Quick summary: AEO Excellence collects only the personal data we need to deliver our services. We do not sell your data. We use Stripe for payments, mail for transactional email, and standard analytics tools. You can request deletion at any time.
Who we are
AEO Excellence ("we," "us," "our") operates the website at https://aeoexcellence.com and the related services described on the site. This policy explains how we collect, use, and protect personal information.
What information we collect
We collect three categories of information:
- Account information you give us when you register: name, email address, hashed password, and optional company name.
- Service information you submit while using our platform: domain names submitted for audit, contact form messages, and content of audit reports we deliver to you.
- Technical information automatically collected: IP address, browser type, pages visited, referring URL, and timestamps. This data is used for security, fraud prevention, and product analytics.
How we use information
We use personal information to: (1) provide and improve our services, (2) process payments via Stripe, (3) send transactional and account-related email, (4) deliver requested AEO audits and reports, (5) prevent fraud and enforce our terms, and (6) comply with legal obligations.
We do not use your data for advertising, do not sell it to third parties, and do not use the content of your site or your audit reports to train AI models without explicit, separate consent.
Cookies and tracking
We use a small number of cookies: a session cookie for authentication, a CSRF protection cookie, and a cookie to remember your cookie consent preference. With your consent, we may also load Google Analytics 4 to understand aggregate traffic patterns. You can decline analytics cookies via the cookie banner without affecting site functionality.
Third-party services
We rely on the following third-party processors:
- Stripe — payment processing. Stripe handles all card data; we never see or store full card numbers.
- Email infrastructure (SMTP via PHPMailer) — for transactional and account email.
- Hosting infrastructure — our servers are operated by reputable hosting providers in the US and EU under a data processing agreement.
- Google Analytics 4 (optional, consent-based) — aggregate site analytics.
How long we keep data
We retain account data for as long as the account is active and for 30 days after deletion to allow recovery. Audit reports and downloads are retained while the account is active and deleted within 30 days of cancellation. Server logs are retained for 90 days for security purposes.
Your rights
You have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email hello@aeoexcellence.com from the email address associated with your account. We respond to verified requests within 30 days.
If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with specific privacy laws, you may have additional rights — including the right to lodge a complaint with your local data protection authority.
Security
We follow industry-standard security practices: TLS encryption in transit, bcrypt password hashing at rest, parameterized database queries, CSRF protection on all state-changing requests, and session hardening (HttpOnly, Secure, SameSite=Strict cookies). No system is perfectly secure — if we ever discover a breach affecting your data, we will notify affected users within 72 hours.
Children
Our service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, contact us and we will delete the account immediately.
Changes to this policy
We may update this policy as our practices evolve. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated via email to active account holders at least 30 days before they take effect.
Contact
Privacy questions or requests can be sent to hello@aeoexcellence.com. We aim to respond within 4 business hours.