Privacy Policy

Privacy Policy

Effective Date: July 15, 2026 · Last Updated: July 15, 2026

This Privacy Policy explains how we collect, use, store, protect, disclose, and delete information when you use AutonomySEO. By using the Service, you agree to the practices described in this Privacy Policy.

1. Who We Are

AutonomySEO is an AI-powered software service operated by Leader AI Labs, LLC ("Leader AI Labs," "AutonomySEO," "we," "us," or "our"). This Privacy Policy applies to autonomyseo.com, the AutonomySEO application, related dashboards, reports, integrations, communications, and services that link to this Policy (collectively, the "Service"). For questions or privacy requests, contact us at naor@leader.net.

2. Scope and Our Privacy Roles

For account, billing, marketing, security, and service-usage information, Leader AI Labs generally acts as a data controller or business that determines why and how the information is processed. For website data, content, analytics data, third-party account data, and other information processed on behalf of a customer through connected projects, we may act as a processor, service provider, or contractor. The customer remains responsible for determining whether it has a lawful basis and all necessary notices, consents, and rights to provide that data to AutonomySEO and to instruct us to process it. If you use AutonomySEO on behalf of an organization, that organization may control your account and project data. Contact the organization first regarding its privacy practices and your rights.

3. Information We Collect

We may collect the following categories of information, depending on how you use the Service.

3.1 Account and Profile Information

- Name, email address, username, profile image, organization, role, language, country, and account preferences - Authentication identifiers and information received from sign-in providers - Team, workspace, permission, invitation, and account-administration information

3.2 Billing, Subscription, and Credit Information

- Plan, subscription status, billing cycle, invoices, transaction identifiers, tax information, credit balances, usage, referral information, and payment status Payment-card details are generally collected and processed by our payment processor rather than stored directly by AutonomySEO. We may receive limited payment information such as card brand, last four digits, billing country, and payment status.

3.3 Website, Project, and Customer Content

- Website URLs, page content, HTML, metadata, schema, sitemaps, robots directives, headings, links, images, performance information, crawl results, technical configuration, and other materials associated with a connected website or project - Keywords, competitors, campaigns, briefs, prompts, files, instructions, brand information, protected zones, publishing schedules, and content preferences - Content created, uploaded, edited, generated, published, scheduled, or removed through the Service, including drafts, articles, social posts, FAQs, reports, recommendations, and AI outputs - Action history, change logs, before-and-after snapshots, backup records, restore records, approvals, rejections, and autonomous-action logs, where available

3.4 Connected Accounts and OAuth Data

- OAuth access tokens, refresh tokens, authorization scopes, account identifiers, page or property identifiers, and connection status for third-party services that you choose to connect - Google Analytics and Google Search Console data, such as properties, traffic, sessions, users, clicks, impressions, click-through rates, search queries, pages, positions, sources, and related reports, subject to the permissions you grant - Meta/Facebook and LinkedIn account or page information and publishing permissions, where connected, including information needed to identify pages, publish content, and record publishing status - Content-management-system, hosting, repository, analytics, reporting, and other integration data that is necessary to perform the functions you request

3.5 AI Inputs and Outputs

- Prompts, instructions, website data, content, context, protected-zone settings, and other information submitted to generate recommendations, analyses, or actions - AI-generated text, metadata, structured data, plans, code, summaries, recommendations, classifications, predictions, and other outputs - Quality, safety, diagnostic, and evaluation information related to AI requests and responses

3.6 Technical, Device, and Usage Information

- IP address, device type, browser, operating system, time zone, language, identifiers, referring URLs, pages viewed, actions taken, feature usage, timestamps, session information, and crash or diagnostic logs - Security events, authentication attempts, suspicious activity, rate-limit events, API errors, webhook records, and audit logs - Cookie, local-storage, pixel, and similar technology information as described in our Cookie Policy

3.7 Communications and Support

- Messages, emails, chat transcripts, support requests, feedback, survey responses, attachments, and information you provide when communicating with us - Records of notices, consent, policy acceptance, cancellation, refund, dispute, and privacy requests

3.8 Public and Third-Party Data

- Publicly available website content, public search results, public social or business information, public competitor information, and data supplied by authorized search, analytics, performance, or SEO data providers - Information from referral partners, service providers, fraud-prevention providers, and business partners

4. How We Use Information

- Provide, operate, maintain, secure, authenticate, and improve the Service - Create and manage accounts, projects, teams, permissions, subscriptions, credits, and billing - Connect to third-party services and carry out the actions you request or authorize - Analyze websites, search performance, traffic, technical SEO, GEO and AI visibility, content, trends, competitors, and opportunities - Generate, edit, optimize, publish, unpublish, schedule, replace, or delete content and technical elements, depending on your selected features and permissions - Operate Infinity Autonomous Mode, autopilot publishing, automated fixes, monitoring, reporting, alerts, backups, and rollback or restore features where available - Personalize recommendations, dashboards, reports, workflows, and product experiences - Process payments, prevent fraud, enforce plan limits, and administer credits and promotions - Respond to support requests and communicate about the Service, security, billing, policy changes, and product updates - Detect, investigate, and prevent abuse, security incidents, unlawful activity, and violations of our Terms - Comply with law, legal process, platform rules, and regulatory obligations, and establish, exercise, or defend legal claims - Create aggregated or de-identified statistics that do not reasonably identify an individual or customer

5. Legal Bases for Processing in the EEA, UK, and Similar Jurisdictions

- Contract: processing needed to provide the Service, manage your account, connect services, perform authorized actions, and administer subscriptions - Legitimate interests: securing and improving the Service, preventing fraud, supporting customers, analyzing usage, and operating our business, where those interests are not overridden by your rights - Consent: optional cookies, certain communications, optional integrations, and other processing where consent is required. You may withdraw consent without affecting prior lawful processing - Legal obligations: tax, accounting, compliance, law-enforcement, and regulatory requirements - Legal claims and substantial public interests where applicable

6. AI Processing and Automated Features

AutonomySEO uses artificial intelligence and machine-learning technologies to analyze information, generate content, recommend actions, and, when authorized, execute actions. AI systems may produce inaccurate, incomplete, outdated, biased, infringing, or otherwise unsuitable outputs. Users must review outputs and monitor connected properties as required by the Terms of Use. AI inputs and outputs may be processed by third-party AI providers, including models provided by Anthropic, and by infrastructure providers supporting those models. We may change or add AI providers over time. Their processing is subject to their applicable commercial terms, privacy commitments, and technical configurations. AutonomySEO is not designed to make solely automated decisions that produce legal or similarly significant effects about individuals. Do not use the Service for hiring, credit, insurance, housing, education admissions, healthcare eligibility, or other high-impact decisions about people unless you have independently established lawful and appropriate controls. We may use aggregated, de-identified, or operational data to improve the Service. We will not use Google API user data to train generalized AI models, and our use of Google user data is limited to providing or improving user-facing features that are prominent and disclosed.

7. Google API Data and Limited Use Disclosure

AutonomySEO may access Google user data only after you authorize the requested scopes. Depending on the integration, this may include read-only Google Analytics data and Google Search Console data, as well as permissions needed to perform a specific user-requested action such as submitting a sitemap. AutonomySEO uses Google user data only to provide and improve the user-facing features you request. We do not sell Google user data, use it for advertising, transfer it to data brokers, or use it to determine creditworthiness. Human access is restricted to circumstances such as your explicit support request, security and abuse investigation, legal compliance, or internal operations permitted by applicable Google policies. AutonomySEO's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You may disconnect Google integrations through available account controls or by revoking access in your Google account. Disconnecting may stop future collection, but previously processed records may remain as described in the Retention and Deletion section.

8. Meta/Facebook and LinkedIn Data

If you connect a Meta/Facebook or LinkedIn account, AutonomySEO may receive identifiers, profile information, page lists, permissions, access tokens, and publishing results necessary to provide the connected feature. The exact data depends on the permissions you grant and the third-party platform's current APIs. We use this data to authenticate your connection, display eligible accounts or pages, publish content you authorize, record status and errors, and provide related analytics or administration where available. We do not use connected social-platform data for unrelated advertising or data-broker purposes. You may disconnect the integration at any time. You may also request deletion of connected-platform data by contacting naor@leader.net. Platform-specific deletion requests will be handled in accordance with applicable platform terms and law.

9. How We Share Information

We may disclose information in the following circumstances. - Service providers and subprocessors: hosting, database, infrastructure, AI model, analytics, payment, email, customer-support, security, monitoring, search-data, content-delivery, and integration providers that process information for us under contractual or legal obligations - Connected services: Google, Meta/Facebook, LinkedIn, content-management systems, repositories, social networks, and other providers when necessary to complete an action you request - Your organization and authorized users: workspace owners, administrators, team members, clients, or collaborators based on account permissions - Public or shared outputs: information you choose to publish to a website, social network, public report link, shared dashboard, or other public destination - Professional advisers: lawyers, accountants, auditors, insurers, and consultants subject to confidentiality obligations - Legal and safety purposes: courts, regulators, law enforcement, or other parties where reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or enforce agreements - Business transfers: parties involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and notice obligations - With your instruction or consent

10. Sale and Sharing of Personal Information

We do not sell personal information for money. We do not knowingly sell or share Google API user data for cross-context behavioral advertising. Some analytics or advertising technologies, if enabled, may be treated as a sale or sharing under certain U.S. state laws. Where applicable, we will provide required controls, honor legally recognized opt-out preference signals such as Global Privacy Control, and describe the relevant technologies in our Cookie Policy and consent manager.

11. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security and audit records, resolving disputes, enforcing agreements, meeting platform obligations, and complying with law. Retention depends on the type of data, account status, plan, user settings, connected provider requirements, legal obligations, and whether information is needed for security, fraud prevention, backup, or dispute resolution. OAuth tokens and connection data are retained while the integration is active and for a limited period afterward as needed for deauthorization, audit, security, or legal purposes. We aim to remove or invalidate active credentials promptly after disconnection or verified deletion requests. Following account deletion, we will delete or de-identify account data from active systems within a commercially reasonable period and within deadlines required by applicable law. Residual copies may remain in encrypted backups, logs, fraud-prevention systems, legal archives, and disaster-recovery systems until overwritten or no longer needed in the ordinary course. Published content may remain on third-party services, search-engine caches, archives, or recipient systems after deletion from AutonomySEO. You are responsible for removing content from destinations you control, and third-party retention is governed by those providers.

12. Account Deletion, Integration Disconnection, and Data Requests

You may use available account settings to disconnect integrations, cancel a subscription, or request account deletion. You may also email naor@leader.net with the subject line "Privacy Request" or "Data Deletion Request." We may need to verify your identity and authority before acting. A deletion request may result in permanent loss of projects, prompts, outputs, reports, action logs, snapshots, backups, schedules, connected-account data, and other information. Before requesting deletion, export any information you want to keep and disable autonomous features. Deleting an AutonomySEO account does not automatically delete content previously published to your website, social accounts, repositories, or other third-party destinations. You must remove that content through the relevant destination or request assistance where technically available. We may retain information where required or permitted for legal compliance, fraud prevention, security, accounting, tax, dispute resolution, platform compliance, or the establishment, exercise, or defense of legal claims.

13. Security

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials, using strong authentication, limiting user permissions, securing connected accounts, and promptly notifying us of suspected unauthorized access. Do not place secrets, private keys, passwords, payment-card data, health information, or other highly sensitive data in prompts or content unless the feature expressly supports it and you have a lawful basis.

14. International Data Transfers

We and our service providers may process information in the United States and other countries that may have different data-protection laws from your jurisdiction. Where required, we use appropriate transfer mechanisms, contractual safeguards, or recognized adequacy frameworks. You may contact us for more information about applicable safeguards.

15. Your Privacy Rights

Depending on your location, you may have rights to access, know, correct, delete, restrict, object to, or obtain a portable copy of personal information, withdraw consent, opt out of certain sales, sharing, targeted advertising, or profiling, and appeal a denied request. You may exercise available rights by contacting naor@leader.net. We will respond within the time required by applicable law. We may ask for information to verify identity, account ownership, or authorized-agent status. We will not unlawfully discriminate against you for exercising privacy rights. Where AutonomySEO processes personal information solely on behalf of a customer, we may direct your request to that customer or assist the customer as required.

16. Additional Notice for California Residents

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and obtain information about categories of personal information collected, sources, purposes, and recipients; to opt out of sale or sharing; to limit certain uses of sensitive personal information; and to non-discrimination. The categories we may collect are identifiers, customer records, commercial information, internet or electronic-network activity, geolocation approximated from IP address, professional or employment-related information, inferences, account credentials, and content or communications you provide. We collect these categories from you, your organization, connected services, devices, service providers, and public sources for the purposes described in this Policy. We do not knowingly sell personal information for money. If our use of optional advertising or analytics technologies constitutes sale or sharing under California law, we will provide a "Do Not Sell or Share My Personal Information" or equivalent control and honor valid Global Privacy Control signals where required.

17. Children and Age Requirements

The Service is intended for business and professional users and is not directed to children under 13. You must be at least 18 years old or the age of legal majority in your jurisdiction to create a paid account or authorize autonomous changes. If we learn that we collected personal information from a child contrary to applicable law, we will take reasonable steps to delete it.

18. Third-Party Sites and Services

The Service may link to or integrate with third-party sites and services. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy, security, availability, content, or conduct. Review third-party policies before connecting accounts or transmitting information.

19. Changes to This Privacy Policy

We may update this Policy to reflect changes in the Service, technology, providers, law, or our practices. We will post the updated Policy and revise the Last Updated date. If changes materially affect your rights or our use of previously collected information, we will provide additional notice or request consent where required. Continued use after the effective date constitutes acceptance only to the extent permitted by law.

20. Contact Us

Leader AI Labs, LLC AutonomySEO Privacy Team Email: naor@leader.net Website: https://autonomyseo.com

Disclaimer: This document is provided for general informational purposes and constitutes the binding terms between you and Leader AI Labs, LLC where applicable. It does not constitute legal advice for your own business. For questions specific to your situation, consult a qualified attorney. For inquiries regarding this document, contact naor@leader.net.