Privacy Policy

• Account data: email address, name, billing details.
• Usage data: pages visited, features used, articles published.
• Connected site data: your website URL and CMS credentials (stored encrypted).
• Email engagement: opens, clicks, unsubscribes (via Resend).

• Contract: to deliver the BoltSEO service you signed up for.
• Legitimate interest: transactional emails (receipts, password resets, blog notifications).
• Consent: marketing emails. You can withdraw consent at any time by clicking Unsubscribe in any email or visiting your email settings.

We use your data to provide the service, send you account notifications, and — with your consent — send you product updates and SEO tips. We do not sell your data to third parties.

We share data only with trusted third-party processors required to run BoltSEO, including infrastructure providers for hosting, database and authentication, email delivery, AI content generation, and website content analysis. All processors are bound by data processing agreements and, where applicable, process data within the EU or under equivalent safeguards. You can request the current list of subprocessors by contacting us.

We retain your account data for as long as your account is active. Email engagement events are retained for 24 months. You can request deletion at any time.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Object to processing based on legitimate interest.
• Data portability.
• Lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

To exercise any of these rights, email hans@boltseo.eu.

We use only essential cookies for session management and authentication. We do not use advertising cookies or third-party tracking pixels for marketing purposes.

For product analytics we use cookieless tools that don't store identifiable data on your device:

• Vercel Analytics & Speed Insights — anonymized visit and performance metrics, no cookies.
• Ahrefs Web Analytics — cookieless pageview counts used for marketing-channel attribution.
• BoltSEO first-party analytics — pageviews and engagement events logged via our own endpoint. Your IP address is hashed with a secret salt before storage, so we can't reverse the hash to identify you.

None of these tools set cookies on your device or send personal data to advertisers. You can object to legitimate-interest processing under GDPR Article 21 by emailing hans@boltseo.eu.

We additionally surface an in-page consent banner the first time you visit. Choosing "Decline" means Ahrefs Web Analytics and our first-party track.js script are never loaded for you at all — not just blocked from setting cookies. Strictly necessary cookies for sign-in and Vercel's cookieless performance measurement are unaffected by this choice. You can revisit your decision anytime via "Cookie settings" in the footer.

De Loore Consult BV
VAT BE0779.632.253
Stijn Streuvelsstraat 24, 2340 Beerse, Belgium
hans@boltseo.eu