Privacy Policy
How Role SEO collects, uses, and protects your personal data under UK GDPR.
Last updated: 17 September 2026
Who we are
Role SEO is a product operated by Role Creative Ltd, a company registered in England and Wales. When this policy says “we”, “us” or “Role SEO”, it means Role Creative Ltd acting as data controller for personal data processed through the app and this website.
- Registered address: 13 Hope Street, Liverpool L1 9BQ, United Kingdom
- Phone: +44 151 345 3839
- Email: support@rolewithus.com
What personal data we collect
We collect only what we need to run the service:
- Account data: name, email address, and password hash. Google account details if you sign in with Google.
- Workspace data: the organisation name, project names, keywords, domains, and any content you save inside Role SEO.
- Integration data: OAuth tokens for Google Search Console and Google Analytics (encrypted at rest), and metadata about the properties you connect. We never see your Google password.
- Billing data: subscription status, credit balance, invoices, and the billing address you give our payment processor. We do not store card numbers.
- Usage data: IP address, browser, device, pages viewed, features used, and error diagnostics, collected to keep the service secure and to fix bugs.
- Support correspondence: anything you send us by email so we can help you.
Why we collect it (lawful basis)
Under UK GDPR we rely on the following lawful bases:
- Contract (Article 6(1)(b)): to give you the service you’ve signed up for, take payment, and provide support.
- Legitimate interests (Article 6(1)(f)): to keep the service secure, prevent abuse, understand aggregate usage, and improve the product. We’ve balanced this against your interests and rights.
- Consent (Article 6(1)(a)): for optional cookies and any marketing email you actively opt into. You can withdraw consent at any time.
- Legal obligation (Article 6(1)(c)): to keep accounting records and respond to lawful requests.
Who we share it with
We use a small number of trusted service providers to run Role SEO. Each acts as a data processor under our instructions:
- Cloudflare — hosting, DNS, and DDoS protection.
- DataForSEO — SEO data provider for keyword, SERP, and backlink lookups triggered by your usage.
- OpenRouter — routing layer for the ROS in-app AI agent. Your project data may be sent to the model provider for the length of a chat request only; nothing is retained for training.
- Loops — sends transactional emails (email verification, password reset, team invitations).
- Autumn and Stripe — subscription billing and payment processing. Card details go directly to Stripe and are never stored by us.
- PostHog — product analytics to understand how features are used, with sensitive input fields masked.
- Google — only when you connect Search Console or Analytics. Google acts as an independent controller for your data on their side; Role SEO only reads what you authorise.
We do not sell personal data and do not share it for third-party advertising.
International transfers
Some processors above are based outside the UK, primarily in the United States. Where UK personal data is transferred, we rely on appropriate safeguards under UK GDPR, typically the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, along with additional technical and organisational measures.
How long we keep it
- Account and workspace data: for as long as your account is active, plus 30 days after deletion for restore purposes.
- Billing records: retained for six years to meet UK accounting and tax obligations.
- Support emails: up to 24 months after your last contact.
- Usage analytics: up to 24 months in identifiable form, then aggregated.
Your rights
Under UK GDPR you have rights to access, correct, delete, restrict, port, and object to processing of your personal data, and to withdraw any consent you’ve given. You can exercise most of these from inside the app (Settings), or by emailing us at support@rolewithus.com. We’ll respond within one month.
If you’re not happy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, though we’d rather have the chance to fix it first.
Cookies
We use a small set of cookies. Essential cookies keep you signed in and protect the service from abuse; these don’t need consent under PECR. Optional analytics cookies are covered by PostHog and only fire if you accept them. You can clear or block cookies in your browser settings; the essential ones being blocked will stop the app from working.
Changes to this policy
When we make material changes, we’ll update the “last updated” date and, where the change affects you, email account holders. Continued use of the service after a change means you accept the updated policy.
Contact
Questions about this policy or your data? Email support@rolewithus.com or write to us at 13 Hope Street, Liverpool L1 9BQ.
This policy is written to be clear and honest, not to replace legal advice. Nothing here overrides your statutory rights under UK law.