Draft. This text is a plain-English draft for the private beta. It will be checked by a lawyer before paid plans launch. Words in [brackets] will be filled in then.
Privacy policy
Last updated 5 November 2026
xEOLabs is run by [Company legal name], [address] ("we"). This page explains what personal data we keep, why, and what you can do about it. Questions: [privacy contact e-mail].
What we keep
- Account data: name, e-mail address and agency membership. Sign-in is handled by Clerk; we store only your Clerk user id and role.
- Agency data: the brands, websites, competitors, facts and questions you enter, the AI answers we collect for them, and the scores we calculate.
- Billing data: your plan and payment status. Card details are handled by Stripe and never reach our servers.
- Usage and safety data: AI cost per agency, error reports without personal data, and feedback you send us.
We do not use advertising or tracking cookies. Only the cookies needed to keep you signed in are set.
Why we use it
- To run the service you signed up for (contract).
- To keep it safe, fix errors and control costs (legitimate interest).
- To send service e-mails such as alerts or confirmations (contract).
- To meet legal duties such as keeping invoices (legal obligation).
Who helps us
These providers process data for us, only for the purposes listed:
- Clerk: Sign-in and team accounts (USA)
- Stripe: Payments and invoices (USA / EU)
- Resend: Service e-mails (USA)
- Cloudflare: Domain name service and network protection (Global)
- [Hosting provider]: Servers and database ([Location])
- OpenAI (ChatGPT): Asking tracked questions (USA)
- Anthropic (Claude): Asking tracked questions; reading websites for set-up (USA)
- Google (Gemini): Asking tracked questions (USA)
- Perplexity: Asking tracked questions (USA)
- DataForSEO: Google AI Mode answers for tracked questions ([Location])
- TypeSafe: Checking AI answers (tone, top pick, facts) ([Location])
The questions we send to AI engines are the questions you choose to track; we do not send your account details to them.
How long we keep it
- Agency data: while your agency uses xEOLabs, or until you delete it.
- Error reports: 30 days. Backups: up to 8 weeks.
- Invoices: as long as tax law requires.
Your rights
- Get a copy: agency admins can download all agency data in Settings → Data.
- Delete: agency admins can ask for all agency data to be deleted in Settings → Data. Deletion happens after 7 days (so a mistake can be undone); backups expire within 8 weeks.
- Correct, object or complain: write to [privacy contact e-mail]. You may also complain to your data protection authority.