Privacy Policy

This Privacy Policy explains how Kalpavriksha SEO ("the Service", "we", "us") collects, uses, stores, and protects information when you use the SEO audit application at seo.kalpavrikshaai.com, including the free audit tool, the embeddable widget, and the account dashboard. Kalpavriksha SEO is operated by Kalpavriksha AI, an Australian business.

Account information: name, email address, organisation name, and password (stored as a salted hash, never in plain text) when you register for an account.

Audit data: the website URLs you submit for auditing, and the results generated — issues found, scores, backlink data, topic clusters, and crawl results.

Free audit / embedded widget submissions: if you use the public audit tool without an account, we collect the name, email, and company name you provide, plus the URL you asked us to audit.

Third-party API keys: if you choose to connect your own Anthropic, OpenAI, Ahrefs, or SEMrush account, the API key you provide is encrypted at rest (AES-256-GCM) before storage.

Technical data: IP address, browser type, and basic usage data needed for security, rate-limiting, and abuse prevention.

We use the information above to: create and manage your account; run the audits, scans, and reports you request; generate AI-assisted insights and recommendations; prevent abuse of the free tools (rate limiting); email you about your account, password resets, or audit results; and improve the Service.

Audit insights, content recommendations, and report summaries are generated using large language models (Anthropic Claude and/or OpenAI GPT). If you have not connected your own API key, these requests are processed using Kalpavriksha AI's own account with that provider. The content of the pages you ask us to audit, and the data our crawler collects from them, may be sent to these providers to generate your results. We do not send your account password or stored API keys to these providers.

The public audit tools (the /seo-audit page and the embeddable widget) exist to generate leads for Kalpavriksha AI's agency services, in addition to giving you a useful free audit. If you submit your name, email, and company through these tools, that information — along with a summary of your audit results — is automatically sent to Kalpavriksha AI's CRM (GoHighLevel) via an internal automation, so our team can follow up about our services. You can opt out of further contact at any time by replying to any follow-up message or contacting us directly (see Section 13).

If you create an account, we use a session cookie/token to keep you signed in. We do not currently use third-party advertising or tracking cookies within the application itself.

We rely on the following categories of third-party providers to operate the Service: AI providers (Anthropic, OpenAI) for report generation; GoHighLevel for CRM and lead follow-up; Resend for transactional email (password resets, notifications); and our hosting/infrastructure provider (self-hosted on a VPS). These providers process data under their own privacy policies and security practices.

We take reasonable steps to protect your information, including: password hashing, encryption of stored third-party API keys, rate limiting on public endpoints, role-based access controls (Owner/Admin/Member) within organisations, and validation to prevent our crawler being used against internal or unauthorised systems (SSRF protection). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account and audit data for as long as your account is active, or as needed to provide the Service, comply with legal obligations, and resolve disputes. You can request deletion of your account and associated data at any time (Section 10).

You may request access to, correction of, or deletion of your personal information by contacting us at the email below. We may need to verify your identity before actioning a request. Organisation Owners/Admins can also manage site and API key data directly within Settings.

Some of the third-party providers listed above may store or process information outside Australia. By using the Service, you acknowledge your information may be processed in other countries where our providers operate.

The Service is intended for business use by adults. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new "last updated" date.

For privacy questions, access requests, or complaints, contact Kalpavriksha AI at hello@kalpavrikshaai.com. This Privacy Policy should be read together with our Terms & Conditions.