Privacy Policy

This Privacy Policy explains what Autopulto ("we", "us") collects when you use Autopulto (the "Service"), how we use it, and your choices.

1. Information we collect

• Account & organization data — your name, email, organization name, and login credentials (passwords are stored only as salted hashes).
• Product & content data — the product details, website URLs, uploaded documents, and marketing content you create or generate.
• Connected-account credentials — when you connect a third-party platform, we store the access tokens needed to act on your behalf: to publish, or, for read-only connections such as Google Search Console (section 11), only to read. These are encrypted at rest. We never receive or store your platform passwords — connections use each platform's official sign-in.
• Search performance data — if you connect Google Search Console, the search queries, pages, impressions, clicks and ranking positions for the properties you choose. See section 11.
• Billing data — handled by our payment processor (Stripe); we store a customer/subscription reference, not your full card details.
• Usage & metering — actions taken, credits consumed, logs, and basic device/analytics data needed to run and secure the Service.

2. How we use it

• To provide the Service — generate, schedule, and publish content you direct.
• To meter usage, bill paid plans, and prevent abuse.
• To secure, maintain, and improve the Service and provide support.
• To communicate with you about your account and important changes.

3. Service providers & sharing

We share data with providers who help us run the Service, only as needed:

• AI providers (e.g. Anthropic, Google) — to generate content from your inputs, under their terms and usage policies.
• Payment processor (Stripe) — to process payments.
• Hosting & infrastructure — to run and deliver the Service.
• Platforms you connect — we send the content you direct us to publish to those platforms.

We do not sell your personal information. We may disclose information if required by law or to protect rights and safety.

4. Data retention

We keep your data while your account is active and as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. You can delete content or close your account; some records may be retained as required by law.

5. Security

We use technical and organizational measures to protect your data, including encryption of connected-account secrets at rest and encrypted transport (HTTPS). No system is perfectly secure, but we work to protect your information.

6. Your rights

Depending on where you live (e.g. under GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, contact us at [email protected].

7. Cookies

We use strictly-necessary cookies for authentication and session management. We do not require advertising cookies to use the Service.

8. International transfers

We may process data in countries other than yours. Where required, we use appropriate safeguards for such transfers.

9. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

10. Anonymous strategy previews

If you use the free strategy preview without an account, we process the website URL you submit and your IP address to generate the preview.

We retain the submitted website URL and the generated preview indefinitely. We use them to return the same preview if that site is submitted again, to avoid regenerating work we have already done, to prevent abuse of the free preview, and to understand how the free preview is performing (aggregate counts of previews requested, generated, and converted to accounts). This information concerns a publicly available website. Aside from the IP address described below, which we keep for up to 7 days, we do not link it to an identified individual unless you create an account.

Your IP address is deleted within 7 days. It is retained only that long, for abuse prevention.

If your site changes you can refresh a stored preview from the preview page (once a day). To request deletion of a stored preview, contact us at the address in section 6.

The preview page uses Cloudflare Turnstile to verify you're human; Cloudflare processes technical data under its own privacy policy.

11. Google Search Console data

If you connect Google Search Console, we use Google's API to read the search performance data for the properties you select. The connection is read-only: it cannot publish, change, or delete anything in your Search Console account or on your site, and it reads only the properties you choose — never others on the same Google account.

What we read

For each of your selected properties: the search queries people typed, the pages Google showed them, and the impressions, clicks and average ranking position for each.

How long we keep it

• Search query text is deleted after 16 days. That is the window our reports compare, so we stop holding what people searched two weeks after we have used it.
• Page-level figures — impressions, clicks and position with no query text — are kept for 90 days, so we can show you trends.
• If you disconnect Search Console or remove a property, we delete that property's data.

What we do with it

We use it to produce your search reports, and to draft the page title and description suggestions those reports point to. Drafting a suggestion sends the relevant page's top queries to our AI provider (section 3) to write it.

You are the controller of this data; we process it on your instructions. We do not sell it, use it for advertising, or use it to train generalized AI models. Autopulto's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Search Console at any time from the product's Connect Accounts page, or revoke our access directly in your Google account permissions.

Site crawling. For products where you have asked us to analyse your site, we fetch your public pages the same way a search engine does — respecting robots.txt and any Crawl-delay you set — and store each page's title, meta description, canonical URL, word count and the internal links between your pages. We store a short text preview of each page, not its full content. This is used to show you which pages nothing links to and which declare a conflicting canonical URL. We do not fetch pages behind a login, and we do not write to your site.