking cookies across unrelated websites.
Your Privacy Rights & Choices
Regardless of your geographic location, you have the right to access, update, export, or request the deletion of your personal data stored on ChimpSEO. You can exercise these rights directly within your account settings or by submitting a request to our support team.
Children's Privacy
ChimpSEO is a professional business platform intended for adult website owners, marketers, and enterprises. We do not knowingly collect personal information from individuals under the age of 18.
Contact Us
If you have any questions about this Privacy Policy, our data protection practices, or our Google API integration, please reach out to us:
Email: support@chimpseo.com
Website: chimpseo.com/contact.php