AEO Content, Inc. ("we", "us", "our") operates aeocontent.ai and related services. This policy explains what data we collect, why we collect it, and how we protect it. We aim to be straightforward - no legalese walls.
What We Collect
When you request an audit
We collect your email address and the website URL you submit. We send a one-time verification code to your email to confirm it is yours. We use Cloudflare Turnstile to verify you are a human - this runs invisibly and does not track you across sites.
When you create a portal account
You log in with a one-time code sent to your email or phone number.
We store your email, phone (if provided), and a session cookie (aeo_customer_session)
that expires after 30 days. No passwords are stored.
When you use the API
API keys are created with SMS verification (a fresh code each time). We store a SHA-256 hash of your key - never the raw key itself. We log each API request: endpoint called, response time, status code, and your IP address. These logs are automatically deleted after 90 days.
When you make a purchase
Payments are processed by Stripe. We never see or store your full credit card number. Stripe provides us with a customer ID and basic transaction details (amount, date, plan). See Stripe's privacy policy for how they handle card data.
Emails we send
We use Resend to deliver verification codes, audit results, and welcome emails. Resend may collect basic delivery data (open/delivery status). We do not use email tracking pixels. See Resend's privacy policy .
What We Don't Collect
- No sale of your data to third parties - ever
- No sharing of your data with data brokers
Cookies
This website uses Google Analytics to count visits and see which pages people read, and the Meta Pixel to measure the results of our ads on Facebook and Instagram. Both set their own cookies. We also use Cloudflare Web Analytics, which sets no cookies.
| Cookie | Purpose | Duration |
|---|---|---|
_ga, _ga_* | Google Analytics: counts visits and how the site is used | Up to 2 years |
_fbp, _fbc | Meta Pixel: measures visits and bookings that come from our Meta ads | 90 days |
aeo_ref | Remembers the partner referral link you arrived from | 1 year |
aeo_customer_session | Portal login session | 30 days |
cf_clearance | Cloudflare bot protection | Session |
Your browser also keeps a few settings on your device (local storage, not cookies):
| Item | Purpose |
|---|---|
theme | Your light or dark theme choice |
cookie-consent | That you closed the cookie notice |
aeo_cta_variant | Which version of a call to action you see on blog posts |
aeo_xid | A random ID that links your visits and call bookings to our Meta ads |
aeo_af_token | A random ID sent with your answers to the "Did this answer your question?" widget and the quizzes in our articles |
aeo_af_* | Your answer to a "Did this answer your question?" widget |
aeo-mvf:*, aeo_mvf_sent_* | Your picks in a Myth or Fact quiz, and that they were sent |
nv2fpDismissed | That you closed the client results card (kept only until you close the tab) |
aeo_api_key | Only if you paste an API key into the API docs; it stays in your browser |
You can block or delete these cookies in your browser settings; the site works without them. To opt out of Google Analytics on every site, use the Google Analytics opt-out add-on. To control how Meta uses ad data, see your Meta ad preferences.
How We Use Your Data
- Run your audit - we need your URL to audit it and your email to send results
- Authenticate you - email/phone OTP for portal access and API key creation
- Process payments - Stripe handles billing; we track which plan you are on
- Monitor API usage - rate limiting and usage reporting for API customers
- Send transactional emails - verification codes, audit results, account notifications
- Improve the product - aggregate, anonymized statistics (e.g., average audit scores by sector)
We do not send marketing emails unless you explicitly opt in (we currently have no marketing email program).
Data Retention
- Audit data - published audit reports remain available indefinitely as public content
- API usage logs - automatically deleted after 90 days
- Verification codes - expire after 10 minutes, deleted on use
- Rate limit logs - cleaned up automatically by scheduled maintenance
- Account data - retained while your account is active; deleted on request
Third-Party Services
We share data only with services needed to operate the platform:
- Stripe - payment processing
- Resend - transactional email delivery
- Twilio - SMS verification codes
- Cloudflare - bot protection (Turnstile), CDN and cookie-free web analytics
- Google Analytics - website visit statistics
- Meta - the Meta Pixel, to measure our ads on Facebook and Instagram
- Calendly - call booking
- Amazon Web Services (AWS) - application and database hosting
Each provider processes data according to their own privacy policies. We do not sell or rent your personal information, and we do not share it with data brokers. The Meta Pixel tells Meta which pages of this site you visit, so we can measure our ads. Our server also sends Meta the same events with your IP address and browser type, and, when you book a call, your email address in hashed (SHA-256) form.
Your Rights
You can:
- Access your data - email us and we will provide what we have on file
- Delete your data - request account deletion and we will remove your personal information
- Revoke API keys - instantly through the portal
- Correct inaccuracies - let us know and we will fix it
For any privacy request, email hello@aeocontent.ai. We respond within 30 days.
Security
- All data transmitted over HTTPS
- API keys stored as SHA-256 hashes (raw key never persisted)
- No passwords - we use one-time codes for all authentication
- Database access restricted by Row Level Security policies
- Cloudflare Turnstile + progressive rate limiting to prevent abuse
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this policy as we add features. Material changes will be noted with a new "Last updated" date at the top. Continued use of the service after changes constitutes acceptance.
Contact
Questions about this policy? Email hello@aeocontent.ai.
AEO Content, Inc.
436 North Main Street, 1088
Doylestown, PA 18901