Legal
Privacy Policy
How we collect, use, and protect your personal information across aiCMO.uk, cmo.so, ai.cmo.so, onboarding flows, dashboards, browser extension workflows, and related services.
Quick Summary
Before the legal language, here is what matters in plain English:
- We collect the minimum data we need to onboard your brand, operate your account, and deliver aiCMO features such as SEO & GEO Autopilot, AI Visibility Tracker, and related workflows.
- We may process your content through AI providers in order to deliver AI-powered features. We do not sell your data to advertisers, brokers, or data resellers.
- We use service providers only where needed to run the service, such as infrastructure, authentication, email delivery, analytics, and payment processing.
- You remain in control of your personal data. You can ask us to access, correct, or delete it, subject to applicable law and legitimate retention requirements.
- One contact for privacy-related matters: [email protected].
1. Who We Are
AI MARKETING OS LTD, trading as aiCMO, is the controller of personal data processed through aiCMO services, including aiCMO.uk, cmo.so, ai.cmo.so, onboarding flows, account services, dashboards, product documentation, case-study pages, browser extension workflows, and related service surfaces, together the "Service".
AI MARKETING OS LTD is a private limited company registered in England and Wales under company number 16687354. Its registered office is 5 Audley Rise, Tonbridge, England, TN9 1XU.
For privacy-related enquiries, requests, or complaints, contact [email protected].
2. What This Policy Covers
This Privacy Policy applies to:
- The Website, including aiCMO.uk and related public pages
- Account services, including registration, authentication, magic-link login, and account management
- Brand onboarding and claim workflows through cmo.so and related endpoints
- Product features such as SEO & GEO Autopilot, AI Visibility Tracker, case-study pages, documentation, and dashboard workflows
- Related tools and integrations, including beta browser-extension and plugin workflows where they are made available by aiCMO
This policy does not apply to third-party websites, apps, platforms, or services we link to or integrate with unless we expressly say otherwise. You should read their privacy policies separately.
3. What Data We Collect
Data You Provide to Us
- Account Data: name, email address, company name, and role if supplied
- Brand and Domain Data: domain names, website URLs, claim requests, onboarding details, and product configuration information
- Communications: support requests, onboarding enquiries, sales conversations, and feedback you send to us
- Payment and Billing Data: billing contacts, invoices, and payment records where paid products or services apply
- AI Input Data: prompts, documents, URLs, content instructions, and other information you choose to submit into aiCMO workflows
Data We Collect Automatically
- Device and Browser Metadata: IP address, browser type, operating system, language, and device-level technical information
- Usage and Analytics Data: pages viewed, links clicked, feature usage, session timestamps, and aggregated product analytics
- Authentication and Security Data: session records, login events, tokens, and logs used to secure accounts and prevent abuse
- Error and Diagnostic Data: service logs, failures, and performance diagnostics used to improve stability and security
- Cookies and Similar Technologies: strictly necessary cookies and, where consented, analytics or preference technologies
Data We Do Not Intentionally Collect
- Precise GPS location data
- Biometric identifiers such as fingerprints or faceprints
- Full payment card numbers handled entirely by payment processors
- Browsing history outside aiCMO services
- Unrelated files from your device unless you actively submit them into the service
4. How We Use Your Data
We use personal data to operate aiCMO, deliver onboarding, process domain claims, run account and dashboard functionality, support AI workflows, improve product quality, prevent abuse, and comply with legal obligations.
| Purpose | Legal Basis |
|---|---|
| Providing aiCMO services and account access | Performance of contract |
| Brand onboarding, domain claim handling, and workflow delivery | Performance of contract |
| Account security, abuse prevention, and fraud monitoring | Legitimate interests |
| Product improvement, diagnostics, and service analytics | Legitimate interests |
| Marketing communications | Consent or legitimate interests, depending on context |
| Cookies and non-essential analytics | Consent where required |
| Legal and regulatory compliance | Legal obligation |
You have the right to object to processing based on legitimate interests. To exercise that right, contact [email protected].
5. Where Your Data Is Stored
Our Servers and Service Providers
aiCMO stores and processes personal data using our own systems and third-party infrastructure providers that support hosting, authentication, communications, analytics, and related functionality. Depending on the service provider used, data may be processed in the United Kingdom, the EEA, or other jurisdictions with appropriate safeguards.
Browser, Device, and Local Storage
Some limited data may be stored in your browser, local device, or extension storage for sessions, preferences, temporary workflow state, or product operation. The exact amount depends on which aiCMO product or feature you use.
What We Do Not Claim
Unless we expressly state otherwise for a specific feature, you should assume that data submitted through aiCMO may be processed on our servers and by our subprocessors where necessary to provide the service.
6. AI Processing
How AI Features Work
When you use AI-powered aiCMO features, your prompts, content, URLs, domain context, and instructions may be transmitted to AI model providers in order to generate outputs such as content strategy, content drafts, SEO and GEO suggestions, workflow recommendations, visibility analysis, or other product responses.
Retention and Processing
Depending on the feature and provider involved, AI-related inputs and outputs may be processed transiently, cached for product functionality, logged for reliability or abuse prevention, or stored where needed to deliver the service to you. We do not sell these inputs or outputs as personal data.
Model Providers
aiCMO may use third-party AI and cloud providers to deliver features. Those providers may process submitted content in accordance with their own terms and privacy policies. Where provider settings permit, we aim to use configurations that are appropriate for business product usage and privacy protection.
Model Training
We do not use your personal data to train our own foundation models. Third-party providers may have separate policies about service data, model improvement, or abuse monitoring, and you should review those policies where relevant.
7. Data Sharing
We may share personal data with:
- Hosting and infrastructure providers
- Authentication, email, and communications providers
- Payment processors and billing service providers
- Analytics, diagnostics, and monitoring providers
- AI model and related cloud providers used to run features
- Professional advisers, regulators, or law enforcement where required
What we do not do:
- Sell your personal data to advertisers, data brokers, or resellers
- Share your data for third-party ad targeting
- Give third parties broad access to your account or brand data unless needed to provide the service or required by law
8. Device Identification and Access Control
aiCMO may create or receive session identifiers, browser tokens, extension identifiers, or other device-related technical markers to keep you signed in, secure your account, prevent abuse, troubleshoot issues, and maintain service continuity.
These identifiers are used for operational and security purposes. They are not intended to function as intrusive consumer tracking tools outside aiCMO services.
10. Data Retention
| Data | Retention |
|---|---|
| Account data | Account lifetime plus a reasonable deletion window after closure |
| Onboarding, domain, and claim records | As long as needed to operate the service and maintain brand history |
| Support requests and correspondence | As long as needed to resolve the request and keep a business record |
| Billing and tax records | As long as required by applicable law and accounting obligations |
| Analytics and diagnostics | Only for as long as reasonably needed for service improvement and security |
| Cookie consent records | As long as needed to demonstrate compliance |
When You Request Deletion
- We may disable access promptly where appropriate
- We will review and action deletion requests within a reasonable time, subject to verification and legal obligations
- Some records may need to be retained for security, compliance, dispute resolution, or tax and accounting requirements
11. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of personal data in appropriate circumstances
- Restrict certain processing
- Object to certain processing based on legitimate interests
- Receive personal data in a portable format where applicable
- Withdraw consent for consent-based processing
How to Make a Request
Email [email protected]. We may ask you to verify your identity before completing a request.
Response Times
We aim to respond within the time required by law. Complex requests may require additional time where the law allows.
12. Data Security
We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, misuse, loss, alteration, or disclosure.
- Access controls and authentication measures
- Logging, monitoring, and security review processes
- Encryption in transit where supported by our infrastructure
- Vendor and infrastructure controls appropriate to the service
No service can guarantee absolute security. If we become aware of a personal data breach that requires notification under applicable law, we will take the steps required by law.
13. Children's Privacy
aiCMO is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact [email protected] and we will review the situation.
Complaints
If you are unhappy with how we handle your personal data, please contact us first at [email protected] so we have the opportunity to resolve the matter.
If you are not satisfied with our response, you may have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, legal obligations, infrastructure, product features, or privacy practices. The latest version will be posted on this page with the updated revision information.
Contact Us
Email: [email protected]
Company: AI MARKETING OS LTD
Registered in: England and Wales
Company number: 16687354
Registered office: 5 Audley Rise, Tonbridge, England, TN9 1XU