Privacy Policy

The party responsible for your data is Penguin Corporation S.A.C., RUC (tax ID) 20606521741, domiciled in Lima, Peru. Penguin is the company behind AgenteSEO (“we”).

• Account: name, email, and password (stored as a hash, never in plain text).
• Your organization and sites: company name, domains you monitor, target countries, and brand.
• Integration credentials (BYO): your Google access token (Search Console and Analytics), and optionally Microsoft Clarity and DataForSEO. They are stored encrypted at rest (AES-256-GCM) and used only to read your data.
• Analysis results: the AI-visibility scans and SEO reports we generate from your sources.

You connect your own Google accounts with read-only permissions. Your Search Console and Analytics data stays in your Google account; we read it to generate your reports, we do not bulk-copy it or sell it. You can revoke access at any time from your Google account or by disconnecting the integration in the app. When you connect your accounts (Search Console, GA4, or Clarity), we process that data on your behalf: read-only, and only to provide the service to you. We don’t use it for anything else.

• Operate the service: measure your AI visibility and generate your SEO reports.
• Send you transactional emails (account verification, recovery).
• Provide support and manage your subscription.

We do not use your data for advertising or sell it to third parties.

We rely on these providers, which process data on our behalf:

• Vercel — application hosting and visit measurement with Vercel Analytics (no third-party cookies). USA.
• Railway — database. USA.
• Resend — sending emails (account verification, password recovery). USA.
• Cloudflare — Turnstile, anti-bot protection on forms. Global network.
• Google — reading the Search Console and Google Analytics 4 data you authorize, speed analysis with PageSpeed Insights, and AI with Gemini. USA.
• Anthropic — AI processing. USA.
• OpenAI — AI processing. USA.
• Perplexity — AI processing. USA.
• Microsoft Clarity — reading your site’s data that you authorize. USA.
• DataForSEO — SEO data (keywords and rankings). Estonia (European Union).

Your data is hosted on servers in the USA, and some providers process it from other countries (see the list above). This is an international data transfer. We carry it out with contractual safeguards that provide protection equivalent to Law 29733.

We encrypt integration credentials at rest (AES-256-GCM), use an encrypted connection (HTTPS), two-step verification for administrative access, and strict isolation between organizations (each customer sees only their own data).

We keep your data while your account is active. If you cancel, you can request deletion of your data by writing to us. Integration credentials are deleted when you disconnect the integration or close your account.

You have the right to access your data, rectify it, cancel it (ask us to delete it), object to its use, and request its portability. You can also revoke access to your integrations at any time. To exercise any of these rights, write to us at hola@agenteseo.io.

We may update this policy. We will notify you of significant changes, and the “last updated” date will reflect the current version.

Questions about privacy? Write to us at hola@agenteseo.io.

Your AI visibility scan results may be combined anonymously with other accounts to produce statistics by industry and country (which domains AI cites, which brands it recommends). They never include your account, your sites or your figures, are published only with a minimum of five sites from three organizations, and the Google data you connect is excluded. You can opt out anytime from Billing.