Privacy Policy

Who we are

Jungle SEO (“Jungle SEO”, “we”, “us”) is an SEO and local marketing platform operated by [Company legal name], [Registered business address], [Country of registration]. This policy explains what information we collect when you use our website jungleseo.com and our app app.jungleseo.com (together, the “Service”), how we use it and the choices you have.

For any privacy question or request, email [email protected]. We are the data controller for account information, and we act as a data processor for the business data agencies and businesses connect to the Service on their own or their clients’ behalf.

Information we collect

Information you give us

• Account details: name, email address, password (stored only as a secure hash), agency or business name, and your team members’ names and emails.
• Business details: business names, websites, service areas, phone numbers, the value of a new customer, branding and any notes you add.
• Customer contacts you upload: names, phone numbers and emails of customers you choose to send review requests to.
• Messages: what you send us through support or the in-app assistant.

Information from services you connect

Only when you (or someone with access to the account) choose to connect them:

• Google services (Search Console, Business Profile, Analytics, Google Ads / Local Services Ads, Site Verification). See How we use Google user data.
• Your website through the Jungle SEO WordPress plugin or script: page content, titles, descriptions, links and images needed to find and fix problems.
• CallRail (optional): call details and recordings for lead tracking.

Information collected automatically

• Usage and device data: pages and features used, IP address, browser type, and error logs, used to run, secure and improve the Service.
• Cookies: only those needed to keep you signed in, remember your selected agency and your light/dark preference. We do not use advertising or cross-site tracking cookies.

Public information

To check rankings, map positions, competitors and AI answers, we collect publicly available search results and business listings. These are not linked to your Google account.

How we use Google user data

When you click “Sign in with Google” to connect an account, Google shows you exactly which permissions we ask for. You can review and remove them at any time at myaccount.google.com/permissions.

What we will never do with Google user data

• We do not sell it or transfer it to data brokers or information resellers.
• We do not use it for advertising, including retargeting, personalised or interest-based ads.
• We do not use it to determine creditworthiness or for lending purposes.
• We do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models.
• Humans at Jungle SEO do not read it, except when you give us permission for a specific purpose (for example a support request), when it’s needed for security (such as investigating abuse), to comply with the law, or when the data has been aggregated and anonymised for internal operations.

We transfer Google user data to others only as needed to provide or improve the features you use, to comply with the law, or as part of a merger or acquisition with your notice. The service providers involved are listed under Who we share data with.

How we use information

• To provide the Service: run website checks, write and apply the fixes you approve, track rankings, manage Business Profile tasks, count leads and audit Local Services Ads leads.
• To show you and your clients reports and results.
• To send review requests to the customers you choose, with an opt-out link in every message.
• To keep the Service secure, prevent abuse and fix problems.
• To send service emails (account, security and billing notices). We send marketing emails only if you opt in, and you can unsubscribe at any time.
• To meet legal, tax and accounting obligations.

AI processing

Some features use artificial intelligence: writing page titles, descriptions and articles, drafting review replies and posts, describing images, and checking Local Services Ads calls. To do this we send the relevant content (for example a page’s text, a review, or a call recording) to the Google Gemini API on a paid plan, under terms that do not allow Google to use it to train its models. AI output is shown to you for approval before it is published. We never use your data to train AI models of our own.

Who we share data with

We share data only with service providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:

We may also disclose information if required by law or to protect the rights, property or safety of our users or others. If our business is sold or merged, we will notify you before your information becomes subject to a different privacy policy. We do not sell personal information.

How we protect data

• All traffic uses HTTPS (TLS) encryption.
• Access keys for connected Google and other accounts are encrypted with AES-256-GCM before they are stored.
• Each agency’s data is isolated at the database level (row-level security), on top of permission checks in the app.
• Passwords are stored only as secure hashes, and sign-in attempts are rate-limited.
• Team roles limit what each person can see and do.
• Our staff can view an account only if its owner grants time-limited support access. Every view is logged and the owner is notified.
• Changes to your website and Google profile require approval and can be rolled back.

No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a data breach as the law requires.

How long we keep data

• We keep account and business data while your account is active.
• When you disconnect a Google account in the app, we revoke our access at Google, delete its stored access keys and stop collecting new data straight away. You can also ask us to delete data already collected from it.
• When you delete your account, we delete your data within 30 days, and from backups within 90 days, except what we must keep by law (such as invoices).

Your rights and choices

Depending on where you live (for example under the GDPR in the EU and UK, KVKK in Türkiye, or US state laws such as the CCPA), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Edit most information directly in the app, and delete your account in Settings.
• Disconnect Google at myaccount.google.com/permissions or with Disconnect in the app, which also revokes our access at Google.
• Email [email protected] for any other request. We respond within 30 days and will never treat you differently for using your rights.

If you are a customer who received a review request, you can stop all future messages with the opt-out link in the message or by replying STOP to a text.

You may also complain to your local data protection authority.

International transfers

We and our providers may process information in countries other than yours. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

Changes to this policy

We will post any changes on this page with a new date, and tell you by email or in the app before significant changes take effect.

Contact

[Company legal name]
[Registered business address], [Country of registration]
Email: [email protected]