Privacy Policy

1. Introduction

BOUMZOUD LLC ("we," "us," "our"), a New Mexico LLC located at 2201 Menaul Blvd NE, Suite A, Albuquerque, NM 87107, USA, operates the AutoSEO platform at https://autoseo.it.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

2.1 Information You Provide: Name, email address, billing information, company name, website URLs, and any content you submit through the Service.

2.2 Information Collected Automatically: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referral URLs, and cookies/similar technologies.

2.3 Payment Information: Payment card details are collected and processed directly by our payment processor, Stripe, Inc. We do not store your full credit card number on our servers. Please refer to Stripe's Privacy Policy for details.

2.4 Third-Party Authentication: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google password.

3. How We Use Your Information

We use collected information to: (a) provide, maintain, and improve the Service; (b) process transactions and send billing communications; (c) respond to support requests; (d) send product updates and marketing communications (with opt-out); (e) analyze usage patterns to improve user experience; (f) detect, prevent, and address fraud and security issues; (g) comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal bases for processing include: (a) Contractual necessity — to provide the Service you requested; (b) Legitimate interests — to improve our Service, prevent fraud, and market our products; (c) Consent — for marketing emails and non-essential cookies; (d) Legal obligation — to comply with applicable laws.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with: (a) Service providers — Stripe (payments), Google Cloud (hosting), Gemini AI (content generation); (b) Legal authorities — when required by law, subpoena, or court order; (c) Business transfers — in connection with a merger, acquisition, or sale of assets; (d) With your consent — for any purpose you explicitly authorize.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 90 days for legal compliance and dispute resolution. Anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to: (a) Access your personal data; (b) Rectify inaccurate data; (c) Delete your data ("right to be forgotten"); (d) Restrict processing; (e) Port your data to another service; (f) Object to processing; (g) Withdraw consent at any time.

To exercise these rights, contact us at privacy@autoseo.it.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including: the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal data), and the right to non-discrimination for exercising your privacy rights.

9. Cookies and Tracking

We use cookies and similar technologies for essential functionality, analytics, and preferences. For detailed information, see our Cookie Policy. You can control cookies through your browser settings.

10. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256), secure authentication with HMAC-SHA256 signed sessions, regular security audits, access controls and least-privilege principles, and hosting on Google Cloud Platform with SOC 2 compliance.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. International Data Transfers

Your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards for international transfers in compliance with GDPR and applicable data protection laws.

12. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or notice on the Service. The "Last Updated" date reflects the most recent revision.

14. Contact Us