Privacy policy

This policy applies to the RomeoSEO marketing website at https://romeoseo.com, the RomeoSEO application at https://app.romeoseo.com, and related support and onboarding communications. In this policy, “RomeoSEO,” “we,” “us,” and “our” refer to the operator of the RomeoSEO service.

We are the controller of account, billing, marketing-site, and service usage information described here. When you ask us to process content or other information on behalf of your business, you are responsible for having the rights and notices needed for that information.

Information you give us

• Account details such as your email address, name, profile image, and authentication-provider identifiers. RomeoSEO supports Google sign-in and passwordless email links, so we do not store a RomeoSEO password.
• A website domain, business profile, conversion goals, competitors, brand tone, editorial rules, questions, answers, approvals, and other settings you provide.
• Contact details submitted for access, onboarding, support, or a call.

Website and SEO information

When you connect a site, we crawl its publicly available pages. We may store URLs, sitemap and robots.txt information, status codes, titles, descriptions, headings, canonical URLs, content excerpts, forms and call-to-action links, internal-link relationships, screenshots, visual style information, and technical or SEO signals. We also store the audits, ranking snapshots, keyword research, recommendations, tasks, drafts, changes, and verification results RomeoSEO creates for you.

Connected-service information

• Google: basic profile information used for sign-in, Search Console properties and permissions, and the search performance data described in the next section.
• GitHub: installation and repository identifiers, repository structure and editable source files, commit and branch information, source mappings, proposed diffs, pull requests, checks, and relevant webhook events.
• Framer and WordPress: project or site identifiers, CMS collections, field mappings, item content, drafts, write results, and connection credentials when you choose to connect them.

Billing, device, and usage information

Stripe processes payment-card and billing details. RomeoSEO stores customer and subscription identifiers, plan status, and renewal dates, but not full card numbers. Our sites and infrastructure may receive IP addresses, browser and device details, requested pages, referral data, timestamps, interactions such as CTA clicks and scroll depth, and error or diagnostic information. The marketing site may store an analytics identifier in browser local storage. We infer your country from your IP address to show the appropriate onboarding or waitlist option. The app uses cookies that are necessary for sign-in and security.

If you sign in with Google, we request your basic profile and email. If you connect Search Console, RomeoSEO requests the read-only Search Console scope. We access the properties available to your Google account and, for the property you select, queries, pages, clicks, impressions, click-through rate, and average position. We use this information to build your business profile, run SEO audits and keyword research, prioritize tasks, measure changes, and display results in your account.

• RomeoSEO cannot write to or change your Search Console property.
• We do not sell Google user data, use it for advertising, or use it to train a general-purpose AI model.
• We share it only with service providers where needed to deliver or secure the user-facing features you requested, or where the law requires us to do so.
• Search Console connection tokens stored for a site are encrypted before being written to our database.

RomeoSEO’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke RomeoSEO’s access from your Google Account permissions. Deleting the related site or your RomeoSEO account removes the stored connection and associated Search Console data from our active product database.

• Provide, operate, authenticate, and secure RomeoSEO.
• Crawl connected sites; produce profiles, audits, keyword research, tasks, drafts, images, source changes, CMS drafts, and verification.
• Process subscriptions, trials, invoices, and account administration.
• Send magic links, service messages, support replies, onboarding communications, and product updates you have asked to receive.
• Diagnose failures, monitor reliability, prevent abuse, enforce our terms, and improve the product and its user experience.
• Comply with law and protect users, RomeoSEO, and third parties.

Where privacy law requires a legal basis, we rely on performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the service. You can withdraw consent where consent is the basis, without affecting earlier processing.

We do not sell personal information. We disclose information only as needed to operate the service, follow your instructions, complete a transaction, protect the service, or comply with law. Provider access is limited to the information reasonably needed for its role.

We may also disclose information in a corporate transaction, such as a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections and notice where required.

We keep account and service data while your account is active and as needed to provide RomeoSEO. You can permanently delete an individual site or your full account from Settings. This removes the related site, crawl, profile, Search Console, GitHub, Framer, WordPress, research, task, and run records from the active product database through our account-deletion process.

Short-lived authentication, OAuth, and rate-limit records expire when they are no longer needed. Some records may remain for a limited period in backups, provider systems, security logs, public media caches, or where retention is required for tax, accounting, dispute, fraud, or legal purposes. Deleting RomeoSEO data does not delete information held independently by a connected provider; use that provider’s controls as well. We delete or anonymize information when it is no longer reasonably needed for these purposes.

We use access controls, scoped provider permissions, encryption in transit, secret redaction in error reporting, and application-level encryption for stored Search Console, Framer, and WordPress connection secrets. GitHub access is controlled through the GitHub App installation you authorize. No service is perfectly secure, so please contact us promptly if you believe your account or integration has been compromised.

Depending on where you live, you may have the right to access, correct, export, delete, restrict, or object to our use of your personal information, withdraw consent, or appeal a decision about a request. You may also have the right to complain to your local data-protection authority. We do not discriminate against anyone for exercising a privacy right.

Use the controls in Settings or email team@romeoseo.com. We may need to verify your identity and authority before completing a request. You can unsubscribe from optional email using its unsubscribe link; essential account and security messages will still be sent.

RomeoSEO does not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

RomeoSEO and its providers may process information in countries other than where you live. Where required, we use recognized transfer safeguards, such as adequacy decisions or contractual protections. You can contact us for more information about safeguards relevant to your data.

RomeoSEO is a business service and is not directed to children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to us.

We may update this policy as RomeoSEO changes. We will update the date above and provide additional notice when a change is material and the law requires it.

Questions or privacy requests: team@romeoseo.com.