SEO Writing

GDPR overview

Partial, and worth reading closely. The privacy policy carries a dedicated GDPR section citing Regulation 2016/679 and listing six rights, access, rectification, objection, restriction, portability and withdrawal of consent, all exercised through one address, support@seowriting.ai. A separate CalOPPA and CCPA section covers United States visitors, and Do Not Track signals are honoured. What is missing matters as much. No Data Processing Agreement is published or offered on request, no subprocessor list exists, no Article 27 representative is named although the publisher is established outside the Union, no hosting country is disclosed despite announced international transfers, and the policy bears no effective date. A European controller will have to run its own assessment.

Who owns the data?

The terms are unusually clear here: you keep every right you already held in the content you submit or publish through the service, and you carry the responsibility for its legality and accuracy. Cybereter FZ-LLC claims ownership only of the platform itself, its own content, features and functionality, expressly excluding customer data. Two caveats sit alongside that. Backups are taken but no integrity guarantee is offered, so you are told to keep an independent copy of anything that matters. And the documents you produced are deleted one month after your subscription period ends, whoever owns them.

Reuse rights

Nothing in the terms restricts what you do with the articles the tool produces. You keep your rights in them and may publish, edit, sell or syndicate them without asking the publisher for permission; there is no licence-back clause running in the other direction. What Cybereter FZ-LLC does reserve is the right to refuse, edit or remove content it judges objectionable from its own platform, and to close accounts that infringe copyright. The real limits are yours rather than theirs: you warrant that what you submit does not infringe anyone else's copyright, privacy or publicity rights, and machine-written text still needs checking before it goes out under your name.

Data retention & training

Hosting summary

The publisher discloses nothing about where data is held. The privacy policy states that personal information may be transferred to and kept on computers outside your own state, province or country, where data protection law may differ, but it names no destination country, no region, and no transfer mechanism such as standard contractual clauses or an adequacy decision. No infrastructure provider is identified anywhere; the only third party named is Paddle, and that is for payment processing. There is no trust or security page, and no certification such as SOC 2 or ISO 27001 is claimed. One technical observation, which is not a statement by the publisher: the domain resolves to 45.77.159.83, an address geolocated to Piscataway in the United States, on AS20473 (The Constant Company). That describes where the marketing site is served from and says nothing about where customer documents are stored. Anyone with a jurisdictional requirement will have to ask the company directly.