Privacy Policy
Last updated: July 24, 2026
This Privacy Policy explains how Seowly ("Seowly," "we," "us," or "our"), a company based in Montreal, Quebec, Canada, collects, uses, discloses, and protects personal information when you use the Seowly website, application, and related services (the "Service").
We handle personal information in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR). If any conflict arises, the law that gives you the greater protection applies.
1. Two kinds of personal information
Seowly involves two different sets of people, and our role differs for each:
- Your information — the personal information of you, our customer, and your team. For this information, Seowly is the controller (the person responsible for the information).
- Prospect information — the personal information of the people and organizations you research and contact through the Service (for example, a website owner's name and email address). You decide who to contact and why, so you are the controller and Seowly acts as your processor / service provider for this information. You are responsible for having a lawful basis to collect and contact these people.
2. Information we collect
Information you give us
- Account and profile details (name, email, password, company, language, and preferences).
- Billing information processed through our payment provider (we do not store full card numbers).
- Content you create in the Service, including your outreach drafts, campaigns, notes, and settings.
- Messages you send us for support or feedback.
Information from your connected Google account
When you connect your Google (Gmail) account, we access, with your authorization, only the data needed to send the outreach you approve. The Gmail permission we request is send-only (gmail.send): we can send a message you have individually reviewed and approved, and nothing else. We do not request or hold permission to read, search, label, modify, or delete anything in your mailbox, and we do not detect replies on your behalf — you tell us when a prospect has replied. We also read the email address of the connected Google account, so we can show you which inbox will send. See Section 6 for how we handle Google user data.
Prospect information you research and collect
To surface opportunities, the Service processes information about third-party websites and their contacts, such as business names, website URLs, publicly available contact email addresses, and the context of a potential link. You direct this processing.
Information we collect automatically
- Usage and device data (pages viewed, features used, IP address, browser, device, and timestamps).
- Cookies and similar technologies (see Section 9).
3. How we use personal information
We use personal information to:
- Provide, operate, and secure the Service, including scanning for opportunities, drafting and sending approved outreach, and tracking replies and links.
- Create and manage your account and process payments and subscriptions.
- Provide customer support and respond to your requests.
- Understand and improve the Service, and develop new features.
- Send you service, security, and (where permitted) product and marketing communications; you can opt out of marketing at any time.
- Detect, prevent, and address fraud, abuse, and violations of our Terms.
- Comply with legal obligations.
Legal bases (GDPR). Where the GDPR applies, we rely on: performance of our contract with you; your consent (for example, marketing and connecting your Google account); our legitimate interests in operating and improving the Service; and compliance with legal obligations.
4. How we share personal information
We do not sell your personal information. We share it only as described here:
- Service providers (sub-processors) who help us run the Service, under contracts that require them to protect the information. These currently include:
- Stripe — payment processing.
- Google — email connection and sending, via the Gmail API, at your direction.
- Amazon Web Services (AWS) — cloud hosting and file storage.
- PostHog — product analytics.
- Our hosting, database, and transactional-email providers.
- Legal and safety reasons — when required by law, legal process, or to protect the rights, property, or safety of Seowly, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
We can provide the current, detailed list of sub-processors on request at hello@seowly.com.
5. International transfers
Seowly is based in Canada, and some of our service providers are located in the United States, the European Union, or elsewhere. When we transfer personal information outside your jurisdiction, we take steps required by applicable law to protect it, such as standard contractual clauses and provider assessments. By using the Service, you understand your information may be processed in these locations.
6. Google user data and Limited Use
Seowly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We access your Google account data only to provide and improve the outreach features you request.
- Our Gmail access is send-only. We hold no permission to read the contents of your mailbox.
- We do not use Gmail data for advertising.
- We do not sell Gmail data, and we do not transfer it to others except as needed to provide the Service, to comply with law, or in connection with a merger or acquisition.
- We do not allow humans to read your Gmail data, except with your explicit consent for specific messages, where necessary for security or to comply with law, or where the data is aggregated and anonymized.
You can revoke Seowly's access to your Google account at any time through your Google account permissions or your Seowly settings.
7. Retention
We keep personal information only as long as needed for the purposes described here: for the life of your account and as required to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you disconnect your Google account or close your Seowly account, we delete or anonymize the associated personal information within a reasonable period, unless we must retain it by law.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and OAuth-based access to your Google account (we do not store your Google password). No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authorities of a confidentiality incident where the law requires.
9. Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand usage through analytics (such as PostHog). You can control cookies through your browser settings; disabling some cookies may affect how the Service works. Where required, we ask for your consent before setting non-essential cookies.
10. Your privacy rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you and know how it is used and shared.
- Correct information that is inaccurate or incomplete.
- Delete your information, and withdraw consent where we rely on it.
- Portability — receive certain information in a structured, commonly used format (Law 25 and GDPR).
- Object to or restrict certain processing, and be free from decisions based solely on automated processing that significantly affect you (GDPR).
To exercise these rights, contact us at hello@seowly.com. We will respond within the time required by law. If you are contacting us as a prospect — someone who received or may receive outreach — the customer who contacted you is the controller of that data; we will help route your request to them and honor our obligations as their processor.
Complaints. If you have a concern, please contact us first. You may also complain to:
- The Commission d'accès à l'information du Québec (for Quebec).
- The Office of the Privacy Commissioner of Canada (for PIPEDA).
- Your local data protection authority (for the EU/UK).
11. Children
The Service is not directed to children and is intended for business use by adults (18+). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.
13. Contact us and Privacy Officer
Seowly's person in charge of the protection of personal information (Privacy Officer) can be reached at:
Email: hello@seowly.com Seowly — Montreal, Quebec, Canada.