aeoo

Legal

Data processing

Last updated 12 November 2026

How aeoo handles the personal data you bring into it. You’re the controller; aeoo is the processor.

What we process

  • Names and email addresses of the people you invite, including your clients’ approvers.
  • Personal data that appears on the public pages we crawl.
  • Search Console and review data, without reviewers’ names.

How we process it

Only to provide aeoo as described in the terms, and only on your instructions. Everyone at aeoo with access is bound by confidentiality.

How we keep it safe

  • Sign-in by email link, with no passwords stored.
  • Site tokens sealed with a key only our server holds.
  • Every query for a client scoped to your workspace.
  • Backups with a tested restore.
  • A log of every publish and approval.

Subprocessors

We use the companies on our subprocessors page and tell you before we add a new one, so you can object.

Transfers

Where data leaves the EU and EEA, we rely on the EU’s standard contractual clauses or an adequacy decision. That covers the four services based in the United States: AI functions, Search Console, email and page labelling.

Breaches

If a breach affects your data, we tell you without undue delay, and within 48 hours of learning of it.

When the agreement ends

We delete your data or hand it back, as you choose.