🔐 Privacy at ChimpSEO

Your data. Your control.

We built ChimpSEO to help you automate SEO without making your data feel like a mystery. This policy explains what information the platform processes, our strict Google API limited use adherence, enterprise-grade AES-256 encryption, and your complete control over your connected accounts.

✓ Clear data practices   •   ✓ Zero Data Selling   •   ✓ AES-256 Encryption
🐵
ChimpSEO Privacy Center
Built for transparent SEO automation
Google Data Search Console & GA4 read-only
Zero Sharing Never sold or used for AI training
AES-256 Security OAuth tokens encrypted at rest
User Control Revoke access anytime in 1-click

ChimpSEO Privacy Policy

This policy outlines how ChimpSEO processes information, protects connected services, and adheres to strict user data protection standards.

Last updated: September 2026
01

Overview

ChimpSEO is an AI-powered SEO automation platform. Depending on the features you use, the service processes account details, website project data, generated content, search performance metrics, integration credentials, and workflow activity.

We are committed to operating with complete transparency. We process data strictly to provide the features you explicitly request, protect your account, and deliver high-performance SEO automation.

02

Information We Process

Depending on your account tier and enabled integrations, ChimpSEO may process:

Account informationName, email address, password hash, workspace settings, and subscription tier.
Project informationTarget domains, SEO keywords, topic clusters, content templates, and article drafts.
Search & traffic metricsRead-only Google Search Console (clicks, impressions, queries) and Google Analytics 4 performance data.
Integration credentialsRevocable OAuth tokens and WordPress Application Passwords for publishing workflows.
Workflow logsPublishing history, audit results, scheduled cron automation settings, and error diagnostics.
Billing metadataStripe customer IDs, active plan identifier, and transaction status (we do not store raw credit card numbers).
03

Google API Services & Limited Use Policy

ChimpSEO allows users to connect their Google accounts to streamline SEO performance tracking and keyword opportunity discovery. We request access only to specific, narrow read-only scopes with your explicit consent:

  • Google Search Console (https://www.googleapis.com/auth/webmasters.readonly): Used solely to fetch read-only query statistics, click counts, impressions, CTR, and keyword ranking positions for verified user properties to identify high-impact content opportunities.
  • Google Analytics 4 (https://www.googleapis.com/auth/analytics.readonly): Used solely to fetch read-only organic traffic metrics, active users, session trends, and page engagement data to display ROI and traffic growth inside the user dashboard.
Google API Limited Use Disclosure:
ChimpSEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Important Guarantees Regarding Google Data:

  • No Data Transfer or Sale: We never transfer, sell, license, or provide Google user data to third-party data brokers, advertising networks, or unauthorized third parties.
  • No AI Model Training: Google user data obtained through Google APIs is never used to develop, train, fine-tune, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.
  • Human Review Restriction: Human personnel do not read or inspect your private Google Search Console or Analytics data unless you have given explicit consent for troubleshooting, it is necessary for security investigations, or it is required by applicable law.
04

How Information Is Used

We process your data strictly to execute the features you activate in your workspace:

  • Displaying Search Console query opportunities and GA4 organic traffic trends in your dashboard.
  • Generating AI-assisted SEO drafts, meta descriptions, FAQ schemas, and internal link suggestions.
  • Publishing completed articles and programmatic landing pages to your connected WordPress website.
  • Enabling scheduled Autopilot workflows to draft and publish content at your defined intervals.
  • Managing billing, processing subscriptions, tracking usage limits, and securing user accounts.
05

Data Sharing & Disclosure

We do not sell, rent, trade, or monetize your personal information or connected search data. Data is only transferred in the following limited and necessary operational scenarios:

Subprocessors & HostingSecure server infrastructure (e.g. Hostinger, cloud database hosting) strictly under confidentiality and data protection agreements.
Payment ProcessingStripe handles all payment transactions securely adhering to PCI-DSS Level 1 compliance.
AI ProvidersUser-provided article topics or prompts are processed via official AI APIs to generate requested drafts (Google Search Console private data is never sent to AI models).
CMS PublishingContent is transmitted solely to the user's connected WordPress REST API via their authorized credentials.
06

Data Security & Storage Safeguards

We implement robust technical, physical, and administrative safeguards to protect your personal information and connected credentials:

  • Encryption at Rest: All sensitive OAuth refresh tokens, access tokens, and WordPress Application Passwords are encrypted at rest using industry-standard AES-256 encryption.
  • Encryption in Transit: All data transmitted between your browser, our platform, and external APIs (including Google and Stripe) is encrypted using modern TLS 1.3 / HTTPS protocols.
  • Tenant Isolation: Connected property data and tokens are strictly isolated per user workspace to prevent unauthorized cross-account access.
  • Password Protection: User account passwords are saved using modern one-way cryptographic hashing algorithms (Bcrypt/Argon2) and are never stored in plain text.
07

Retention & Deletion Policy

We retain your data only for as long as your workspace remains active or as needed to provide you with uninterrupted SEO automation services.

Revoking Access & Instant Deletion:

  • Disconnecting from Dashboard: You can disconnect your Google Search Console or Analytics integration at any time from your Project Integrations page. Upon disconnection, stored OAuth tokens are immediately destroyed.
  • Revoking via Google: You can revoke ChimpSEO's access at any time directly through your Google Account Security Permissions page.
  • Account Deletion: When you delete your ChimpSEO account, all account records, encrypted tokens, and cached analytics data are permanently purged from our active database within 48 hours.
08

Connected Third-Party Services

ChimpSEO connects with external services only when you explicitly configure them. These services govern data under their own independent terms:

  • Google Services: Governed by Google's Privacy Policy and Google API Services User Data Policy.
  • WordPress: Uses your WordPress site's native REST API and revocable Application Passwords.
  • Stripe: Manages subscription payments and invoicing.
  • Custom SMTP / IMAP: Used only if you configure an outreach mailbox for backlink discovery.
09

Outreach & Prospect Data

If you utilize backlink prospecting or outreach features, the platform processes public web contact details and email logs configured for your campaigns. Users are solely responsible for ensuring outreach campaigns comply with applicable anti-spam and privacy regulations (such as CAN-SPAM and GDPR).

10

Cookies & Session Management

ChimpSEO uses essential, secure first-party session cookies required for authentication, CSRF security, and maintaining your login session across dashboard pages. We do not use third-party tracking cookies across unrelated websites.

11

Your Privacy Rights & Choices

Regardless of your geographic location, you have the right to access, update, export, or request the deletion of your personal data stored on ChimpSEO. You can exercise these rights directly within your account settings or by submitting a request to our support team.

12

Children's Privacy

ChimpSEO is a professional business platform intended for adult website owners, marketers, and enterprises. We do not knowingly collect personal information from individuals under the age of 18.

13

Contact Us

If you have any questions about this Privacy Policy, our data protection practices, or our Google API integration, please reach out to us:

Email: support@chimpseo.com
Website: chimpseo.com/contact.php

SEO automation should feel powerful — not mysterious.

ChimpSEO gives you automation for content, programmatic pages, audits and publishing while keeping connected services and workflow controls visible to the account owner.

AIContent workflows
SEOAudits & insights
PSEOScale landing pages
APIConnected workflows