Privacy policy

Last updated: 11 November 2026

This policy explains what SEAgent collects, why, who it's shared with, how long it's kept and the rights you have. We've tried to write it plainly. If anything is unclear, please get in touch.

Who we are

SEAgent is run by [Company legal name], a company registered in England and Wales (company number [number]), whose registered office is at [registered address]. We're the controller of the personal data described here. You can reach us about privacy at [privacy email address] or through our contact page. Our registration number with the Information Commissioner's Office is [ICO registration number].

What this policy covers

It covers this website and the SEAgent service: the dashboard you sign in to, and everything it does with the website you connect. It doesn't cover other companies' websites and services, including Google, Shopify and Stripe, which have their own policies.

What we collect

Your account

Your name, email address and password (stored only as a one-way hash, never in a form anyone can read), and, if you add them, your phone number, date of birth and profile picture. We also keep a record of failed sign-in attempts to protect accounts from being guessed.

Your website and Google Search Console

When you connect Google Search Console, Google asks you to allow SEAgent to see your email address and to view your Search Console data. With that permission we store:

  • the email address of the Google account you connected, so you know which one it is;
  • an access token for your Search Console account, encrypted, so the service can keep your figures up to date;
  • your Search Console figures for the website you chose: clicks, impressions, click-through rates and positions, by day, search and page, going back up to 16 months;
  • Google's index status for your pages, from its URL Inspection tool.

We only ever read Search Console data. SEAgent can't change anything in your Search Console account.

Your website's pages

SEAgent visits the public pages of the website you connected, as a search engine would, to check things like titles, headings, text, images and links, and keeps what it finds, including up to 4,000 words of each page's text. It also asks Google's PageSpeed Insights to test how quickly pages load, and keeps the results and Google's screenshots of the pages. It reads your sitemaps to find your pages. It only visits pages on the website you connected.

Shopify, if you connect a store

With your permission, SEAgent reads your store's products and its orders from the last 60 days, and can create URL redirects in your store when you ask it to. From orders we keep only the order number, date, total and where the visit came from (for example, Google search). We don't keep your customers' names, addresses, emails or payment details.

What you write and ask

Articles you write in SEAgent, your conversations with the Claude assistant, the target searches you choose for your pages, and your choices for alerts and reports.

Payments

Payments are taken by Stripe. Your card details go straight to Stripe and we never see or store them. We keep a record of your orders: what you bought, when, how much, and its status with Stripe.

Messages and emails

If you use our contact form, we keep your name, email address and message. We send you emails your account needs (such as verifying your email address and resetting your password) and the alerts and reports you choose. We record when emails we send are opened and if they bounce, so we can tell whether they're arriving.

Visits to this website

We count visits to our public website without cookies and without keeping your IP address. Each visit is counted using a code made from your IP address and browser that changes every day, so nobody can be followed from one day to the next, and we look up only the country. If you agree to it in the cookie banner, Google Analytics is also used to see how people find the site.

Google user data

SEAgent's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • we use your Google data only to provide and improve the features you see in SEAgent: your figures, insights, keyword and page analysis, alerts, reports and the Claude assistant;
  • we send your Search Console data to Anthropic, our AI provider, only to produce those features for you, and Anthropic doesn't use it to train its AI models;
  • we don't sell it, use it for advertising, or use it to train AI models;
  • nobody at SEAgent reads it unless you ask us to (for example, to help with a problem), it's needed for security or to investigate abuse, or the law requires it.

You can stop SEAgent's access at any time by disconnecting Google on the Integrations page, which also deletes the Search Console data we hold for your website, or by removing SEAgent from your Google account at myaccount.google.com/permissions.

How we use it, and why we're allowed to

  • To provide the service you signed up for (the contract between us): your account, your figures, page checks, speed tests, Claude's insights and suggestions, articles, alerts and reports, and taking payment.
  • To keep SEAgent secure and working (our legitimate interests): protecting accounts, preventing abuse, fixing problems, and counting visits to our website without cookies.
  • To meet legal obligations: for example, keeping payment records for tax.
  • With your consent: Google Analytics on our public website. You can change your mind at any time by clearing the choice in your browser.

Who we share it with

We use these service providers to run SEAgent. They process data on our instructions and only for these purposes:

  • Our hosting provider, which runs the servers SEAgent and its database live on, in the United Kingdom.
  • Anthropic, whose Claude AI writes SEAgent's insights, suggestions, fixes, article edits and assistant answers. For each of these it's sent what it needs: your Search Console figures, your pages' text and checks, your articles, or your conversation. We use Anthropic's commercial API, under terms that don't allow your data to be used to train its models.
  • Google, for Search Console (to read your figures), PageSpeed Insights (to test your pages, which Google loads like any visitor would), reCAPTCHA (to stop automated sign-ups and sign-ins) and, only with your consent, Google Analytics.
  • Stripe, to take payments and manage your subscription.
  • Shopify, if you connect a store.
  • Our email provider, to send the emails your account needs and the alerts and reports you choose.

We don't sell your data. We'd share it with anyone else only if the law requires it, to protect someone's safety, or as part of selling the business, in which case the buyer would have to keep to this policy.

International transfers

Some of our providers, including Anthropic, Google and Stripe, process data in the United States. Where they do, the transfer is protected by the UK's adequacy arrangements for the US or by the UK's approved data transfer agreements.

How long we keep it

  • Your account and everything in it: for as long as you have an account. You can ask us to delete your account at any time. When it's deleted, we delete it with your website's data, page checks, screenshots, articles, conversations, store data and alert settings.
  • Search Console figures: up to 16 months, as Google does. Disconnecting Google deletes them.
  • Speed test screenshots: the newest three for each page.
  • Orders and payment records: six years after the end of the tax year they relate to, as the law requires.
  • Records of how much of Claude your website used (the amounts only, not what was sent): for as long as we need them for billing and accounts.
  • Contact form messages: for as long as we need them to help you, then up to two years.
  • Visits to our website: the cookieless counts for up to 25 months.

Cookies

When you sign in, we set one cookie that keeps you signed in. It lasts 12 hours, or 90 days if you choose to stay signed in. While you connect Google or Shopify, a short-lived cookie checks that the connection really came from you. These are strictly necessary, so they don't need your consent. Google Analytics cookies are used only if you say yes in our cookie banner, and your choice is remembered in your browser. reCAPTCHA, on the sign-in and sign-up pages, may set Google's own cookies to tell people from automated programs.

Keeping it safe

Everything travels over encrypted connections. Passwords are stored as one-way hashes, and your Google and Shopify access tokens are encrypted. Access to the servers is limited to the people who run SEAgent. No system is perfectly secure, but if something went wrong that put your data at risk, we'd tell you and the Information Commissioner's Office as the law requires.

Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you;
  • have anything that's wrong corrected;
  • have your data deleted;
  • object to, or ask us to restrict, how we use it;
  • receive it in a format you can take elsewhere;
  • withdraw your consent at any time, where we rely on it.

You can change most of your details yourself on your profile, disconnect Google or Shopify on the Integrations page, and delete your data by asking us. To use any of these rights, contact us at [privacy email address]. We'll reply within one month.

Children

SEAgent is a service for businesses and isn't meant for anyone under 18.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters, for example a new kind of data or a new provider, we'll tell you by email or in SEAgent before it applies.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.