Privacy Policy

Account data: name, work email, password hash, billing details and the workspace you belong to.

Product data: domains, URLs, keywords, prompts and content that you submit to be analyzed by our AI SEO models.

Usage data: pages visited, features used, IP address, browser type, device identifiers and approximate location derived from IP.

Communications: messages you send to support, sales or via the contact form, including attachments.

Deliver the Igalia platform — run audits, score AI search visibility, generate recommendations and store the results inside your workspace.

Operate and secure the service — fraud detection, rate limiting, abuse monitoring, debugging and backups.

Billing and account management — process credit purchases, send invoices and detect failed payments.

Service communications — onboarding emails, security notices, and product updates relevant to your account.

Improve the product — aggregate, de-identified analytics about how features perform. We do not train foundation models on your private content without explicit opt-in.

Performance of contract — to provide the platform you signed up for.

Legitimate interests — securing the service, preventing abuse and improving features.

Consent — for optional cookies, marketing emails and any opt-in AI training programs.

Legal obligation — tax records, fraud prevention and lawful requests from authorities.

We share personal data only with vetted subprocessors who help us run Igalia (cloud hosting, email delivery, payment processing, customer support, analytics).

A current list of subprocessors is available on request from [email protected]. We notify customers in advance of material changes.

We never sell personal data, and we don't share it with advertising networks.

Data may be processed in the EU, UK and US depending on the subprocessor. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

Workspace data is retained while your account is active and for up to 90 days after deletion to allow recovery.

Backups containing personal data are rotated and fully purged within 35 days.

Invoicing records are kept for the period required by applicable tax law (typically 5–10 years).

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing.

Submit a request from your account settings or by emailing [email protected]. We respond within 30 days.

EEA / UK residents have the right to lodge a complaint with their local supervisory authority.

We use encryption in transit (TLS 1.2+) and at rest, role-based access controls, audit logging and continuous monitoring of our infrastructure.

No system is 100% secure. Report suspected vulnerabilities to [email protected].

Igalia is not directed at children under 16, and we do not knowingly collect their personal data.

We may update this Policy from time to time. Material changes will be announced by email or in-app at least 14 days in advance.

Questions? Contact [email protected] or write to Igalia SL, C/ Jose Luis Bugallal y Marchesi 22 1º, A Coruña, Spain.