Privacy policy

What we collect

• Account data. Your email address and a password, or your Google identity if you choose Google sign-in. Authentication is handled by Supabase; passwords are stored hashed, never in clear text.
• Your editorial profile. What you tell us during setup: your domain, what you sell, who buys it, your competitors, the facts our writer is allowed to state, and the tone you want. This is the raw material every article is built from.
• Content and usage data. The topics we queue, the articles we write, publishing logs, and hashed API keys. We never store the full API key, only a hash of it.
• Billing data. Payments run through Whop. Your card details go directly to Whop and never touch our servers.
• Site analytics. We use Plausible, a privacy-friendly analytics tool: no cookies, no personal identifiers, no cross-site tracking. That is why syted.ai has no cookie banner.

Google Search Console data

If — and only if — you explicitly connect your Google account, we request read-only access to Google Search Console (the webmasters.readonly scope). We never ask for write access, because nothing we do requires it.

This data is used for exactly one purpose: finding the queries your site already appears for in Google’s results but ranks too low to be clicked — typically between positions 5 and 25. Those queries become article topics, because improving a page Google already shows is faster than starting from zero.

Your Search Console data is never sold. It is never shared with third parties. It is never used for advertising. It is never used to train AI models. It is not used for any purpose other than choosing article topics for your own site.

syted’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The only Google credential we store is a refresh token, kept server-side in our database and used solely to read Search Console on your behalf. You can revoke it at any time from your Google account permissions page or by writing to us at contact@syted.ai. Revoking Search Console access does not delete your account and does not stop the service — we simply fall back to other keyword sources.

Who processes data on our behalf

We do not run our own data centers. These are the services that process data for us, and what each one does:

• Supabase — database and authentication. Everything listed above lives there.
• Vercel — hosting for the website, the dashboard and the API.
• Whop — payments and subscription billing. Card details never touch our servers.
• Anthropic, OpenAI and Google — the AI model providers that generate articles. They receive your editorial profile and keyword data, not your email address, password or billing details.
• DataForSEO — keyword metrics, search results data, and measurement of how often AI assistants mention your domain.
• Plausible — site analytics without cookies or cross-site tracking.

What we never do

We do not sell personal data, to anyone, for any reason. We do not use your data for advertising. We do not use tracking cookies. We do not use your data — including anything obtained from Google APIs — to train AI models.

Retention and deletion

Cancelling your subscription ends the service but does not delete your account by itself. To have your account and all associated data deleted, write to contact@syted.ai and we will do it. Search Console access can be revoked independently, without deleting the account, as described above.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell existing customers by email or in the dashboard before the change takes effect.

Contact

For anything privacy-related — questions, access requests, deletion requests — write to contact@syted.ai.