1. Data Controller
CleverSEO Oy (Business ID 3197294-5)
Vanha kelkkamäki 19 A 2, 00570 Helsinki, Finland
Privacy contact: seo@cleverseo.fi
2. What This Policy Covers
This policy covers the CleverSEO service used by the CleverSEO for WP plugin for the site crawl, the AI site summary, and AI-generated fix suggestions, and by the plugin and the separate CleverSEO Premium add-on for entitlement and update checks. The plugin’s local features (the internal audit, history, and PDF reports) work without the service, and no data is transferred to CleverSEO from them.
Nothing is sent to the service until the site administrator clicks “Connect to CleverSEO” in the plugin. If the administrator chooses “Not Now”, the plugin makes no connection.
The plugin keeps its own data (audit results, fix history, and the WordPress user ID of the person who started an audit or applied a fix) in your own WordPress database. That data is not sent to us. The plugin does not record IP addresses or referrers.
3. What Data We Process
Site connection data: the site address (URL) and the domain derived from it, a technical site key (a random identifier, stored only as a hash), the connection timestamp, the plugin version, and service status data. The service is anonymous: we do not collect names, email addresses, or user accounts in this version of the service.
Data sent for the site crawl: when an audit starts with crawling enabled, the maximum number of pages to crawl. The service then crawls the public pages of your site.
Data sent for the AI site summary: a summary of the audit findings (for each check type, the number of findings, how many of them could not be verified, their severity, and up to two example finding descriptions), the number of content items on the site, the WordPress version, whether WooCommerce is active (and, when it is, the number of published products), the active SEO plugin, and the site’s content languages.
Data sent for fix suggestions: for each finding, its check type and description, the current value of the field and whether it exists, the content language, the page title and the beginning of its content, the value the SEO plugin’s template currently produces where relevant, and the image title for image findings; for a meta title, the character-length range the suggestion must fit and whether the SEO plugin appends anything to it. As context: the site name and home page address, a short sample of content from the site’s pages, products or posts, and its main language.
Entitlement and update checks: if the separate CleverSEO Premium add-on is installed on a connected site, it asks the service whether the site has a valid Premium entitlement (once a day, when the add-on is activated, and when the administrator clicks “Refresh Status”). Copies of the plugin and the add-on that are updated through CleverSEO’s own update channel also ask the service for the latest available version and download it from there. These requests carry only the site address, the site key, and the plugin version. For each site, the service keeps an entitlement record: the product, its status and validity period, and how the entitlement was granted.
Other: when an audit is stopped, the reason for stopping.
We never receive WordPress user accounts, passwords, email addresses, or order/customer data from the plugin.
Please note: if the published content of your site itself contains personal data (for example, a staff introduction page), such content may be included in the processed content samples in the same form it is visible to your site’s public visitors.
Usage and quota data: audit and fix-suggestion counts per domain, a record of each job without its content (type, status, and times), usage and cost records, and technical service logs.
Consent: connecting requires the administrator’s consent in the plugin. The service checks that consent was given when the site is connected, but does not store it.
4. Purpose and Legal Basis
Data is processed to provide the CleverSEO service: crawling the site, producing the AI site summary and fix suggestions, managing usage quotas, and technical operation of the service (performance of a contract / legitimate interest).
5. Sub-processors
The service uses the following sub-processors:
1. Anthropic (AI analysis) — content samples and audit context are processed to produce the site summary and fix suggestions.
2. DataForSEO (technical site crawling) — the public pages of your site are fetched and analyzed the same way search engines see them.
3. Hetzner (server infrastructure, EU) — the technical platform and data storage of the service, located in the EU.
DataForSEO OÜ is an EU-based company (Estonia), and Hetzner’s server infrastructure is located in the EU. Where processing takes place outside the EU/EEA (Anthropic, United States), transfers are protected by the European Commission’s Standard Contractual Clauses (SCC 2021), incorporated in Anthropic’s Data Processing Addendum. Anthropic does not use data processed via its API to train its AI models.
6. Retention Periods
1. Job content (the data sent for the crawl, the summary, and fix suggestions, the results — including an AI summary response that the service’s own quality check rejected — and the crawl’s page data): deleted automatically 30 days after the job ends, whether it completed, failed, stopped because the quota ran out, or was stopped by the user. Jobs that never finish are ended automatically first, so their content is deleted on the same schedule.
2. Kept after that: the site address and domain, the hashed site key, quota counters, entitlement records, the job records without content, usage and cost records, and technical service logs. These are not currently deleted automatically; you can ask for them to be deleted at any time (section 7).
7. Your Rights
You have the right to access your data, request rectification or erasure, object to processing, request restriction of processing, and receive your data in a portable format where the legal conditions for portability are met. Where processing is based on your consent (for example, connecting your site), you can withdraw that consent at any time; this does not affect the lawfulness of processing carried out before withdrawal. Contact: seo@cleverseo.fi. You also have the right to lodge a complaint with a supervisory authority (in Finland, the Office of the Data Protection Ombudsman).
Because the service is anonymous (we do not collect contact details), we need your site’s domain and verification of site control to match requests to data.
8. Changes to This Policy
We will announce material changes on this page. Last updated: 2 November 2026.
This policy covers the CleverSEO service. The CleverSEO website and its visitors are covered by a separate privacy notice: https://cleverseo.fi/website-privacy/.