Privacy Policy

Last updated: October 2, 2026

This policy explains what information Eleven SEO ("we", "us") collects when you use our website at elevenseo.co and our application at app.elevenseo.co (together, the "Service"), how we use it, and the choices you have.

1. Information we collect

• Account information: your name and email address, and a password that we store only as a one-way hash. If you sign in with Google, we receive your name, email address and Google account identifier.
• Information you add to the Service: websites and domains, keywords you track, audit and analysis results, content plans, tasks, articles you generate, messages you send to the SEO Assistant, and feedback you submit.
• Google Search Console data (optional): if you connect a Search Console property, we read search performance data for that property (queries, pages, clicks, impressions and positions). See section 4.
• Google Analytics data (optional): if you connect a Google Analytics 4 property, we read traffic reports for that property (sessions, users, engagement, channels, devices and pages). See section 4.
• Your AI provider key (optional): if you add your own OpenRouter API key in Settings to use your own AI account, we store it encrypted.
• Technical information: IP address, browser type and basic usage records that our servers and session records keep for security, troubleshooting and abuse prevention. If you accept analytics cookies (see section 5), the analytics tools we use also collect details of your visit, such as the pages you view, your device and browser, and your approximate location.

2. How we use information

• To provide, operate and improve the Service, including running the lookups, audits and checks you request.
• To authenticate you, send account emails such as password resets, and respond to your messages.
• To manage credits and prevent abuse or excessive use.
• To keep the Service secure and to meet legal obligations.

We do not sell your personal information. We do not use what you add to the Service, such as your websites, keywords, content or Google data, for advertising.

3. Service providers who process data for us

We share only what is needed to deliver the features you use:

• DataForSEO: receives the keywords and domains you look up in order to return search, ranking and backlink data.
• AI providers: when you use the SEO Assistant, Content Writer or Content Tools, your prompts and the content you submit are sent to the AI provider we have connected to the Service (for example OpenAI, Anthropic or Google) to produce the reply, or, if you added your own key in Settings, to OpenRouter and on to the model provider you choose. When you run an AI Visibility check, the prompt you enter is sent to the relevant AI platform (for example Google, OpenAI or Perplexity) or to DataForSEO to obtain the answer.
• Google: the Google Search Console and Google Analytics APIs, if you connect them, and Google Fonts, which our pages load to display text (Google can see your IP address when fonts load).
• Paddle (payments): if you buy a paid plan, Paddle is the merchant of record. It collects your payment details, name, billing address and email on its own checkout, calculates and pays the tax, and tells us your subscription status so we can give you the plan. We never see or store your card number. Paddle's own privacy notice applies to what it holds.
• Analytics and measurement providers: if we use them and you accept analytics cookies (see section 5), Google (Analytics, Tag Manager and Ads), Microsoft (Clarity) and Meta (Meta Pixel) receive information about your visit.
• Hosting and email: our web hosting and email delivery provider stores and transmits Service data on our behalf.

We may also disclose information if required by law or to protect the rights, safety and security of our users or the Service.

4. Google user data

Eleven SEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• What we request: only the read-only Search Console scope (https://www.googleapis.com/auth/webmasters.readonly) and, if you connect Google Analytics, the read-only Analytics scope (https://www.googleapis.com/auth/analytics.readonly). We cannot change anything in your Search Console or Analytics accounts.
• What we use it for: solely to show you your own search and traffic performance inside Eleven SEO, such as your rankings overview, tracked keywords and traffic reports. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide these features, to comply with law, or as part of a merger or sale with notice to you.
• No human access: our team does not read your Search Console or Analytics data unless you ask us to for support, it is needed for security or abuse investigation, or the law requires it.
• How we store it: the access and refresh tokens are stored encrypted. We keep results only as long as needed to show them to you.
• Your control: you can disconnect a property in Settings at any time, and you can also revoke access at myaccount.google.com/permissions. After you disconnect, we stop reading your data and remove the stored tokens.

4a. The Eleven SEO Toolbar browser extension

If you install the Eleven SEO Toolbar extension for Chrome, it works as a thin window onto your own account rather than a separate collector of data:

• What it reads from pages: on a Google search results page, only the search term in that page's own address bar (the q parameter). It does not read the results, the page's text, your browsing history or anything else on the page, and it does not run on any site other than Google search results.
• What it sends, and where: the search term you looked up, the country you chose for the data, and your sign-in token are sent to our API to fetch keyword data, exactly as if you had typed the term into the Eleven SEO app yourself; it uses the credits your plan already has. Nothing is sent anywhere else.
• Signing in: the extension signs in through the same secure, read-only connection method we built for AI assistants like Claude and ChatGPT (OAuth, with a short-lived token). It never asks for or stores your password, and it cannot change or delete anything in your account.
• What it stores: only your sign-in token, kept in the extension's own isolated storage on your device (not shared with elevenseo.co or any other site, and not synced to Google's servers). Signing out, or removing the extension, removes it.
• Your control: disconnect the extension at any time from its own menu or from Settings in the app; this immediately revokes its token.

5. Cookies, local storage and analytics

What is always used. The application keeps a sign-in token in your browser's local storage so you stay logged in, and our servers keep session records. If you answer the cookie banner, your answer is saved in your browser's local storage for a year. These are needed for the Service to work, so they do not depend on your consent. Our own pages set no cookies.

Analytics and measurement, only with your permission. We may use tools from Google (Analytics, Tag Manager and Google Ads conversion measurement), Microsoft (Clarity) and Meta (Meta Pixel) to understand how the Service is used and how our own advertising performs. These tools set cookies and send information about your visit to the provider: the pages you view, clicks and scrolling, your device and browser, your approximate location from your IP address, and the page you came from. When we use them, a banner asks you first, and nothing from these tools is loaded until you press Accept. If you press Decline they are not loaded, and any of their cookies already on your device are removed. Where the GDPR or similar laws apply, our basis for these tools is your consent, which you can withdraw at any time. Google Ads and the Meta Pixel are used only to measure the results of our own advertising.

You can change your choice whenever you like with the button below, and you can block or delete cookies in your browser settings.

Cookie settings

6. Retention and deletion

We keep your information while your account is active. You can ask us to delete your account and associated data by contacting us at the address below, and we will do so unless we must keep something to meet a legal obligation or resolve a dispute. Backups are removed on their normal cycle.

7. Security

We use HTTPS for all traffic, hash passwords, and encrypt stored provider keys and Google tokens. No system is perfectly secure, so please use a strong, unique password.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict some processing. To exercise these rights, contact us below.

9. Children

The Service is not directed to anyone under 16, and we do not knowingly collect their personal information.

10. International transfers

Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for those transfers.

11. Changes to this policy

We may update this policy from time to time. We will change the date above and, for significant changes, tell you in the Service or by email.

12. Contact

Questions or requests: support@elevenseo.co.