Privacy Policy

Last updated: May 2026

Privacy Policy

WP SEO Agent is operated by Now Technology Systems (ABN 95 168 282 914, the trustee for Greenfield Chan Discretionary Trust). In this policy, “we”, “us”, and “our” refer to Now Technology Systems trading as WP SEO Agent.

We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For users located in the European Economic Area (EEA) or United Kingdom, we also comply with the General Data Protection Regulation (GDPR).

This policy explains how we collect, use, store, and protect your personal information when you use the WP SEO Agent platform, plugin, and associated services.

1. Information We Collect

Account Information

  • Full name
  • Email address
  • Website URL
  • Phone number (optional, collected via contact form only)

WordPress Site Data

When you install and activate the WP SEO Agent plugin, we collect the following data from your WordPress site for the purpose of SEO analysis and recommendations:

  • Page titles and URLs
  • Page and post content
  • Meta tags and descriptions
  • Heading structure (H1, H2, H3, etc.)
  • Internal link structure
  • Schema markup detected on pages

Google Search Console Data

If you connect your Google Search Console account via OAuth, we collect:

  • Search queries associated with your site
  • Impressions, clicks, and average positions
  • Page-level performance data

You may disconnect Google Search Console at any time from the plugin Settings page. Disconnecting revokes our access immediately.

Ranking and Competitor Data

  • Keyword position data tracked weekly via Google Search Console and third-party SERP checking
  • Publicly available competitor page content (collected for comparison analysis)
  • Competitor ranking position changes (used for competitor alerts)

AI Interaction Data

  • Chat messages sent to the AI assistant
  • Content generation requests and outputs (blog posts, landing pages, social media posts)
  • Recommendation history and implementation status

Billing Information

Payment processing is handled entirely by Stripe. We do not store, process, or have access to your credit card numbers. We retain only your subscription status, plan type, and billing history references.

Usage Data

  • Plugin feature usage and interaction patterns
  • Login frequency and session duration
  • Recommendations viewed and implemented

Marketing Site Analytics

We use Google Analytics 4 on our marketing website (wpseoagent.com.au) to collect anonymised visitor data including page views, traffic sources, and device information.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: To provide SEO analysis, AI-powered recommendations, content generation, social post generation, ranking tracking, and competitor monitoring
  • Account management: To manage your subscription, process payments, and communicate account-related updates
  • Product improvement: To improve our algorithms, recommendation quality, and user experience
  • Niche Brain development: To build anonymised industry pattern databases that improve recommendations across similar niches (contains no personally identifiable information)
  • Communication: To send SEO reports, recommendation alerts, competitor alerts, product updates, and respond to support enquiries
  • Security: To detect and prevent fraud, abuse, or unauthorised access
  • Legal compliance: To meet our obligations under applicable laws and regulations

3. Legal Basis for Processing

Under Australian Privacy Law

We collect and process personal information where it is reasonably necessary for our business functions and activities (APP 3). We only collect information by lawful and fair means, directly from you or with your consent.

Under GDPR (for EEA/UK users)

We process your data under the following legal bases:

  • Contract performance: Processing necessary to deliver the services you have subscribed to
  • Legitimate interests: Product improvement, security, and analytics where these do not override your rights
  • Consent: Marketing communications and optional data connections (such as Google Search Console OAuth). You may withdraw consent at any time.
  • Legal obligation: Where processing is required to comply with applicable law

4. Third-Party Services and Data Sharing

We use the following third-party services to operate WP SEO Agent. Each service processes data only as necessary for its specific function:

Service Purpose Data Shared Privacy Policy
Stripe Payment processing Name, email, payment details stripe.com/privacy
Google Search Console Ranking data collection via OAuth OAuth token, site URL policies.google.com/privacy
Serper.dev SERP position checking Keywords, target URLs serper.dev/privacy
OpenAI API AI recommendations, content generation, chat Site content excerpts, keywords, prompts openai.com/privacy
Anthropic API AI analysis for complex audits Page content, SERP data, prompts anthropic.com/privacy
Supabase (AWS) Database hosting All account and site data supabase.com/privacy
Google Analytics 4 Marketing site analytics Anonymised visitor data policies.google.com/privacy

AI Data Processing

We use both OpenAI and Anthropic APIs for AI processing. Under our agreements with these providers:

  • Client data sent to the API for processing is not used to train their models
  • Data is not stored beyond the processing request
  • No passwords, payment details, or personally identifiable information is shared with AI providers
  • Only site content excerpts, page titles, URLs, keyword data, and prompts are transmitted

No Sale of Personal Information

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5. Data Storage and Security

Your data is stored in Supabase-hosted databases on Amazon Web Services (AWS) infrastructure. We implement the following security measures:

  • Encryption in transit (TLS/SSL) for all data transfers
  • Encryption at rest for stored data
  • OAuth 2.0 for third-party service connections (Google Search Console)
  • API key authentication for plugin communication
  • Role-based access controls for internal team access
  • Regular security reviews and dependency updates

While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach, in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

6. Data Retention and Deletion

Active Accounts

Your data is retained for the duration of your active subscription. All site data, rankings, recommendations, and AI interaction history remain accessible in your dashboard while your account is active.

Cancelled Accounts

  • Upon cancellation, your data is retained for 12 months to allow for reactivation
  • A 30-day warning email is sent before permanent deletion
  • A 7-day final warning is sent before data is permanently removed
  • After the retention period, all identifiable data is permanently deleted

Immediate Deletion

You may request immediate deletion of all your data at any time by emailing us at info@wpseoagent.com.au. We will process deletion requests within 30 days.

Anonymised Niche Brain Data

Anonymised, aggregated data that has been contributed to our Niche Brain system (industry-level patterns and trends) is not deleted upon account cancellation. This data contains no personally identifiable information and cannot be linked back to any individual account or website.

7. Your Rights

Under the Australian Privacy Act

You have the right to:

  • Access: Request access to the personal information we hold about you (APP 12)
  • Correction: Request correction of inaccurate or outdated information (APP 13)
  • Complaint: Lodge a complaint if you believe we have breached the APPs
  • Anonymity: In some circumstances, interact with us without identifying yourself

Under GDPR (EEA/UK users)

In addition to the rights above, you have the right to:

  • Erasure: Request deletion of your personal data (“right to be forgotten”)
  • Portability: Receive your data in a structured, machine-readable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Withdraw previously given consent at any time
  • Automated decisions: Not be subject to solely automated decision-making that produces legal effects

Exercising Your Rights

Your collected data (rankings, recommendations, content, competitor data) is visible within your WordPress plugin dashboard. To exercise any data rights listed above, including data export, data portability, or account deletion, please contact us at info@wpseoagent.com.au. We will respond to all requests within 30 days.

8. Cookies and Tracking

Our marketing website (wpseoagent.com.au) uses the following cookies:

Essential Cookies

These cookies are necessary for the website to function and cannot be disabled:

  • WordPress session cookies (login state and security)
  • WooCommerce cart and session cookies (checkout functionality)

Analytics Cookies

These cookies help us understand how visitors use our marketing site:

  • _ga – Google Analytics, distinguishes unique users (expires: 2 years)
  • _ga_* – Google Analytics 4, maintains session state (expires: 2 years)
  • _gid – Google Analytics, distinguishes unique users (expires: 24 hours)

Functional Cookies

  • Cookie consent preference (records your cookie choices)

Plugin Data Collection

The WP SEO Agent plugin installed on your WordPress site does not use cookies. It communicates with our API via authenticated server-side requests only.

9. Children’s Privacy

WP SEO Agent is a business-to-business service designed for website owners and professionals. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of Australia, including the United States, where our infrastructure providers (AWS, Stripe, OpenAI, Anthropic) maintain servers. When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Data Processing Agreements with all third-party processors
  • Standard Contractual Clauses (SCCs) where required for GDPR compliance
  • Selection of providers who maintain appropriate certifications (SOC 2, ISO 27001)
  • Compliance with APP 8 (cross-border disclosure of personal information)

By using our service, you acknowledge that your data may be processed in jurisdictions with different privacy laws than your country of residence. We take reasonable steps to ensure your data receives an equivalent level of protection regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes:

  • We will update the “Last updated” date at the top of this policy
  • We will notify active subscribers via email at least 14 days before changes take effect
  • We will post a notice on our website

Continued use of our services after changes take effect constitutes acceptance of the updated policy. If you do not agree with any changes, you may cancel your subscription and request deletion of your data.

12. Contact and Complaints

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

We aim to respond to all privacy-related enquiries within 30 days.

Complaints Process

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

For users in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.