AEOForgedAEOForged
Join
Back to home

Privacy Policy

Last updated

Who we are

AEOForged (“we”, “us”) is an answer engine optimization platform operated by AEOFORGED LTD, a company registered in England and Wales (company number 17391084). AEOFORGED LTD is the data controller for the personal data described in this policy. Registered office: 8 Tramway Court, Shipston Road, Stratford-upon-Avon, CV37 7HQ. ICO registration number ZC230500. Ryan Kings founded the company and is based in Stratford-upon-Avon, UK; he is not the data controller.

For privacy questions, including data-subject requests, email privacy@aeoforged.com. For other questions, email hello@aeoforged.com.

What we collect

  • Account data — your email address and, optionally, your name and organisation, when you sign up or log in (handled by our authentication provider).
  • Billing data — when you subscribe to Site Care, Monitor, or Dominate, pay a Deal (10 months billed for 12 months of access), buy a Sector Intelligence Report, or buy an article + kit, our payment processor (Stripe) handles your card details. We store the resulting customer, subscription, and order records, not your full card number. A legacy one-time Fix Programme may still appear for existing buyers.
  • Sign-in providers — if you use Google sign-in, we receive your email and basic profile from Google. If you connect Google Search Console or Google Analytics, we store OAuth tokens (encrypted) to read search and referral data for your connected properties.
  • Marketing leads — if you submit your email to one of our free tools (on aeoforged.com or our companion funnel sites such as aeoscored.com, llmstxtgen.com, aishareofvoice.io, and aicrawlability.com) or sign up for updates, we store that email and the source tool. Marketing emails are sent only when you opt in.
  • Content you submit — the URLs, text, and briefs you provide to our tools (audits, scoring, research, outlines, drafts). We process this to deliver the result you asked for.
  • Technical data — standard server logs and privacy-respecting analytics (page views, aggregate usage) to keep the service reliable and understand what’s used.

How we use your data

  • Provide, operate, and secure the service and your account.
  • Process payments and credits for Site Care, Monitor, Dominate, Deal prepaid terms, Sector Intelligence Reports, and article + kit purchases.
  • Run the tools you request and store the results in your workspace.
  • Send transactional emails (receipts, alerts) and, where relevant, product updates you can unsubscribe from at any time.
  • Improve our tools, scoring, and documentation in aggregate.
  • Aggregate research — we publish occasional research containing aggregate statistics across the sites we measure (for example, the median audit score across the sites in our platform). A statistic is published only when at least 20 different sites contribute to it, no site is ever named, and no score is ever attributable to an individual site. Clients can exclude their site at any time from the Brand profile tab of their client room, or by emailing us.

Legal bases (UK GDPR)

We rely on contract (to deliver the service you sign up for), legitimate interests (to secure, operate, and improve the platform), and consent (for optional marketing emails and optional analytics cookies, which you can withdraw at any time).

Sub-processors and sharing

We do not sell your personal data. We share data only with the service providers that make the platform work, under their respective terms:

  • Supabase — database, authentication, and storage (EU/US regions per their DPA).
  • Vercel — hosting, serverless functions, and optional Web Analytics (only after cookie consent).
  • Stripe — payments and subscription billing.
  • Google — OAuth sign-in and, when you connect them, Search Console and Analytics API access; Gemini is used for some answer-engine visibility checks.
  • Resend & Loops — transactional and marketing email delivery (marketing only with your opt-in).
  • AI and research providers — content you submit to our tools may be processed by Anthropic (Claude), OpenAI, Brave Search, Perplexity, and Google Gemini solely to generate your requested result or to measure how answer engines treat a query. We use these providers’ API terms; your content is not used to train their public models.

Cookies

We use essential cookies to keep you signed in, remember UI preferences (such as sidebar state and your active client), and operate the service. With your consent, we load privacy-respecting Web Analytics to measure aggregate page usage. We do not use third-party advertising cookies.

  • Essential — Supabase auth session, active workspace selection, sidebar preference.
  • Analytics (optional) — Vercel Web Analytics, loaded only if you choose “Accept analytics” in our cookie banner.

Data retention

We keep data only as long as needed for the purposes above:

  • Account & workspace data — while your account is active, plus up to 30 days after verified deletion request (for backup purge and billing reconciliation).
  • Billing records — as required for tax and accounting (typically up to 7 years in the UK).
  • Marketing leads & waitlist — until you unsubscribe, withdraw consent, or ask us to delete your email.
  • Server logs — typically up to 30 days (hosting provider defaults).

Clients use a private room link and do not have an AEOForged login. Email privacy@aeoforged.com to access, correct, or delete data we hold about you (including waitlist and room records). Staff who sign in to the operator app can export or delete their own account from Settings → Account & privacy— that screen is not in the client room.

Your rights (UK / EEA)

Under UK GDPR you have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. If you are a client, a waitlist subscriber, or anyone without an operator login, email privacy@aeoforged.com. Settings → Account & privacy is only for signed-in operator staff — it is not a client-workspace control. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Our ICO registration number is ZC230500.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to correct inaccurate information. We do not sell or share your personal information for cross-context behavioural advertising. We do not discriminate against you for exercising these rights.

To submit a request, email privacy@aeoforged.com. Signed-in operator staff may also use Settings → Account & privacy for their own account. We will verify your request and respond within the timeframes required by California law.

Children

AEOForged is a business tool not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@aeoforged.com and we will delete it.

International transfers

Some of our processors are based in the United States, including OpenAI, Anthropic, Brave Search, Perplexity, Stripe, Vercel, and Google. Where personal data is transferred from the UK to those providers, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses (or other lawful transfer tools those providers maintain). A transfer does not change who the controller is: AEOFORGED LTD remains the controller.

Changes to this policy

We may update this policy as the product evolves. We’ll revise the “last updated” date above and, for material changes, notify you where appropriate.