Privacy Policy

1. Data Collection Principles

We only collect and process data necessary to provide, maintain, and enhance WrixSEO features. All data provided or connected is managed with high security standards solely for your account operations.

WrixSEO never sells, rents, or commercializes your account information, keyword lists, or private content to third parties for advertising purposes.

2. Information We Collect

When you register and operate on WrixSEO, the system receives and processes the following categories of information:

• Account Information: Email address, full name, securely hashed password (bcrypt), avatar, and user identifier (when signing in with Google OAuth).
• Website Configuration: Domain names, sitemap URLs, receiving webhook endpoints, webhook secrets, brand profiles, and editorial guidelines.
• Google Search Console Data: When you grant Search Console access, the system only reads search performance metrics (clicks, impressions, average position, search queries) for properties you select, strictly adhering to Google API Limited Use requirements.
• Task History & Content: Researched keywords, outlines, draft articles, revision histories, webhook delivery logs, and credit balance transactions.
• Technical Information: Session cookies (HttpOnly, SameSite), IP addresses, user-agent strings, and error logs for infrastructure protection and abuse prevention.

3. How We Use Information

Collected information is strictly used for legitimate service operations:

• Core Service Delivery: Keyword research, AI outline and draft generation, automated internal linking, and publishing via webhook to your website.
• SEO Analytics & Insights: Synchronizing GSC metrics to identify keyword opportunities, detect conflicting URLs, and track search performance trends.
• Resource & Credit Management: Displaying transparent plan limits, credit balances, and task costs before execution.
• System Security: Identity authentication, session security, and proactive defense against unauthorized access or platform abuse.

4. Third-Party Sharing & Integrations

To provide AI capabilities and search engine connectivity, WrixSEO integrates with trusted third-party services:

• AI Language Models (OpenAI API / LLM Partners): Only necessary generation parameters (keywords, titles, outlines, knowledge context) are transmitted. Passwords or sensitive administrative details are never sent.
• Google API Services: WrixSEO strictly adheres to the Google API Services User Data Policy. Your GSC data is only used within your workspace and is never used to train public AI models.
• Cloud Infrastructure: Databases are encrypted at rest and in transit via HTTPS with valid SSL/TLS certificates.

5. Storage & Security

We apply industry-standard security safeguards to protect your data:

User passwords are one-way hashed. Webhook secrets are securely stored and utilized for HMAC signature verification on every dispatch. Session cookies are configured with Secure and HttpOnly flags to prevent client-side script interception.

Your data is retained while your account remains active. When you remove a website or post, related records are scheduled for secure deletion during maintenance cycles.

6. User Rights

You maintain full control over your data within WrixSEO:

• Access and Modification: View and update your personal profile, website settings, webhooks, and brand assets at any time.
• Revoke Search Console Access: Disconnect GSC directly in website settings or revoke application permissions in your Google account security panel.
• Data Deletion & Account Closure: Request full account closure and purging of associated content and task records via the support portal.

7. Policy Updates & Contact

This Privacy Policy may be updated periodically to reflect service evolution or legal requirements. The updated date at the top indicates the current effective version.

If you have questions regarding this privacy policy or data practices, please reach out via the in-app Support page.