SEO-AI Sub-processors

These are the providers that may receive data when you use SEO-AI. PineSeed Pty Ltd uses them to run the service. This list is part of the Privacy Policy and the DPA template.

Some providers are used only if the site that offers SEO-AI switches a feature on, or only if you use a feature. The last column says when.

Name	Purpose	Data	Country	When used
OpenAI and/or Anthropic, through the website's AI service	Writing articles, briefs, fact-checks and other text tasks	Keywords, briefs, source text, your voice samples, article text, vault items needed for the task	USA	Always for AI features. Which provider is used depends on the site's configuration
DataForSEO	Search results, keyword and backlink data	Keywords, search locations, site addresses	Lithuania and USA	When you run research, tools or rank checks
Stripe, through the site's checkout	Payments, receipts, refunds, disputes	Name, email, card details (held by Stripe only), payment status	USA and Australia	When you subscribe or buy extra articles
Google	Search Console data, Site Verification, Knowledge Graph lookups	Google tokens, your site address, search performance data, business and entity names	USA	When you connect Google or use a feature that needs it
Microsoft	Bing Webmaster	Microsoft tokens, your site address, search performance data	USA	When you connect Bing
Copyleaks	Plagiarism check	Article text	Israel and USA	Only if the site switches on plagiarism checks
GPTZero	AI detector signal	Article text	USA	Only if the site switches on an AI detector signal and chooses this provider
Originality.ai	AI detector signal	Article text	Canada	Only if the site switches on an AI detector signal and chooses this provider
Twilio	Phone verification	Phone number	USA	Only for phone verification during directory submissions
BrightLocal	Directory listing submission	Business name, address, phone, categories	UK	Only when you submit to this vendor
Yext	Directory listing submission	Business name, address, phone, categories	USA	Only when you submit to this vendor
Uberall	Directory listing submission	Business name, address, phone, categories	Germany	Only when you submit to this vendor
Listings API	Directory listing submission	Business name, address, phone, categories	to be confirmed	Only when you submit to this vendor
Semrush Local	Directory listing submission	Business name, address, phone, categories	USA	Only when you submit to this vendor
Hugging Face	Model files downloaded once	No customer data is sent	USA	When the service downloads model files
Wikidata (Wikimedia Foundation)	Public lookups of entity names	Entity names only, no personal data	USA	When a feature checks an entity
our hosting provider	Hosting, storage, server logs	All data held by the service	our hosting provider	Always
DrawSync platform, operated by PineSeed	Member accounts, email delivery	Member id, email, display name, email content	our hosting provider	Always

Notes

• Providers receive only what they need for the task.
• Hugging Face and Wikidata do not receive customer data. They are listed so the list is complete.
• We have a contract with each provider that covers confidentiality and security.
• Some data stays only with the provider that holds it. For example, Stripe holds card numbers for the site's checkout, and PineSeed does not.

Changes to this list

We will give business customers at least 30 days' notice before we add a provider that receives personal information, or change one in a way that matters. We send the notice to the workspace owner by email and post it in the product. A customer who objects can contact us through the Contact support button in SEO-AI. See the DPA template, section 6.