Each local area page used to take us half a day to create and optimize.
With SEOmatic, we can create hundreds of pages in the same time, which helps our clients make the best use of their budget.
It's transformed how we deliver scalable SEO solutions.
Will Hawkins
Marketing Director, Digi-Business UK
Agents read your Search Console data, do the work, and prove what actually moved. You decide what ships.
14-Day Free Trial. $1 card check, refunded. Cancel Anytime.
Last updated: September 7, 2026
SEOmatic (seomatic.ai) is operated from 1 rue Marguerin, 75014 Paris, France. For the personal data of our customers and visitors we act as data controller; for the website data our customers connect (their own or their clients' sites), we act as data processor on their instructions. For any privacy matter, contact contact@seomatic.ai.
We collect only what the service needs to work:
We use your data to run the product: reading your Search Console data to diagnose and prioritize SEO work, generating content and fixes with AI, staging changes for your approval, and publishing approved changes to your CMS. We also use it to bill you, support you, secure the service, and improve the product. A workspace can optionally run its AI text generation on Anthropic or OpenAI using its own API key — the provider then bills you directly under your own agreement with them, and your explicit confirmation of this is required and recorded.
We do not sell personal data. We do not use your data or your clients' site data to train AI models.
SEOmatic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Concretely: Search Console data is read solely to provide the SEO features you see in your dashboard and reports. It is not transferred to third parties except as necessary to provide those features, not used for advertising, and never sold. You can revoke access at any time from your Google account permissions or by disconnecting the integration in SEOmatic.
To generate content, analysis, and recommendations, relevant inputs (for example page content, search queries, and your instructions) are processed by AI model providers acting as subprocessors. We never use your data to train models of our own. Provider terms vary: Anthropic and OpenAI process API traffic under terms that exclude training on customer content, while Moonshot's API terms carry no equivalent enterprise guarantee. Every change an agent proposes is staged for human approval before anything is published.
Our default writing model is operated by Moonshot AI, whose infrastructure is hosted in China. Workspaces marked EU-sensitive (a per-workspace toggle in Settings → Agent → Data Residency) are routed to Anthropic instead; this routing is enforced in code, not by policy alone. The Anthropic calls run on your own Anthropic API key — Anthropic bills you directly for that usage, and enabling the toggle requires your explicit, recorded confirmation of this — so content that must not reach a China-hosted provider never does, on terms between you and Anthropic.
We share data only with the service providers that make the product work:
We keep your data while your account is active. When you delete a workspace or your account, associated data (including Search Console data and CMS credentials) is deleted from production systems within 30 days, with encrypted backups expiring on their rotation schedule of up to 90 days. Invoices are retained as long as French accounting law requires. You can request deletion at any time at contact@seomatic.ai.
If you are in the EU/EEA or UK you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. Write to contact@seomatic.ai and we will respond within 30 days. You may also lodge a complaint with your supervisory authority; in France that is the CNIL (cnil.fr).
Where we act as processor for our customers' client data, we forward and support requests according to our customers' instructions.
Our infrastructure is hosted in the United States. For personal data of EU/EEA and UK users, transfers rely on Standard Contractual Clauses or an applicable adequacy framework with each subprocessor. Where the China-hosted writing model would be involved, EU-sensitive workspaces are routed to a US-based provider instead, as described in section 5.
We use first-party cookies for authentication and session state, one first-touch attribution cookie so we know which channel brought you here, and analytics as described above. We do not run third-party advertising cookies. For visitors in the EU/EEA, UK, and Switzerland, analytics cookies are set only after you accept the consent banner; declining is one click and the site works identically. See seomatic.ai/gdpr for the plain-English summary of your rights.
Data is encrypted in transit (TLS). CMS credentials and OAuth tokens are encrypted at rest (AES-256-GCM) and API keys are stored as SHA-256 hashes only; a small number of lower-risk secrets (webhook signing secrets, sign-in provider tokens managed by our auth library) are protected by access controls rather than application-level encryption. Access to production systems is restricted and logged. API keys are stored as SHA-256 hashes and shown only once at creation. Security reports go to contact@seomatic.ai; see also /.well-known/security.txt.
When this policy changes materially we will update the date below and, for significant changes affecting existing customers, notify you by email. The current version always lives at seomatic.ai/privacy.
