Privacy Policy

The data controller is Nicolas Benedetti, reachable at hello@chimpanseo.app.

ChimpanSEO collects the following personal data:

• Registration data: email address, name (optional)
• Usage data: articles generated, connected sites, number of API requests
• WordPress credentials: site URL, username, and Application Password — encrypted with AES-256 and never readable in plain text
• Payment data: handled entirely by Stripe Inc. — ChimpanSEO does not store credit card information
• Technical data: IP address, browser, operating system (anonymous technical logs)

Data is processed to:

• Deliver the ChimpanSEO service (article generation, WordPress publishing)
• Manage user accounts and authentication
• Process subscription payments
• Send service communications (confirmations, updates, weekly digest)
• Improve the product through aggregated and anonymous usage data
• Comply with legal and tax obligations

Processing is based on:

• Contract performance (Art. 6.1.b GDPR) — to deliver the service
• Consent (Art. 6.1.a GDPR) — for marketing communications
• Legitimate interest (Art. 6.1.f GDPR) — for security and fraud prevention
• Legal obligation (Art. 6.1.c GDPR) — for tax compliance

ChimpanSEO uses the following third-party providers, each with their own privacy policy:

• Supabase Inc. (USA) — database and authentication
• Vercel Inc. (USA) — hosting and infrastructure
• Stripe Inc. (USA) — payments
• DeepSeek / Anthropic — AI text generation (prompts do not include personal data)
• Resend Inc. — transactional email delivery
• Google LLC (USA) — Google Analytics 4 for aggregated site usage statistics, with IP anonymization enabled

Data transfers to the USA are based on Standard Contractual Clauses (SCCs) approved by the European Commission.

Account data is retained until account deletion. Billing data is retained for 10 years for tax compliance (Italian D.P.R. 600/73). Technical logs are deleted after 90 days.

Under the GDPR, you have the right to:

• Access — obtain a copy of your data
• Rectification — correct inaccurate data
• Erasure — "right to be forgotten"
• Portability — receive data in a structured format
• Objection — object to processing based on legitimate interest
• Restriction — restrict processing in certain circumstances

To exercise your rights, write to hello@chimpanseo.app. You also have the right to lodge a complaint with the Italian Data Protection Authority.

ChimpanSEO uses technical cookies necessary for the service to function (authentication session) and third-party analytics cookies (Google Analytics 4) with IP anonymization for aggregated statistical analysis. For more information, see our Cookie Policy.

This Privacy Policy may be updated. In case of substantial changes, users will be notified by email. Continued use of the service after notification constitutes acceptance of the changes.