Privacy Policy

Last updated: October 8, 2026

This policy explains what personal data we collect on aeoseo.com, why we collect it, who we share it with and what rights you have.

Who we are

AEO SEO is a two-person studio for SEO, AEO and design. We also publish a blog about AI search and SEO. In this policy, “we”, “us” and “our” mean AEO SEO. “You” means anyone who visits the site or contacts us.

We decide how and why personal data is used on this site. Under data protection laws such as the GDPR, that makes us the data controller.

For any privacy question or request, send us a message through our contact page. Please mention privacy in your message.

What we collect

When you use the contact form

When you send the form on our contact page, we receive what you type in. That is your name, email address and website, the topic and budget range you pick, and your message.

The form runs on Jetpack Forms by Automattic. It also stores your IP address with the message, to help prevent spam and abuse. The message is saved in our WordPress dashboard and sent to our email inbox.

When you subscribe to the newsletter

If you subscribe, we collect your email address. The newsletter runs on Jetpack Newsletter, which uses Automattic’s WordPress.com service to store the subscriber list and send the emails.

When you sign up, Automattic also records technical details such as your IP address, to prevent spam and abuse. It gives us basic email stats, such as how many people opened an email or clicked a link. Every email has a link to unsubscribe.

When you visit the site

We use Jetpack Stats to count visits. It processes data such as your IP address, browser type and language, and country. It also records the pages you view, the page that sent you here and links you click to leave the site. Jetpack also measures how fast our pages load.

We see totals and summaries, such as views per page and top referring sites. We do not use Stats to identify individual visitors.

Our web host, Hostinger, keeps server logs. A log entry usually holds your IP address, the date and time, the page requested and your browser details.

LiteSpeed Cache stores ready-made copies of our public pages so they load faster. It does not build a profile of you.

Jetpack’s brute force protection checks the IP address and username of anyone who tries to log in to our site dashboard. It blocks repeated failed attempts.

When you work or write with us

If you hire us or buy a sponsored placement, we keep the details we need to do the work and get paid. That includes names, business contact details, project notes, agreements and invoices. If you pay through a payment service, that service handles your payment details under its own privacy policy.

If you pitch or write an article for our blog, we keep your pitch and drafts. We publish the name, bio and photo you give us for your byline.

What we do not collect

Comments are switched off on this site, so we collect no comment data. We do not run ad networks or ad tracking tags. We never ask for sensitive data such as health details, so please do not send it through the form.

Why we use your data

We use personal data only for these purposes:

• To answer your message and talk about a possible project.
• To send the newsletter you asked for.
• To understand which pages people read, so we can improve the site and our articles.
• To keep the site secure and to stop spam and abuse.
• To do the work you hire us for, and to send and keep invoices.

Our legal reasons, in plain words

Laws such as the GDPR in the European Union and the UK GDPR ask us to name a legal reason for each use. We rely on these:

• Consent. You chose to subscribe to the newsletter. You can take back your consent at any time by unsubscribing.
• Legitimate interest. We have a fair business reason to answer messages, count visits and keep the site safe. We rely on this only when your rights do not outweigh that reason.
• Contract. When you ask for a quote or hire us, we need your details to prepare and do the work.

If a law requires us to keep certain records, such as invoices for tax, we keep them for that reason too.

Who we share it with

We share personal data only with the services that run this site, and only as much as they need:

• Automattic, the company behind Jetpack and WordPress.com. It runs our visit statistics, contact form, newsletter and login protection. Jetpack also copies some site data, including form messages, to WordPress.com so these features work. See Automattic’s privacy policy.
• Hostinger, which hosts the website, its database, its server logs and our domain email. See Hostinger’s privacy policy.
• The email services we use to read and answer messages.

We may also share data if the law requires it, or to protect our rights or someone’s safety.

We do not sell or rent your personal data. We do not share it with advertisers or data brokers.

Where your data is processed

Our service providers may process data in countries other than yours. Automattic is based in the United States, so data handled by Jetpack may be processed there. Each provider’s privacy policy explains the safeguards it uses for these transfers.

How long we keep it

• Contact form messages: for as long as we need them to answer you and follow up. If a message leads to a project, we keep it as long as that work requires.
• Client records, agreements and invoices: for as long as we work together, then as long as tax and accounting laws require.
• Newsletter email address: until you unsubscribe. You can also ask us to delete it completely.
• Visit statistics: Automattic keeps the raw Jetpack Stats logs for a limited time under its own policy. The summary counts we see in our dashboard do not identify you.
• Server and security logs: kept for a limited time by Hostinger and Automattic under their own policies.
• Guest article bylines: for as long as the article is published. Ask us if you want your byline removed.

When we no longer need data, we delete it.

Your rights

Depending on where you live, you have rights over your data. They come from laws such as the GDPR, the UK GDPR and similar laws elsewhere, including some US states. You can ask us to:

• Give you a copy of the personal data we hold about you (access).
• Fix data that is wrong or incomplete (correction).
• Delete your data (deletion).
• Stop or limit a use of your data (objection and restriction).
• Send your data to you in a format you can move to another service (portability).

Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

To use any of these rights, send us a message through our contact page. We may ask you to confirm who you are before we act. We will reply within the time the law allows.

If you think we have handled your data wrongly, you can complain to the data protection authority where you live. We would like the chance to fix it first, so please contact us.

Cookies

Our site uses a small number of cookies, for example to keep editors logged in and to show the right cached page. We do not use advertising cookies.

Our Cookie Policy explains which cookies we use and how you can control them.

Embedded content and other sites

Some articles may include content embedded from other sites, such as videos or social media posts. Embedded content works as if you had visited the other site directly.

That site may collect data about you, set cookies and track how you use the embedded content. This can happen even if you do not click on it.

Our articles also link to other websites. We do not control those sites, so please read their privacy policies.

How we protect your data

The site uses HTTPS, so data you send us is encrypted on its way to our server. We also use Jetpack’s brute force protection and keep the number of admin accounts small.

No website is fully secure, and we cannot promise that data will never be exposed. If a breach puts your data at risk, we will tell you and the authorities when the law requires it.

Children

This site is for businesses and adults. It is not aimed at children under 16, and we do not knowingly collect their data. If you think a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We will update this policy when our tools, our services or the law change. When we do, we change the date at the top of this page.

If we plan a bigger change, such as adding a new analytics or advertising tool, we will update this policy before we start using it.

This version takes effect on October 8, 2026. Questions about it are welcome through our contact page.