Privacy Policy.

Last updated: 10 June 2026

This Privacy Policy explains how Optimatio (“Optimatio”, “we”, “us” or “our”) collects, uses, stores, shares and protects information when you use the Optimatio website at optimatio.io and the Optimatio application at app.optimatio.io (together, the “Service”). By creating an account or using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Who we are

Optimatio is an AI-assisted SEO platform that helps brands and agencies audit websites, track keywords and search visibility, generate content and reports, and apply on-page improvements. Optimatio is operated from Australia. For any privacy question, or to exercise your rights, contact us at privacy@optimatio.io.

2. Information we collect

2.1 Information you provide

• Account information such as your name, email address, company name, password (stored only as a secure hash by our authentication provider), language and timezone.
• Billing information. Payments are processed by Stripe. We do not see or store your full card number; we store only a Stripe customer reference, your plan, and billing status.
• Content and settings you enter, such as the websites you add, brand and business details, keywords, and your approvals of agent output.
• Support communications you send to us.

2.2 Website data we process on your instruction

When you add a website you own or are authorised to manage, our system fetches and analyses publicly available pages of that website (URLs, page content, metadata, links, images and structured data) and renders page previews on demand to show you where issues occur. We also retrieve keyword, ranking and search-engine-results data from our data providers for the keywords you choose to track.

2.3 Google user data (GA4, Search Console, Tag Manager)

If you choose to connect your Google account, Optimatio requests access only to the following read-oriented scopes, and only to power features you can see in the app:

• Google Analytics (GA4) — read-only access to your analytics reporting data (for example sessions, users, traffic sources and conversions) so we can show traffic and engagement insights and include them in your reports and recommendations.
• Google Search Console — read-only access to your search performance data (impressions, clicks, queries, positions and indexing/coverage information) so we can show search visibility insights, diagnose ranking issues and inform your roadmap.
• Google Tag Manager — access to your container and tag configuration so we can verify and assist with measurement setup.

We request the minimum scopes needed for these features, and we ask for them in context when you connect Google. Google user data is used solely to provide and improve these user-facing features for you, the account holder who authorised the connection. We do not sell Google user data, we do not use it for advertising or retargeting, and we do not use it to assess credit-worthiness. We do not use Google user data to train machine-learning or AI models.

Limited Use disclosure. Optimatio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2.4 Information collected automatically

• Usage and device data such as IP address, browser type, pages viewed and actions taken, used to operate, secure and improve the Service.
• Cookies and similar technologies, used for authentication, session management, preferences and (on our marketing site) analytics. You can control non-essential cookies through your browser or our cookie controls.

3. How we use information

• To provide, operate and maintain the Service, including audits, keyword and visibility tracking, content generation, reports and on-page recommendations.
• To generate the insights, reports and recommendations you request. Aggregated or derived insights (which may include figures derived from your connected Google data) may be processed by our AI sub-processors strictly to produce your own reports and recommendations within the app, under confidentiality, and never for any other purpose.
• To process payments, manage subscriptions and add-ons, and prevent abuse of trials.
• To provide customer support and respond to your requests.
• To secure the Service, detect and prevent fraud or abuse, and comply with legal obligations.
• To send service and account communications, and (with your consent where required) product updates you can opt out of.

4. Legal bases (where GDPR or similar laws apply)

We process personal data to perform our contract with you (providing the Service), on the basis of our legitimate interests (operating, securing and improving the Service), with your consent (for example optional connections and non-essential cookies), and to comply with legal obligations. You may withdraw consent at any time.

5. How we share information

We do not sell your personal information. We share information only with service providers (“sub-processors”) who help us run the Service, under contracts that require them to protect it and use it only on our instructions:

• Supabase — database, authentication and file storage.
• Stripe — payment processing and subscription billing.
• Anthropic and OpenAI — AI processing used to generate content, insights and reports. Data sent to these providers via their APIs is not used to train their models.
• DataForSEO — keyword, ranking and search-results data (we send keywords and domains, not your Google user data).
• Browserless — on-demand rendering of page previews.
• Email and infrastructure providers — to deliver notifications and host the Service.

We may also disclose information to comply with applicable law, enforce our terms, protect rights and safety, or in connection with a merger, acquisition or sale of assets, in which case we will obtain your consent where required for any transfer of Google user data.

Google user data is never shared, transferred or sold except as permitted by the Limited Use requirements set out above (for example to provide the user-facing feature you requested, for security, or to comply with law).

6. International transfers

We and our sub-processors may process information in countries other than where you live. Where we transfer personal data internationally, we take steps to ensure an appropriate level of protection consistent with applicable law.

7. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting and security obligations, after which it is deleted or anonymised. You can request deletion at any time (see below). When you disconnect Google or close your account, associated Google user data is deleted from our active systems.

8. Security

We take reasonable and appropriate technical and organisational measures to protect information, including encryption in transit, access controls, and storage with reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to those who need it to operate the Service.

9. Your rights and choices

• Access, correction and deletion of your personal data. You can edit much of it in the app, or contact us at privacy@optimatio.io.
• Account and data deletion. You may delete your account at any time from your account settings or by emailing us; we will delete or anonymise your personal data as described above.
• Disconnect Google and revoke access. You can disconnect Google at any time in the app’s Connections settings. You can also review and revoke Optimatio’s access to your Google account at myaccount.google.com/permissions. Revoking access stops future data access and we delete the associated Google user data from our active systems.
• Marketing opt-out, data portability and objection where those rights apply to you.

To exercise any right, email privacy@optimatio.io. You also have the right to complain to your local data protection authority.

10. Cookies

We use strictly necessary cookies for authentication and security, and, on our marketing site, analytics cookies to understand usage. You can manage non-essential cookies through your browser settings or our cookie controls. Disabling necessary cookies may prevent you from signing in.

11. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, including any change to how we use Google user data, we will update the date above, post the new Policy here, and where required notify you and ask for consent before the new use takes effect.

13. Contact us

Questions about this Policy or your data: privacy@optimatio.io. General support: support@optimatio.io.