Now livePublishes straight intoWordPress,Shopify,Wix, Webflow and Ghost. Any other site, hosted on your own domain →

Privacy Policy

Last updated 27 September 2026

1. Who we are

This Privacy Policy explains how Helio SEO ("we", "us") handles personal data. For content and data you put into the Service, you are the data controller and we act as your processor; for the data we collect to run our business and provide the Service to you, we are the controller.

2. Data we collect

Account and billing data (name, email, company; payment details are taken and held by Stripe, not by us). The public content of websites you connect, which we scan to plan and write articles. Publishing credentials you provide (for example an API key for your website platform), used only to deliver articles to your site. Usage data (logins, actions, IP address). Communications you send to us.

Anonymous counts for the articles we publish for you. Each article carries a small script that tells us, once per read, which site sent the reader (for example Google or ChatGPT), and we count clicks on the article's call to action. We keep daily totals only: no cookie, no identifier and no IP address is stored, so nothing we hold can be linked to a reader.

3. How we use data and our lawful bases

To provide and operate the Service (performance of our contract with you). To secure, maintain and improve the Service and prevent abuse (legitimate interests). To bill you and keep records (contract and legal obligation). To send service messages and, where permitted, marketing messages (legitimate interests or consent, which you can withdraw).

4. AI processing

Articles are written with the help of third-party AI models. The material sent for that processing is the public content of your website, your brief and settings, and research gathered for the article. We do not send your payment details or publishing credentials to AI providers.

5. Sharing and sub-processors

We do not sell personal data. We keep the list of companies that handle data for us short, and we name every one of them here. Each is bound by a data processing agreement and we will update this list before adding to it.

Hetzner Online GmbH (Germany): hosting, storage and backups. Our servers are in Hetzner's Helsinki data centre, inside the EU.

Stripe: payments and invoicing. Card details go straight to Stripe and never touch our servers.

Brevo (Sendinblue SAS, France): delivery of the emails we send you, such as weekly digests, article notices and account notices.

Anthropic PBC (United States): the Claude models that plan and write articles. Content sent to the model is used to answer that request only and is not used to train models.

Services you connect yourself, such as your website platform and Google Search Console, receive data only at your direction and under their own terms. They are not our sub-processors.

6. International transfers

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for any period required to meet legal, accounting or reporting obligations, after which it is deleted or anonymised.

8. Security

We use technical and organisational measures including encryption in transit, access controls, and per-account isolation. Publishing credentials are held server-side, are never exposed back to the browser once saved, and are used only to deliver articles to your own site.

9. Your rights

Subject to applicable law you may request access to, correction or deletion of your personal data, object to or restrict certain processing, and request portability. To exercise your rights, contact hello@helioseo.io. You also have the right to complain to the Information Commissioner's Office (ICO), where we are registered under reference ZC240034.

10. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not run third-party advertising or tracking cookies on the Service.

11. Children

The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from children.

12. Changes

We may update this policy and will post the current version here with the date it last changed.

13. Contact

For any privacy question or request, contact hello@helioseo.io.

Terms of Service and Privacy Policy