Privacy policy
What personal data AISEOExpert.co collects when you visit, use a free tool or contact us, why, who processes it, how long it is kept, and your rights.
Last updated
1. Who is responsible
AISEOExpert.co is operated by Agochar Tech LLP, Rajkot, India. We are the data controller for the personal data described on this page. Contact: hello@aiseoexpert.co.
This policy covers the website at aiseoexpert.co, the free tools on it and the enquiries you send us. Data we process during a consulting engagement (for example, your Search Console data) is covered by the engagement agreement and a data processing addendum where one is needed.
2. What we collect, and why
2.1 Visiting the site
The site runs on our own server, a virtual private server rented from Contabo in its India data centre. To deliver pages and protect the site from abuse, the web server records your IP address, browser, the page you requested and the time in short-lived access logs, which the server rotates and deletes automatically. Legal basis: our legitimate interest in running a secure, available site.
2.2 Analytics (only with your consent)
If you accept analytics in the cookie prompt, we load two services:
- Google Analytics 4 (Google LLC) records the pages you view, where you came from, your approximate location (country or city, derived from your IP address, which Google does not store), device and browser, and the events we define, such as a click on a call-to-action, a form submission or a tool run. IP addresses are truncated. We do not enable Google Signals or advertising features, and we do not share this data with Google for its own advertising purposes.
- Microsoft Clarity (Microsoft Corporation) records how you interact with pages: clicks, scrolling, mouse movement and session replays, together with device, browser and approximate location. Clarity masks text you type into forms. We use it to find pages that confuse people and to fix them.
Neither service runs until you consent, and you can withdraw consent at any time (see the Cookie policy). Legal basis: your consent. If you decline, the site works exactly the same and no analytics cookie is set.
2.3 The contact form and email
When you submit the contact form we collect:
- your name, work email address and company website;
- the reason you selected and any message you wrote;
- a spam-check token from Cloudflare Turnstile, which may process your IP address and browser signals to decide whether the submission is automated. We never see the signals, only the pass or fail result.
The submission is saved in our own database on that server first, so an enquiry is not lost if an email fails, and is then sent to our mailbox by our email delivery provider,Zoho ZeptoMail. We reply from that mailbox. Only we can access the database. We use the information to answer you, to prepare for a call if you ask for one, and to keep a record of the conversation. If you email us directly we keep that correspondence in the same way. Legal basis: taking steps at your request before a contract, and our legitimate interest in answering enquiries.
The same applies when you ask for the sample Diagnostic report: we collect your email address and the Turnstile result, send you one email with the sample (or a note that it is on its way), and keep the request for the same period as an enquiry. Nothing else is sent to that address.
2.4 Booking a call
If you book a call, scheduling is handled by Calendly under its own privacy policy. We receive the name, email address, time and any notes you enter there, and the calendar invitation that follows.
2.5 Using the free tools
The tools under /tools/ run in your browser. When a check needs to read a page, your browser sends the address you entered to our server, which fetches that page and returns the parts the tool needs. We record the domain you checked (not the full address), which tool you used and the time, so we can see how the tools are used; we do not store your IP address or anything else about you with that record, and we delete it after 90 days. Successful fetches are kept in the server's memory for ten minutes so that repeated checks of the same address do not hit the target site again; that cache holds the address and the fetched content, nothing about you. The Core Web Vitals tool sends the address you enter to Google's PageSpeed Insights API, which processes it under Google's privacy policy. Tools that read a file you choose (such as the AI bot log analyser) process it in your browser only; the file never leaves your device.
2.6 Search engine and webmaster tools
We use Google Search Console, Bing Webmaster Tools and Yandex Webmaster to see how those search engines crawl, index and show this site. These services send us data about the site and about search queries in aggregate; they do not collect data from your visit, and the only trace on the site is a verification tag in the page code.
3. Who we share data with
We share personal data only with the service providers named above, each acting under a contract that limits what they may do with it: Contabo GmbH (server hosting), Cloudflare, Inc. (Turnstile), Google LLC (Analytics, PageSpeed Insights, Search Console), Microsoft Corporation (Clarity, Bing Webmaster Tools), Yandex LLC (Yandex Webmaster), Zoho Corporation (ZeptoMail, email delivery) and Calendly LLC (scheduling). We do not sell personal data and we do not share it with advertisers. We may disclose data if the law requires it.
4. International transfers
We are based in India, and the providers above operate in the United States, the European Union and other countries. Where your data is transferred out of the country you live in, we rely on the safeguards our providers offer, including the European Commission's standard contractual clauses and, for United States providers, the EU-US Data Privacy Framework where they are certified.
5. How long we keep data
- Enquiries and email: for as long as the conversation is active and for 24 months after the last contact, then deleted, unless an engagement follows, in which case the engagement agreement sets the period. The copy in our database is deleted automatically on the same schedule; database backups are kept for 14 days.
- Google Analytics: event data for 14 months; aggregated reports for as long as we keep the account.
- Microsoft Clarity: session recordings and heatmaps for the period Microsoft sets for the service; we do not extend it.
- Server access logs: short-lived; rotated and deleted automatically.
- Tool checks (domain, tool and time): 90 days.
- Tool fetch cache: ten minutes, in memory.
6. Cookies
The site sets no cookies for its own content. Turnstile sets a cookie needed for the spam check on the contact and sample-report forms, and Google Analytics and Microsoft Clarity set cookies only after you consent. Each cookie, its purpose and its lifetime are listed in the Cookie policy, together with how to change your choice.
7. Your rights
Depending on where you live, data protection law (including the EU and UK General Data Protection Regulation and India's Digital Personal Data Protection Act 2023) gives you the right to ask what personal data we hold about you, to have it corrected or deleted, to receive a copy in a portable form, to restrict or object to how we use it, and to withdraw a consent you have given. To exercise any of these, email hello@aiseoexpert.co. We respond within one month. If you are not satisfied, you may complain to the data protection authority in your country.
8. Security
The site is served over HTTPS. The contact form is protected against automated submissions, submissions are transmitted over encrypted connections, and access to our mailbox and provider accounts is limited to the people who need it.
9. Children
This site is for businesses and is not directed at children under 16. We do not knowingly collect data from them.
10. Changes
We will update this page when our practices change and show the date of the last update above. A material change, such as a new analytics provider, is also noted in the cookie prompt.