Privacy policy

Last updated October 20, 2026

The controller of your personal data is the administrator of the offsiteseo.com service. You can reach the administrator about anything in this policy at [email protected].

We collect only what we need to run the service, protect it and understand where visitors come from.

• Account data: your email address, a hash of your password (we never store the password itself) and the signup code we send to confirm your email, stored as a hash with its expiry time and number of attempts.
• Placement finder inputs: the page URL you enter, the topic category, the country and language and the plan size you choose.
• Source data: the source of your visit and UTM parameters (source, medium, campaign) and the referring page, when your browser sends it.
• Technical data: your IP address and user agent (browser and device type).
• Correspondence: the content of emails you send to [email protected] and our replies.
• Billing data for paid plans: plan, billing period, payment status and invoices. Card details are handled by the payment processor and never reach us.

We do not ask for sensitive data and we ask you not to send it.

For visitors and customers in the European Economic Area, the United Kingdom and Switzerland, the GDPR requires a legal basis for each use. For residents of US states with privacy laws, the same uses are described here so you know what we collect and why.

• To create and run your account, confirm your email and deliver the service you sign up for. Legal basis: performance of a contract.
• To run the placement finder, show matching catalog entries and generate brief suggestions for the page you enter. Legal basis: performance of a contract or steps you ask for before one, and our legitimate interest in providing the tool.
• To send service emails, such as signup codes, order status, monitoring alerts and billing notices. Legal basis: performance of a contract.
• To process payments, keep invoices and meet tax and accounting duties. Legal basis: performance of a contract and legal obligation.
• To measure which channels bring visitors, using source, UTM and referrer data. Legal basis: legitimate interest in understanding our marketing.
• To keep the service secure, prevent abuse and investigate problems, using IP address and user agent. Legal basis: legitimate interest in security.
• To answer your emails. Legal basis: legitimate interest in responding, or performance of a contract when you are a customer.

We do not sell your personal data and we do not share it for cross-context behavioral advertising. We do not use your data for automated decisions that have legal or similarly significant effects on you.

We share data only with service providers who process it on our behalf and under contract, and only as much as each one needs.

• A hosting provider that stores the service and its database.
• An email delivery provider that sends signup codes, alerts and service emails.
• A payment processor that handles card payments and subscriptions for paid plans.
• An AI model provider used to generate brief suggestions from the page URL, category and country you enter.

We may also disclose data when the law requires it, or to protect the rights, safety and property of the service, its users or others. Publishers who carry your placements receive the article, the target URL and the anchor, which are not personal data in most cases.

• Account data is kept while your account exists and deleted within 30 days after you close it, unless we must keep part of it longer.
• Signup codes expire shortly after they are sent and their hashes are deleted with unconfirmed signups.
• Placement finder inputs and source data are kept with your account, or for up to 12 months for visitors who do not sign up.
• Technical logs with IP addresses and user agents are kept for up to 90 days, unless needed longer to investigate abuse.
• Billing records and invoices are kept for as long as tax and accounting laws require.
• Support emails are kept for up to 3 years after the last message.

Depending on where you live, you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier use. Residents of US states with privacy laws can ask to know, correct and delete their data and will not be treated differently for using these rights.

To use any right, email [email protected] from the address linked to your account, or tell us which address the request concerns. We may ask you to confirm your identity before we act. We reply within one month, or within the period your local law sets. You can also complain to your local data protection authority.

The service is operated for a worldwide audience and our providers may process data in the European Union, the United States or other countries. When data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on adequacy decisions or standard contractual clauses approved for that purpose, together with additional safeguards where needed.

We use encrypted connections, store passwords and signup codes only as hashes, limit access to the people who need it and keep our providers bound by contract to protect the data. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you as the law requires.

We use only essential cookies for sessions, security and your preferences, and we measure visits without cookies. Details are in our cookie policy.

The service is meant for businesses and professionals. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.

We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell account holders by email before it takes effect.

Questions about this policy or your data go to [email protected]. See also our terms of service.