Sign inGet started
Draft. This text is a plain-English draft for the private beta. It will be checked by a lawyer before paid plans launch. Words in [brackets] will be filled in then.

Data processing terms

Last updated 5 November 2026

These terms apply when your agency (the "controller") uses xEOLabs to process personal data, and [Company legal name] processes it for you (the "processor"). They are part of the terms of service.

What we process

  • Subjects: your team members, and people named in brand facts or AI answers you track.
  • Data: names, e-mail addresses, and any personal data inside the texts you enter or the answers we collect.
  • Purpose: only to provide xEOLabs, on your instructions.
  • Duration: while you use the service, then deleted as described below.

Our promises

  • We process the data only on your documented instructions, which are these terms and your use of the product.
  • People who work on xEOLabs are bound to confidentiality.
  • Security: agencies are kept apart in the database (row-level security), connections use HTTPS, keys are kept out of code, errors are recorded without personal data, backups are taken daily and tested weekly.
  • We tell you without undue delay, and within 48 hours where possible, if we learn of a personal data breach.
  • We help you answer requests from people about their data (export and delete tools in Settings → Data).
  • At the end we delete your data (deletion runs 7 days after the request; backups expire within 8 weeks).

Sub-processors

You allow us to use these sub-processors. We will tell you before adding a new one, and you may object.

  • Clerk: Sign-in and team accounts (USA)
  • Stripe: Payments and invoices (USA / EU)
  • Resend: Service e-mails (USA)
  • Cloudflare: Domain name service and network protection (Global)
  • [Hosting provider]: Servers and database ([Location])
  • OpenAI (ChatGPT): Asking tracked questions (USA)
  • Anthropic (Claude): Asking tracked questions; reading websites for set-up (USA)
  • Google (Gemini): Asking tracked questions (USA)
  • Perplexity: Asking tracked questions (USA)
  • DataForSEO: Google AI Mode answers for tracked questions ([Location])
  • TypeSafe: Checking AI answers (tone, top pick, facts) ([Location])

Transfers

Some sub-processors are outside the EU. Where needed, transfers use the EU Standard Contractual Clauses or another valid safeguard.

Audits

On reasonable notice we will answer your security questions in writing and share summaries of our security checks.