Privacy policy
Effective from 1 September 2026
Read the binding Slovak version
1. Who processes your data
The controller is MACET, s.r.o., with its registered office at Nitrianska 32/189, 949 11 Nitra, Company ID 35953781, Tax ID 2022057752. Registered in the Commercial Register of the Slovak Republic. Contact for data protection matters: info@seonal.eu.
2. What data and why
| Category | Specific data | Purpose | Legal basis |
|---|---|---|---|
| Account data | e-mail, name, encrypted password, role, time of last sign-in | creating and running the account, signing in, password recovery | performance of a contract |
| Billing data | company name, company ID, tax ID, VAT ID, address, billing e-mail | issuing invoices and meeting accounting obligations | performance of a contract and legal obligation |
| Website data | website addresses, public content of downloaded pages, audit results | site analysis, fix and topic proposals, article generation | performance of a contract |
| Search Console data | clicks, impressions, positions and search queries of your website | choosing topics from real data and measuring results | consent given by connecting the Google account (revocable at any time by disconnecting) |
| Technical records | IP address, browser type, request time, audit log of actions | security, abuse prevention and tracing changes | legitimate interest in secure operation |
3. Who we pass the data to
We do not sell the data and do not use it for advertising. We pass it only to these processors, and only to the extent needed for the service to work:
| Recipient | What it receives | Where it processes |
|---|---|---|
| Anthropic PBC (Claude API) | the text of downloaded pages and the article brief | USA (standard contractual clauses) |
| Google LLC (Search Console API) | access to your website data based on your consent | EU/USA |
| Server provider | running the application and the database | European Union |
| SMTP provider | e-mail delivery (recipient address and message content) | European Union |
The content we send to the Claude API is not used to train models.
4. How long we keep the data
- Account and website data — for as long as the account exists.
- After an organization is deleted — the data is deleted without delay, except accounting documents, which we must keep for ten years by law.
- Technical records and the audit log — 12 months.
- Search Console data — while the Google account is connected, plus 90 days.
5. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing. Two of these rights you can exercise yourself and immediately, right in the app:
- Export — in the Profile and team section you download all your organization’s data in machine-readable JSON.
- Deletion — in the same place you delete the whole organization along with all sites, articles and data. This cannot be undone.
For other requests write to us at info@seonal.eu; we reply within 30 days. You can also lodge a complaint with the Slovak Data Protection Authority.
6. Security
- All communication runs over HTTPS.
- Passwords are stored as a bcrypt hash, never in readable form.
- API keys and third-party tokens are encrypted in the database (AES-256-GCM).
- The database is not reachable from the internet.
- Support access to client data is written to the audit log.
7. Changes
We will let you know by e-mail at least 14 days in advance about any substantial change to this policy.
Related: Terms of service · Cookies