Privacy policy

Last updated: 29 April 2026

This page explains, in plain English, what data we collect when you visit getseoforai.com or use any of our products, what we do with it, and how to get rid of it. Written by R, the human behind Brit Design and SEO for AI, not by a legal team.

Who is doing the collecting

SEO for AI is operated by Brit Design, a UK-based studio run by R ([email protected]). The trading entity is a UK sole trader. Postal address for written correspondence is on the footer of every email we send.

What we collect

When you visit any page on getseoforai.com

Our hosting provider, Cloudflare, logs your IP address, browser user-agent, and the URL you visited. This is normal web-server logging and Cloudflare retains it for around 30 days. We do not set tracking cookies. We do not use Google Analytics, Facebook Pixel, or any third-party advertising tracker. When Cloudflare Web Analytics is enabled in future, it operates without cookies and is GDPR-friendly by design.

When you submit the free 60-second checker form

You enter your business website URL. If you also opt in to receive the PDF, you enter your email. The email goes to Brevo, our email delivery provider. We use it to send you the requested PDF and, if relevant, occasional follow-ups about your AI visibility results. You can unsubscribe at any time by replying or by visiting /unsubscribe.

When you submit the toolkit request form (/toolkit/request/)

You enter your email, business name, website, and an optional note. We use this to send you the personalised audit and access link, and to reply to your question if you sent one. Your data is added to a Brevo list called toolkit-access-requests. We never sell, share, or rent it to anyone.

When you buy a product on Gumroad

Gumroad processes your payment directly and shares your email and purchase details with us. Gumroad's own privacy policy applies to the payment data. We never see your card number.

When you reply to one of our cold emails

The reply lands in [email protected] (Google operates the mailbox). Standard Gmail privacy applies to that exchange. We do not forward your reply to any third party.

What we do with the data

• Send you the audit, the PDF, the toolkit access link, or the reply you asked for.
• Send you occasional follow-ups about your AI visibility, the toolkit, or related improvements. Always with an unsubscribe option in the footer of every email.
• Improve the product and the audit method by looking at aggregate patterns, not individual records.
• Comply with our legal obligations under CAN-SPAM (US), GDPR (UK and EU residents who reach us anyway), and applicable consumer-protection laws.

What we never do

• Sell your data, your email, or your business details to anyone.
• Share your data with advertising networks.
• Reuse your data for an unrelated product or service.
• Hold your data after you ask for it to be deleted.

How long we keep it

• Brevo contact records: 24 months from the date of last engagement, then auto-pruned. If you actively buy a product, we keep the record longer for support and refund purposes.
• Brevo click and open events: 30 days, Brevo's default retention.
• Cloudflare access logs: 30 days, Cloudflare's default.
• Cold email send logs (recipient, business name, trade): kept on a private disk, indefinite by default but reviewed annually and pruned if no longer needed.
• Email replies in [email protected]: kept until the conversation is naturally closed.

Your rights

If you live in the UK or EU (GDPR), or California (CCPA), you have the right to:

• See what data we hold about you.
• Correct anything that is wrong.
• Have all your data deleted (the right to be forgotten).
• Object to us processing your data for marketing.
• Withdraw any consent you previously gave.

To exercise any of these, visit /unsubscribe and tick the relevant boxes, or email [email protected] with the subject line "data deletion request" and we will action it within 30 days.

How we use cold email

SEO for AI runs cold-email outreach to small businesses in the United States, sending a small number of personalised emails per day to owner-operators in trades where AI search visibility is materially affecting inbound. We comply with the CAN-SPAM Act: every email contains the sender's identity, a postal address, and a clear way to opt out (reply with "no thanks" or click the unsubscribe link in the email footer).

We do not send cold email to recipients in the UK, EU, or other GDPR-protected jurisdictions. The email-domain filter blocks .co.uk, .uk, .eu, .de, .fr, .es and the rest of the EU TLDs, plus the major UK and EU consumer mailbox providers, before any cold email is composed.

If you have received a cold email from us in error, reply with "no thanks" and you will be added to our exclude list within 24 hours. Or visit /unsubscribe.

Third-party services we use

• Cloudflare (hosting, DNS, web analytics, edge functions).
• Brevo (transactional email, contact list, email tracking).
• Gumroad (payment processing for product sales).
• Google (Gmail mailbox, Google Workspace for [email protected] forwarding).
• Buffer (social media scheduling for our own brand accounts).
• Microsoft Bing Webmaster Tools (search indexing analytics, when enabled).

Each of these has its own privacy policy. We use them as data processors, not data sellers.

Cookies and similar technologies

We do not set marketing cookies. The interactive toolkit at /toolkit/app/ uses your browser's localStorage to save your progress through the 18 steps. That data lives in your browser only, never sent to us. You can clear it any time via your browser's clear-site-data option.

Children

SEO for AI is a product for small business owners. We do not knowingly collect data from anyone under 18. If you are under 18, do not submit any form on this site.

Changes to this policy

If we change anything material, the date at the top updates and we email any active subscribers. Older versions are archived in the project's git history.

Complaints

If you are not satisfied with our handling of your data, the UK regulator is the ICO at ico.org.uk and the US-California regulator is the California Attorney General's Office. We will engage with either in good faith if a complaint arises.