Privacy Policy

GTTRO AI SEO Studio is a product of GTTRO. Last updated October 28, 2026.

Last updated: October 28, 2026

This Privacy Policy explains what personal data GTTRO ("we", "us") collects, why we collect it, and how GTTRO AI SEO Studio processes it., and your rights regarding that data.

1. Data We Collect

• Account data: Name, email address, hashed password, and account preferences you set.
• WordPress credentials: WordPress usernames and Application Passwords you provide to connect your sites. These are encrypted at rest using authenticated encryption.
• Google Search Console tokens: OAuth refresh tokens that allow us to read your Search Console performance data. These are encrypted at rest.
• Usage data: Article and image generation counts, timestamps of activities, and technical logs.
• Payment data: PayPal customer identifiers and subscription status. We do not store card numbers — payment processing is handled entirely by PayPal.
• Generated content: Articles and images you generate, stored in your account until you delete them.

2. How We Use Your Data

• To provide the Service, including generating articles and publishing them to your WordPress sites.
• To enforce plan quotas and prevent abuse.
• To send transactional emails (password reset, billing receipts).
• To improve the Service (aggregated, non-personal analytics only).

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your personal data under the following legal bases:

• Contract: To provide the Service you have subscribed to.
• Legitimate interest: To prevent abuse and secure the Service.
• Consent: For optional communications, where you have opted in.

4. Third-Party Processors

We share data with the following processors to operate the Service:

• Google (Gemini API and Search Console API): to generate content and read search performance data.
• PayPal: to process subscription payments.
• Hostinger: for web hosting and database storage.
• Paymob (when enabled): to process card payments for Egyptian customers.

5. Data Retention

We retain your account data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain records (e.g., billing records for tax purposes).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a machine-readable format
• Object to or restrict certain processing

To exercise any of these rights, contact us at privacy@gttro.net.

7. International Transfers

Your data may be transferred to and processed in countries outside your own, including the United States, where our third-party processors (Google, PayPal) operate. Where required, we rely on Standard Contractual Clauses or adequacy decisions for such transfers.

8. Security

We encrypt sensitive credentials at rest using authenticated encryption. We use HTTPS for all traffic. We do not store passwords in plain text. However, no system is perfectly secure, and we cannot guarantee absolute security.

9. Cookies

We use a single session cookie to keep you logged in. See our Cookie Policy for details.

10. Contact

For privacy questions, contact privacy@gttro.net.