Privacy Policy

This page describes how Seocreo collects, uses and protects your personal data when you use seocreo.com and app.seocreo.com.

1. Data controller

The Seocreo service is operated personally by the operator identified in the Legal Notice. For any question regarding your personal data, contact us at support@seocreo.com.

2. Data we collect

• Account — your email, your password (stored in hashed form, never in clear text), optionally your first and last name if you provide them.
• Phone verification — your phone number, used for SMS verification at sign-up and to prevent abusive account creation.
• Billing — your full address, billing email and optional VAT number, collected only if you subscribe to a paid plan or download an invoice.
• Content you create — your ideas, keywords, personas, projects, generated articles, generation history, notes and settings.
• Support interactions — the content of messages exchanged via chat, email or contact form.
• Technical data — your IP address, browser type, operating system, login logs and activity timestamps — collected automatically for security and proper functioning of the service.

3. Why we process them and on what legal basis

• Provide and secure the service — basis: performance of the contract (Art. 6.1.b GDPR)
• Process payments and subscriptions via Whop — performance of the contract
• Provide customer support — contract + legitimate interest
• Prevent fraud, abuse and multi-accounts — legitimate interest (Art. 6.1.f)
• Improve the service through anonymous and aggregated statistics — legitimate interest
• Send transactional emails (welcome, password reset, invoices, alerts) — performance of the contract
• Send marketing communications — only with your consent (Art. 6.1.a), with unsubscribe available at any time
• Comply with our legal obligations — Art. 6.1.c

4. Sub-processors

We entrust the processing of certain data to sub-processors contractually bound to comply with the GDPR:

• Payments and billing — Whop, Inc. (United States), acting as Merchant of Record for payment and tax purposes only. Your payment data, billing address and transactions are processed by Whop in accordance with its policy. We do not store any credit card data.
• Website hosting — cloud provider (United States, with worldwide CDN replication).
• Database and authentication — SaaS PaaS provider, with your data hosted in the European Union region (Belgium).
• Transactional emails — email delivery provider (European Union).
• Phone verification — SMS/OTP provider.
• Chat and customer support — support messaging provider.
• AI processing — third-party language model providers (United States / European Union). Your inputs and generated content are transmitted to these providers only to produce the requested response. Our contractual agreements exclude the use of your data for training their models.

Upon simple request at support@seocreo.com, we provide you the detailed and up-to-date list of our sub-processors.

5. Transfers outside the European Union

Some of your data may be transferred to countries outside the European Union, in particular to the United States (Whop, some language model providers) and to Tunisia. These transfers are governed by Standard Contractual Clauses of the European Commission, adequacy decisions where applicable, or your explicit consent when required.

6. How long we keep your data

Active account — your data is kept for as long as your account remains active.

Deletion of your account

• Immediately — your account is deactivated, you can no longer log in, and your current subscription is cancelled.
• For 30 days — your identification data (name, email, phone) is kept in a secure archive to allow account restoration in case of error or change of mind.
• Beyond 30 days — your personal identifiers are anonymized. However, we keep, with no time limit, irreversible cryptographic hashes (SHA-256) of your email and phone. These hashes cannot be used to re-identify you, but they allow us to detect abusive account re-creation after deletion (legal basis: legitimate interest, Art. 6.1.f — fraud prevention).

Billing and payments — receipts and transaction history are kept independently by Whop in accordance with applicable legal and tax obligations.

Technical logs — kept for a maximum of 12 months for security and incident detection purposes.

Generated content (articles, projects, personas) — after your account is anonymized, this content — which does not contain identifying information — may be kept for statistical and service improvement purposes, with no link to you.

For an erasure request regarding elements kept on the basis of legitimate interest, contact support@seocreo.com. We process these requests within a maximum of 30 days.

7. Cookies and similar technologies

We use different categories of cookies. You can manage your preferences at any time via the management banner accessible at the bottom of each page.

• Strictly necessary cookies (no consent required) — essential for the service to work: authentication session, language preference, security, checkout cart. Without these cookies, the service cannot function.
• Audience measurement cookies (subject to your consent) — allow us to measure traffic and detect bugs. Examples: Google Analytics and similar tools.
• Personalization and advertising cookies (subject to your consent) — allow us to display targeted advertising and measure the effectiveness of our campaigns. Examples: Meta Pixel, TikTok Pixel, Google Ads, LinkedIn Insight Tag.
• Geolocation cookies (subject to your consent) — adapt content to your approximate region.
• Cookies set by our sub-processors — Whop during checkout, support chat if you open a conversation.

Your consent is recorded for a maximum duration of 13 months. You can withdraw it at any time via the banner or by clearing cookies in your browser. We also honor the Global Privacy Control signal transmitted by certain browsers as a valid opt-out.

8. Your rights

In accordance with the GDPR, you have the following rights:

• Access — obtain a copy of your personal data that we hold.
• Rectification — correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”) — within the limits of Article 6 above.
• Portability — receive your data in a structured and commonly used format.
• Objection — object to processing based on our legitimate interest.
• Restriction — request the temporary suspension of a processing.
• Withdrawal of consent — at any time, without retroactive effect on processing already carried out.
• Complaint — lodge a complaint with the supervisory authority of your country of residence (CNIL in France, CNPD in Luxembourg, Datenschutzbehörde in Austria, etc.).

To exercise these rights, contact support@seocreo.com. We respond within a maximum of 30 days.

9. Support team access to your account

As part of customer support, service maintenance, resolution of technical incidents or compliance with a legal obligation, the Seocreo team may need to access your account.

This access is:

• limited to strictly necessary information,
• carried out by persons bound to a confidentiality obligation,
• logged in our internal systems,
• consistent with this Policy.

This is a standard practice among all serious SaaS providers. If you prefer that we do not access your account, contact us — save for security emergencies or legal obligations, we will honor your request.

10. Security

We implement reasonable technical and organizational measures to protect your data:

• encryption of communications in transit (HTTPS / TLS),
• encryption of data at rest at our sub-processors,
• passwords stored in hashed form (never in clear text),
• strict access control to internal systems,
• monitoring and logging of sensitive access,
• two-factor authentication on the administrator side.

No system is infallible. In the event of a data breach likely to affect your rights, we will inform you as soon as possible, in accordance with the GDPR.

11. Children

The service is reserved for persons who have reached the minimum age of digital consent in their country of residence — 15 in France, 13 in the United States (COPPA), 16 in Germany, etc. In all cases, the absolute minimum age is 13. We do not knowingly collect data concerning younger persons. If you are a parent or legal representative and believe a minor has communicated their data to us without authorization, contact us: we will proceed with prompt deletion.

12. Your rights in California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights:

• Right to know — what categories of personal data we collect, for what purposes, and with whom we share them (see sections 2, 3 and 4 of this Policy).
• Right to delete — request the erasure of your data, within the limits allowed by law.
• Right to correct — correct inaccurate data.
• Right to opt out of “sale” and “sharing” — we do not sell your data in the traditional sense, but certain advertising cookies (Meta Pixel, TikTok, Google Ads, etc.) may constitute “sharing” under the CCPA. You can opt out via our cookie management banner or via the “Do Not Sell or Share My Personal Information” link at the bottom of each page.
• Right to limit use of sensitive personal information — we do not use your sensitive data for secondary commercial purposes.
• Right to non-discrimination — we will not deny you service, or change prices or quality, if you exercise these rights.

Global Privacy Control (GPC). Certain browsers (Firefox, Brave, DuckDuckGo, dedicated extensions) transmit an automatic signal refusing the sale and sharing of data. We honor this signal as a valid opt-out request, in accordance with the CCPA and similar laws in Colorado, Connecticut and Oregon.

To exercise these rights, contact support@seocreo.com. An authorized agent may submit a request on your behalf with proof of mandate.

13. Quebec residents (Law 25)

If you reside in Quebec, Law 25 (An Act to modernize legislative provisions as regards the protection of personal information) grants you rights similar to the GDPR: access, rectification, erasure, portability, objection to automated decision-making. You are also informed that your data may be transferred to foreign countries (United States, European Union, Tunisia), which are covered by equivalent contractual agreements. The person in charge of personal information protection can be reached at support@seocreo.com.

14. Changes to this Policy

We may modify this Policy to reflect changes in the service, sub-processors or regulations. In case of substantial change, we will inform you by email at least 30 days before it takes effect, as well as in your personal space.

15. Contact

• Email: support@seocreo.com
• Operator: see Legal Notice

Last updated: July 23, 2026.