We collect what’s needed to sell and support the product: account and billing data, license activations (domain, plan, version), support conversations, and IP addresses to keep sign-in secure. Content you send to an AI provider goes directly to that provider under your own key — we are not the controller of that data. You can exercise your GDPR rights via support@seoandchill.com.
This summary is provided for convenience only. The full text below is the legally binding document — if this summary and the full text ever differ, the full text prevails.
SEO AND CHILL ("SEO AND CHILL", "we", "our", or "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website, purchase a license, create an account, use our software, or contact us.
By accessing or using our website and services, you agree to the practices described in this Privacy Policy.
For purposes of applicable data protection laws, SEO AND CHILL acts as the data controller for personal information collected through our website, customer accounts, licensing systems, billing systems, and support channels.
SEO AND CHILL, Rietbergweg 4, 8131 PL Wijhe, the Netherlands. Chamber of Commerce (KvK): 84255048.
Privacy inquiries may be directed to:
Information You Provide
We may collect information that you voluntarily provide, including:
License Information
To provide licensing and software update services, we may collect:
Technical Information
We collect automatically:
We use personal information to:
Where GDPR or UK GDPR applies, processing is based on one or more of the following legal grounds:
SEO AND CHILL provides software that may connect to third party artificial intelligence providers.
Users may choose to connect their own accounts, API keys, or credentials for services such as AI language models and content generation platforms.
When a user chooses to connect a third party AI provider, content submitted through SEO AND CHILL may be transmitted directly to that provider in order to generate requested outputs.
SEO AND CHILL does not act as the controller of content submitted to third party AI providers.
Users are solely responsible for their use of connected AI services and should independently review the privacy policies, data processing practices, security measures, and terms of the third party AI providers they choose to use.
SEO AND CHILL is not responsible for the privacy, security, retention, processing, or use of data by third party AI providers once information has been transmitted to those providers at the user's direction.
Payments are processed by trusted third party payment providers.
SEO AND CHILL does not store complete payment card information on its own servers.
Payment processors handle personal information according to their own privacy policies and security standards.
You can subscribe to our email newsletter ("The calm SEO letter") by entering your first and last name and your email address on our website. We then email you a link to confirm, and you are only subscribed once you click it (double opt-in). You receive three short tips in your first week, then one email a month with practical WordPress SEO, which may also mention SEO AND CHILL itself. We process your name and email address for the sole purpose of sending you the newsletter, which greets you by your first name, on the basis of your consent (Art. 6(1)(a) GDPR). Separately, if you chose Accept on our cookie bar, OpenAI’s pixel on that page can pick up the email address and name you type into the form, hashed in your browser, for our own ads in ChatGPT (see Cookies and Analytics). Subscribing is optional and is never a condition for purchasing or using SEO AND CHILL.
Newsletter delivery and list management are handled by Klaviyo (Klaviyo, Inc., United States), acting as our processor under Klaviyo’s data processing agreement. When you subscribe, your browser sends your first and last name and your email address straight to Klaviyo, and your IP address reaches Klaviyo with that request. Klaviyo records when and how you subscribed and confirmed, as proof of your consent. Our website loads no Klaviyo script for this and sets no cookie. Klaviyo stores the data in the United States; see International Data Transfers below.
Every newsletter contains an unsubscribe link. You can also withdraw your consent at any time by emailing support@seoandchill.com. After you unsubscribe, you receive no more newsletters; Klaviyo keeps your email address on a suppression list so that it stays that way.
We do not sell newsletter data, and we do not enrich it with third-party sources.
When you buy a plan, change it or cancel it, or when a payment for it fails, our customer portal tells Klaviyo, the email provider described above. It sends your email address with your plan, its interval and the status of your subscription; since when you are a customer; how many of your sites use the plugin and the address of the most recent one; for a purchase, the amount excluding tax and your answer to the question about emails as a customer (see Emails to Customers); and for a failed payment, which attempt it was. That way someone who already bought never receives an email asking them to buy, and the emails you did agree to fit your plan.
This does not subscribe you to anything: you only receive marketing email from us if you said yes to it, for example by subscribing to the newsletter or by ticking the box before checkout (see Before Checkout) or in the setup after you sign up (see After You Sign Up), and, as a customer, the review request and the two emails after a plan ends, described under Emails to Customers, unless you said no to them. Someone who never completed a payment is not reported this way, with one exception: if you choose “No, thanks” at checkout, we pass that on at once, even before your payment is complete, so it always holds. The legal basis is our legitimate interest in not sending customers sales email that is not meant for them (Art. 6(1)(f) GDPR). You can object at any time at support@seoandchill.com, and when you ask us to delete your account, we delete your profile at Klaviyo as well.
When you choose a plan on our website, we first ask for your email address and the address of your WordPress site, and then send you on to Stripe to pay. We fill in your email address on Stripe’s page, so you do not type it twice, and your account is created with it once you pay. We keep the address of your site as its domain name only, and we do not visit it.
We store your email address and the address of your site, with the plan and billing period you chose, whether you ticked the box described below and the time, as our record of checkouts started: for 24 hours, or for 30 days if you ticked the box and it went on to Klaviyo, so that we do not pass the same address on to Klaviyo twice in that time. To stop anyone from entering addresses by the thousand, we also keep a key derived from your IP address (the address itself for IPv4, the network it belongs to for IPv6) for 24 hours, and count how many checkouts were started from that network in that time. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
The box “Email me a reminder, setup tips and a few notes from our founder” stays unticked unless you tick it. If you tick it, we also ask for your first name, so the emails can greet you by name; we pass it on to Klaviyo and do not store it ourselves. If Klaviyo already has a first name for your address, it keeps that one. Only if you tick the box, we send your email address and first name to Klaviyo, the email provider described above, with your consent to marketing email, and tell it that you started a checkout: the plan, the billing period and its price, the address of your site and a link back to this step. Klaviyo then sends you a series of about ten emails over two weeks: about setting up SEO AND CHILL, with a reminder if you did not finish, and notes from our co-founder about why we built it and how it helps. One of them, near the end, can include an offer on your first payment. They all stop once you buy, and we send you nothing else on the strength of this box. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email contains an unsubscribe link, and you can also withdraw your consent at any time by emailing support@seoandchill.com. If you leave the box unticked, nothing about this step goes to Klaviyo, and we do not ask for your first name.
When you buy a plan, the payment page asks whether we may email you as a customer, under “Emails about SEO & Chill”. It starts on yes. Choose “No, thanks” and you never receive these emails.
If you leave it on yes, we may send you a few short emails about SEO AND CHILL itself: about a month after the plugin first runs on one of your sites, a request for a review; and after your plan has ended, an email about 30 days later asking why you stopped, and one about 60 days later saying your settings are still there. We send nothing else on the strength of this answer.
Every one of these emails lets you unsubscribe with one click, and you can object at any time by emailing support@seoandchill.com. The legal basis is the rule for existing customers in the Dutch Telecommunications Act (article 11.7(3) of the Telecommunicatiewet) and our legitimate interest in keeping in touch with our own customers about our own product (Art. 6(1)(f) GDPR). Your answer is kept with your profile at Klaviyo, the email provider described under Customers and Klaviyo, for as long as you have an account with us, and with the payment at Stripe (see Payments).
Separate from this question: after you buy a plan, you get up to three short emails about setting up SEO AND CHILL: once per account, in the first two weeks, and only while your plan runs. We send them through our transactional email provider (Postmark). Two of them, about installing the plugin and connecting your site, only come while no site is connected yet; the last one says where to look for your first results. They belong to your purchase, so they come whatever you chose here; the legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).
In every email we send through Postmark, such as the sign-up confirmation, a password reset, the emails about your plan and the setup emails, we see whether it was opened. In most of them we also see which links were clicked. The exceptions are the emails with a link to choose or reset a password or to confirm an email address, the emails about a change to your password or email address or about an existing account, the confirmation of your purchase and the email about a failed payment: their links go straight to where they point. Postmark adds a small invisible image that loads when your email program shows images, and in the other emails sends each link through its own address before the page opens; it records when that happened, your IP address and the rough location that follows from it, and which email program or device you used. We use this to see whether our emails arrive and help, on the basis of our legitimate interest in sending emails that work (Art. 6(1)(f) GDPR), and Postmark keeps it with the email in its activity log for 45 days. You can block images in your email program; the links still work.
When you create a free account, with your email address or with Google, the setup that follows ends with a box: “Email me setup tips and occasional news from SEO & Chill”. It stays unticked unless you tick it, and you can skip the step. If you bought a plan, you don’t see this step: you answered a question about emails at checkout.
Only if you tick the box, we send your email address and your first name, taken from the name you gave us or the one Google shares, to Klaviyo, the email provider described above, with your consent to marketing email, and tell it that you created an account, with your email address or with Google. Klaviyo then sends you up to five emails over two weeks: about setting up SEO AND CHILL, and notes from our co-founder about why we built it and how it helps. The last one can include an offer on your first payment. They stop once you buy a plan. After that, we may now and then email you news about SEO AND CHILL, such as a new feature or a change to our plans. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email contains an unsubscribe link, and you can also withdraw your consent at any time by emailing support@seoandchill.com.
If you leave the box unticked or skip the step, nothing about your account goes to Klaviyo. Ticking it is never a condition for using your account. If you ticked the earlier version of this box on our sign-up page, you get the same emails about setting up, and the setup doesn’t ask again. That box didn’t mention news, so we don’t send you news on the strength of it.
Some cookies are needed to sign you in to our customer portal and to keep that secure. Those are set without asking, because they do only what you asked for.
Since 26 September 2026 we also use Google Analytics 4 on our website, seoandchill.com, to see how many people visit, which pages they read, which plan button they click and where they came from. The Google script runs there and nowhere else: our customer portal (app.seoandchill.com) loads none, and our preview environments send nothing. What the portal does, since 28 September 2026: when you sign up, start a checkout, complete a purchase or send a sales or partnership question through our contact form, it tells Google Analytics that this happened, credited to your visit to our website, so we can see which pages and sources lead to customers. It reads your answer on the website's bar to decide, and sends nothing if you declined. It never sends your name, email address, account number or customer number: only what happened, and for a purchase the plan, the amount, the currency and the order number of the checkout. A support question or a refund request is never reported. That is not strictly necessary, so we ask for your consent first, on a bar at the bottom of the page. Until you accept, nothing is loaded from Google at all — not a cookie and not a request. Decline and none of it ever is.
You can withdraw your consent at any time, with the Cookie choice control in the footer of every page on seoandchill.com; your answer there also applies to our customer portal. Withdrawing deletes the analytics cookies and reloads the page, because Google's script cannot be stopped from the outside once it is running; after that reload nothing more is sent. One exception, and a narrow one: a checkout you had already started before withdrawing is still reported once when its payment comes in, because we linked it to your visit at the moment you started it and cannot see your later choice from there.
For this, Google acts as our processor under Google's data processing terms, which we accepted on 26 September 2026. Your IP address reaches Google as part of the connection, is used to derive a rough location and is then discarded rather than logged. We have switched off sharing this data with Google's advertising products, and Google Signals is off, so the data is not used to build advertising profiles; that is set both in Google's own settings and in the code on the page. Analytics data is kept for 14 months and the cookies expire after 13 months. Google processes it in the United States; see International Data Transfers below.
Since 6 October 2026 we also use Fastlane on our website, under the same consent, to count visits to our pages: which page, where the visit came from, the screen size and language of your browser, the campaign tags in the link, how far down the page you scrolled and how long you stayed. Its script keeps a random visitor ID and a session ID in your browser’s local storage, to tell visits apart. It runs on seoandchill.com only, not in our customer portal and not on our preview environments, and it does not see your sign-ups, checkouts or purchases. Until you accept, nothing is loaded from Fastlane; withdrawing removes its IDs from your browser and reloads the page. Fastlane is run by Possibility Studios Pty Ltd, trading as Fastlane, of Sydney, Australia, and acts as our processor for this, under the terms we accepted when we opened our account on 27 September 2026; see International Data Transfers below.
Since 9 October 2026 the bar also asks about our own ads in ChatGPT. It now has two buttons, Decline and Accept, and no separate answer for analytics alone. Only Accept loads OpenAI’s pixel on our website. It tells OpenAI which pages you view, with a random ID for your browser and, if you came from one of our ads, a reference to that ad click, both in cookies (see our Cookie Policy), your browser and your IP address, and the address of the page and the one you came from, without the part after a question mark, and, if your browser allows it, OpenAI’s own cookies on openai.com: the ones OpenAI sets under its own cookie policy when you visit openai.com or sign in to ChatGPT, such as oai-sc, with which it can recognise your browser and, if you signed in to ChatGPT in it, your account, and the short-lived security cookies __cf_bm and _cfuvid that its servers set when the pixel loads; and an email address or name you type into a form on our website, such as the newsletter form, hashed in your browser (OpenAI states that its pixel never sends these in clear). That last part is a setting of OpenAI’s that we cannot switch off. With the same answer, our customer portal tells OpenAI when you sign up, start a checkout or complete a purchase, with the pixel’s two IDs and your browser, for a sign-up or checkout also your IP address, for a checkout and a purchase the plan you chose, and for a purchase the amount and the currency. Each report carries a random code of its own, so no account, customer or order number goes along. When you sign up, or start a checkout or buy while signed in, it adds your email address, hashed with SHA-256: OpenAI can compare it with the hashed addresses of its own users, but never receives the address itself. A checkout as a guest goes without it, and so does your name, account number and customer number, always. We do this to see which of our ads bring customers, and so that OpenAI can show our ads to the right people, including people who visited us before. OpenAI Ireland Limited receives this data as an independent controller, not as our processor, under OpenAI’s Conversion Terms and the Ad Tools Data Processing Addendum they include, which we accepted on 9 October 2026. We decide to collect this data on our website and in our customer portal and to pass it on to OpenAI, and we are responsible for that part. What OpenAI then does with it, including using it to improve its own services, is OpenAI’s responsibility under its own privacy policy (openai.com/policies), and you can exercise your rights about that processing with OpenAI. Withdrawing your consent switches the pixel off, removes its cookies except the one that records your no, and reloads the page, and from then on the portal reports nothing more to OpenAI, with the same narrow exception for a checkout you had already started. With Decline, or with an Analytics only from the earlier bar that still applies, nothing goes to OpenAI.
Since 11 October 2026, Accept also covers our own ads on Facebook and Instagram, and loads Meta’s pixel on our website. It tells Meta which pages you view and that you viewed our pricing page, with a random ID for your browser and, if you came from one of our ads, a reference to that ad click, both in cookies (see our Cookie Policy), your browser and your IP address, and the address of the page and the one you came from, and, if your browser allows it and you use Facebook or Instagram, Meta’s own cookies from facebook.com (such as fr), which Meta sets under its own cookie policy and uses to recognise your account. If you came from one of our ads and choose Accept only on the next page, our own script writes that reference from the link of the ad. Meta’s pixel reads no forms on our website: its automatic matching of form fields and its automatic events are switched off in Meta’s settings, and the code on the page sends only those page views and, when you check a WordPress site on our landing page, the event SiteCheck, with only the name of the SEO plugin we found on it, never the address of the site. With the same answer, our customer portal tells Meta when you sign up, send a sales or partnership question through our contact form, start a checkout or complete a purchase, with the pixel’s two IDs and your browser; for all but a purchase also your IP address; for a sign-up how you signed up, for a question its kind, for a checkout and a purchase the plan you chose, and for a purchase the amount and the currency. Each report carries our own reference to it, so that Meta can recognise a report it already received: your account number for a sign-up, Stripe’s ID of the payment session for a checkout or a purchase, and a random code for a question. When you sign up, or start a checkout or buy while signed in, it adds your email address, hashed with SHA-256: Meta can compare it with the hashed details of its own users, but never receives the address itself. A question through the contact form and a checkout as a guest go without it, and so does your name, always. We do this to see which of our ads bring customers, and so that Meta can show our ads to the right people, including people who visited us before. For collecting this data on our website and in our customer portal and passing it on to Meta, Meta Platforms Ireland Limited and we are joint controllers, under Meta’s Business Tools Terms and the Controller Addendum they include, which we accepted on 9 October 2026. Under that arrangement we are responsible for informing you and asking your consent, and you can also exercise your rights about it with Meta. What Meta then does with the data, to measure and deliver our ads, to build audiences for them and for its own purposes, is Meta’s responsibility as a controller of its own under its own privacy policy (facebook.com/privacy/policy), and you can exercise your rights about that processing with Meta. Withdrawing your consent removes the pixel’s cookies and reloads the page, and from then on the portal reports nothing more to Meta, with the same narrow exception for a checkout you had already started. With Decline, or with an Analytics only from the earlier bar that still applies, nothing goes to Meta.
The legal basis for all of this is your consent (Art. 6(1)(a) GDPR). Apart from the pixels of Meta and OpenAI behind Accept, we use no cookies or pixels for advertising.
Further details are available in our Cookie Policy.
We do not sell personal information.
We share it only with the service providers that help us run SEO AND CHILL, and only what they need: hosting and database (Vercel, Neon), payments (Stripe), email (Postmark for account email, the setup emails after a purchase, and messages from our contact and refund forms, Google Workspace for our own mailbox), marketing email (Klaviyo, for the newsletter, for the emails you can ask for before checkout or in the setup after you sign up, for the emails to customers, and so that customers do not receive our sales email), error monitoring (Sentry), the password breach check (Have I Been Pwned), the answers in the question box under our FAQs (Anthropic), website analytics if you consented to it (Google, Fastlane) and hosting of our live demo (Cloudways). Our Trust Center lists each of them with its purpose, location and the data involved.
If you choose Accept on our website, we also share data with Meta Platforms Ireland Limited for our own ads on Facebook and Instagram, and with OpenAI Ireland Limited for our own ads in ChatGPT. Neither is our service provider for this: Meta and we are joint controllers of collecting the data and passing it on, and Meta and OpenAI are each a controller of their own for what they do with it (see Cookies and Analytics).
We also share information with authorities where the law requires it.
All service providers are required to process information only for legitimate business purposes.
We retain personal information only as long as reasonably necessary to:
Where possible, information is deleted or anonymized when no longer required.
Analytics data, if you consented to it, is kept by Google for 14 months from your last visit; the cookie that carries it expires after 13 months. See Cookies and Analytics above.
Postmark keeps whether an email was opened and which links in it were clicked for 45 days, with the email itself.
Fastlane keeps the visits it counted on its own servers; it does not publish for how long. The IDs it keeps in your browser stay until you clear them or withdraw your consent, which removes them.
At Klaviyo, a newsletter subscription, and the yes you gave with the box before checkout or when you signed up, are kept until you unsubscribe, and the customer information described under Customers and Klaviyo for as long as you have an account with us. The details of a checkout you started that go to Klaviyo with that yes (see Before Checkout) stay there until you ask us to delete them at support@seoandchill.com; once you unsubscribe, we no longer use them to email you.
To credit a purchase to your visit, we keep Google Analytics' two random identifiers for your browser and your visit beside the checkout for at most 24 hours, and then delete them, whether or not the checkout was paid. Only when you accepted analytics, and never together with your name or email address.
To credit a purchase to an ad in ChatGPT, we keep the two IDs of OpenAI’s pixel and your browser string beside the checkout for at most 24 hours, and then delete them, whether or not the checkout was paid. Only when you chose Accept, and never together with your name, email address or IP address. The pixel’s cookies in your browser expire after 1 year (the ID of your browser) and 30 days (the ad click), or go when you withdraw your consent. OpenAI keeps what it receives under its own terms.
To credit a purchase to an ad on Facebook or Instagram, we keep the two cookies of Meta’s pixel and your browser string beside the checkout for at most 24 hours, and then delete them, whether or not the checkout was paid. Only when you chose Accept, and never together with your name, email address or IP address. The pixel’s cookies in your browser expire after 90 days, or go when you withdraw your consent. Meta keeps what it receives under its own terms.
What we store when you sign up, sign in, reset or change your password, change your email address or send one of our forms has fixed terms. We delete automatically:
A profile photo you add to your account is stored as a small square copy (256 by 256 pixels), without the photo's hidden data such as the place it was taken, until you remove it or your account is closed. It is only shown in your own account, never to other visitors.
After deletion, data remains in our database provider's backup history for up to 7 days, and is then gone for good.
The IP address of a website's server is kept with that site's license activation, as part of our licensing records.
Personal information may be transferred to countries outside the user's country of residence.
Where required, appropriate safeguards are implemented to protect personal information, including contractual safeguards and equivalent protection measures.
For the analytics described above, Google LLC processes data in the United States. That transfer rests on the European Commission's adequacy decision for the EU–US Data Privacy Framework, of which Google LLC is a certified participant, together with Google's data processing terms and the standard contractual clauses they incorporate. A copy of those terms is available on request at support@seoandchill.com.
Postmark, run by ActiveCampaign, LLC, sends our emails and keeps them, with whether they were opened and which links were clicked, in the United States, under its data processing terms.
For the visitor statistics from Fastlane, Possibility Studios Pty Ltd, trading as Fastlane, is based in Australia and stores what its script counts with its hosting provider, Convex, in the United States or in Ireland.
For our own ads on Facebook and Instagram, Meta Platforms Ireland Limited is the recipient. Meta may transfer the data to Meta Platforms, Inc. in the United States, which is certified under the EU-U.S. Data Privacy Framework.
For our own ads in ChatGPT, OpenAI Ireland Limited is the recipient. OpenAI may process the data in the United States; it states in its Ad Tools Data Processing Addendum that it uses a valid transfer mechanism for any transfer to a country without an adequate level of protection.
For the newsletter, the emails you can ask for before checkout and the customer information described under Customers and Klaviyo, Klaviyo, Inc. processes data in the United States. That transfer rests on the same adequacy decision for the EU–US Data Privacy Framework, of which Klaviyo, Inc. is a certified participant, together with Klaviyo’s data processing agreement and the standard contractual clauses it includes for when the Framework cannot be relied on.
We implement reasonable technical and organizational measures designed to protect personal information against:
No internet transmission or storage method can be guaranteed to be completely secure.
Depending on your jurisdiction, you may have rights including:
Requests may be submitted to:
We may request identity verification before responding.
You also have the right to lodge a complaint with a data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
You can sign in to our customer portal with your Google account. If you do, Google shares your basic profile with us: your name, your email address (and that Google has verified it), your profile picture and a Google account ID. We keep only your name, your email address and the account ID, and use them only to find or create your SEO AND CHILL account and sign you in.
We never receive your Google password, and we get no access to your email, files or anything else in your Google account.
The Google Privacy Policy can be found at:
https://policies.google.com/privacy
When you ask for a password reset, we store the IP address the request came from, to limit the number of requests.
To stop password guessing, we keep failed sign-in attempts (a hash of the email address, the IP address and, for an attempt from a browser that signed in before, a hash of the code in its cookie) for two hours.
So that someone guessing passwords on your email address cannot lock you out, a browser that signed in to your account with your password, or chose a new password, gets a cookie with a random code (__Host-sc_device, see our Cookie Policy). Sign-in attempts from that browser have a limit of their own: after 10 failed attempts within 15 minutes, the next attempt is refused and we forget the browser. We keep a hash of that code, together with a hash of your email address and linked to your account, for 1 year after you last signed in with your password in that browser or chose a new password in it, and for no more than the 20 browsers you used last. Choosing a new password keeps these browsers, so you can still sign in on all your own devices during an attack, and it clears every failed attempt. When you change your email address, we forget every browser that signed in with the old one.
When you choose a password for your SEO AND CHILL account, we check whether it has appeared in a known data breach, using the Pwned Passwords service of Have I Been Pwned. Only the first five characters of a SHA-1 hash of the password are sent to that service, never the password itself.
Our servers make this check, and so does your browser while you fill in the form. When your browser makes the check, the service also receives your IP address, as with any website your browser contacts.
The Have I Been Pwned Privacy Policy can be found at:
https://haveibeenpwned.com/Privacy
After you create an account or buy a plan, we ask a few questions: which website it is for, how many sites you look after, what you spend on SEO now, and how you found us. Every question can be skipped. We keep your answers with your account, to suggest a plan, to show your start plan on your dashboard, and to learn how people find us.
If you enter a website, our servers read its homepage and a few public files (robots.txt, llms.txt and the sitemap), the way a search engine would, and keep the address and the result with your account. Nothing on the site is changed.
On our landing page you can also check a website without an account. Our servers then read its homepage and the same public files in the same way, and show you the result. We don’t store the address you entered or the result. To stop the check being misused, we keep your IP address (the address itself for IPv4, the network it belongs to for IPv6) for 24 hours. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Per day we only count what the checks found: whether the site runs WordPress and which SEO plugin, never the address and nothing about you.
When something goes wrong in our customer portal (app.seoandchill.com), a report of the error is sent to Sentry, the error monitoring service we use, which stores it in the European Union. The report says what failed, where in our code and on which page, so we can fix it.
Before a report leaves our servers or your browser, we remove cookies, email addresses and the part of a web address after the question mark (where, for example, a password reset link carries its code). Reports from our servers do not contain your IP address. When an error happens in your browser, your browser sends the report to Sentry itself, so Sentry receives your IP address, as with any website your browser contacts; Sentry is set up not to store it. Your browser contacts Sentry only when something goes wrong. Reports are deleted automatically after at most 90 days.
When you send the contact form or the refund form on our website, we email what you enter to our support inbox (Google Workspace), through Postmark: your name, your email address and your message, and for a refund also the order number and the date of purchase. We answer from that inbox. The message is not stored on our own servers; Postmark keeps a copy of each email it sends for 45 days, so delivery problems can be traced. We send you no automatic email when you use a form. If you chose Accept on our cookie bar, OpenAI’s pixel on the page can also pick up the email address and name you type, hashed in your browser (see Cookies and Analytics).
To limit spam, we keep the IP address the form was sent from (for an IPv6 address, only its first half) for 24 hours.
Under the frequently asked questions on our website you can type a question of your own. An AI model from Anthropic answers it from the text of our own website. Anthropic receives only your question, not your IP address or any account details. Please do not type personal details into the box.
We keep your question and the answer you were given in our database for 30 days, with the date and the page you asked it on, but without your IP address, to learn what visitors want to know, to check the answers and to improve our FAQs. Once a week, the questions and answers of that week are emailed to our support inbox.
To limit the number of questions, we keep the IP address a question came from (for an IPv6 address, only its first half) for 24 hours, separately from the question.
Our services are not intended for individuals under 18 years of age.
We do not knowingly collect personal information from children.
We may update this Privacy Policy periodically.
Changes become effective when published on this page.
Continued use of our services constitutes acceptance of any revised version.
For privacy related questions, requests, or concerns:
SEO AND CHILL
Rietbergweg 4, 8131 PL Wijhe, the Netherlands
Email: support@seoandchill.com
