Privacy policy
Last updated: October 11, 2026
This policy explains what personal data Generative SEO collects through generativeseo.io, why we collect it, who we share it with, and the choices you have. We collect as little as we can. We do not use analytics, advertising pixels, or tracking cookies.
1. Who we are
Generative SEO (founded by Suraj Giri) runs this website and is the controller of the personal data described in this policy. You can reach us about anything in this policy at info@generativeseo.io.
2. Data we collect
Data you give us
When you use one of our forms (request a plan, request an example, or book a call), we collect the details you type in. Depending on the form, this can include:
- Your name and email address
- Your phone number (optional)
- Your company name and website address
- Your industry, main service, and locations
- Your goals, budget range, and timeline
- Anything else you choose to write in a message or email to us
Data collected automatically
Our website is a static site hosted on Firebase Hosting, a service of Google LLC. Like any web server, it records basic technical data when your browser requests a page. This includes your IP address, browser type (user agent), the page requested, and the date and time. Google keeps these server logs to run and secure the service. We do not use them to build profiles of visitors.
We do not run analytics tools, advertising pixels, session recording, or any other tracking on this website.
3. How we use your data
- To reply to your inquiry and send you the plan, example, or call details you asked for
- To assess whether our service fits your business and prepare a quote
- To deliver our services if you become a client
- To keep records of our conversations and agreements
- To keep our website and systems secure
The acknowledgement box on our forms confirms you understand how we will use your details to handle your request. It is not consent to marketing. We do not send marketing emails unless you separately opt in. You can opt out of any marketing at any time by replying to the email or writing to info@generativeseo.io.
4. Lawful bases
Under UK GDPR and EU GDPR, we rely on these lawful bases:
- Steps before a contract: when you ask for a plan, quote, or call, we use your details to respond and prepare a possible agreement.
- Contract: when you are a client, we use your data to deliver the services we agreed.
- Legitimate interests: to reply to general inquiries, keep business records, and protect our website. We balance these interests against your rights.
- Consent: for any marketing emails. You can withdraw consent at any time.
- Legal obligation: where we must keep records, for example for tax and accounting.
5. Who we share data with
We do not sell your personal data. We share it only with service providers who help us run our business, and only as much as they need:
| Provider | What they do | Data involved |
|---|---|---|
| Google LLC (Firebase Hosting) | Hosts this website | Server logs (IP address, user agent, pages requested) |
| FormSubmit (formsubmit.co) | Delivers form entries to our inbox by email | Everything you enter in a form, plus your IP address, browser details, and the page address |
| Purelymail | Hosts our email inbox | Form entries and emails you send us |
| Anthropic (Claude API) | AI model we use to do client work (see section 9) | Only the business information a task needs (for example, your website and services) |
We may also share data if the law requires it, to protect our legal rights, or as part of a business sale or merger. If that happens, we will tell you where the law requires it.
6. International transfers
Some of our providers process data outside the UK and the European Economic Area, including in the United States. Google and Anthropic offer standard contractual clauses or similar safeguards in their business terms. FormSubmit, which delivers our form entries by email, is a US service that does not publish a data processing agreement or say where it stores data. If you prefer not to use it, email us directly at info@generativeseo.io instead of using the form. You can ask us for more detail about the safeguard used for any provider.
7. How long we keep data
- Inquiries: up to 24 months after our last contact with you, unless you become a client.
- Client records: for as long as our contract runs, and after that for as long as tax and accounting rules require.
- Server logs: kept by Google for the period set by Firebase Hosting.
You can ask us to delete your inquiry sooner. See section 10.
8. Cookies and storage
We do not use cookies. Our fonts are hosted on our own site, so your browser does not contact a third-party font service. The only thing we store in your browser is your light or dark theme choice, saved in local storage. Read our cookie policy for details.
9. AI tools and your data
We build our service on AI models, mainly Claude by Anthropic, which we access through Anthropic's commercial API. If we use AI to help prepare your plan, quote, or client work, we only send the business information the task needs, such as your website address, industry, and services. We do not put confidential client data into consumer chat apps. Read our AI policy to learn more.
10. Your rights (UK and EU)
If UK GDPR or EU GDPR applies to you, you have the right to:
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Ask us to delete your data
- Ask us to restrict how we use your data
- Receive your data in a portable format
- Object to processing based on legitimate interests, and to any direct marketing
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email info@generativeseo.io. We will reply within one month. We may ask you to confirm your identity first.
You also have the right to complain to a data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, you can contact the authority in the country where you live or work. We would welcome the chance to sort out your concern first, so please contact us.
11. Your rights (US states)
If you live in California or another US state with a consumer privacy law, you may have the right to:
- Know what personal information we collect, use, and disclose
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information
- Not be treated differently for using these rights
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you. To make a request, email info@generativeseo.io. You can also use an authorized agent. We will verify your request before we act on it.
12. Security
We use reasonable technical and organizational measures to protect personal data. Our site is served only over HTTPS, and we limit access to inquiries to the people who need it. No method of sending or storing data is completely secure, so we cannot promise absolute security.
13. Children
Our website and services are for businesses. They are not directed at anyone under 16, and we do not knowingly collect data from children. If you think a child has sent us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy when our services or the law change. We will change the "Last updated" date at the top of this page. If a change is significant, we will make it clear on this page.
15. Contact us
For any privacy question or request, email info@generativeseo.io.