Legal
Privacy policy
Last updated: 17 October 2026
Applies from launch. Digital Adept isn't open to the public yet. Items in [square brackets] are filled in once the company's details are final.
The short version
- Digital Adept is SEO reporting software for agencies. We keep what an agency needs to run its account and its clients' work, and nothing more.
- For an agency's own account we are the controller. For the information agencies add about their clients, the agency is the controller and we process it for them (see the data processing agreement).
- We don't sell personal information, show adverts, or use anyone's data to train AI. Our AI runs on Amazon Bedrock in Europe with zero data retention.
- Everything is stored in the UK (AWS, London), with backup copies in Ireland (EU), and encrypted.
1. Who we are
Digital Adept is run by Cloud Adept Limited, a company registered in England and Wales (number 09216333), at Hazlemere, 70 Chorley New Road, Bolton, Lancashire, BL1 4BY(“we”, “us”). We're registered with the UK Information Commissioner's Office (registration ZC272649). Contact us about privacy at support@digitaladept.io.
2. What we collect
| What | Details | From |
|---|---|---|
| Account details | Work email address, agency name, role, and an authenticator app secret if you turn one on (encrypted). There are no passwords. | You |
| How you found us | When you sign up: the website that sent you to ours (its name only) and any campaign tags in the link, so we can see which of our marketing works. No cookies or tracking: it's in the link you followed | Your browser |
| Agency branding | Logo, brand colour, reply-to address and, if set, your own report address | You |
| Client work | Clients' names and websites, report recipients' emails, tasks (with the time logged on them), notes, reports and the notes added to them, briefs and articles, and the questions tracked in AI search | You (as the agency) |
| Data from Google | Search Console, Analytics and Business Profile figures and reviews, for the properties you link | Google, with your permission |
| Data from Bing | Bing Webmaster Tools figures (clicks, searches and pages) for the sites you link, and your Bing API key (encrypted, never shown again) | Microsoft, with your key |
| Ads and social figures | Spend, clicks, followers and similar totals from the ad and social accounts you connect | Those platforms, with your permission |
| Search and link data | Where tracked keywords rank, keyword ideas, and the websites linking to your clients' sites. Keywords and website addresses only | DataForSEO |
| Client portal accounts | Email addresses of people at your clients you invite, their authenticator secret (encrypted), and their approvals | You and them |
| Leads | Name, email and website of people who use your lead widget | Your website's visitors |
| Payments | Plan, invoices and payment status. Card details go to Stripe, never to us | Stripe |
| Support | What you write to us, and your help assistant conversation if you send it with a request | You |
| Security | IP address, sign-in attempts, when you last used the app, and API keys (only a scrambled copy is kept) | Your device |
| Website visits | Our web server's logs: IP address, browser, rough location, the pages opened and the site you came from. We count visitors from them; only daily totals are kept, never who visited. No cookies | Your device |
Our crawler, uptime checks and site move checker read public web pages of the websites you add or check; they don't collect personal information from them on purpose.
3. Why we use it, and the law that allows it
| Why | Legal basis (UK and EU GDPR) |
|---|---|
| To provide the service: accounts, audits, reports, the client portal, emails you ask for | Contract (Article 6(1)(b)) |
| To take payment and keep tax records | Contract; legal obligation (Article 6(1)(c)) |
| To keep the service secure and prevent abuse | Legitimate interests (Article 6(1)(f)) |
| To count visitors to our website and where they came from (daily totals only) | Legitimate interests |
| To answer support requests | Contract; legitimate interests |
| To process client data on an agency's behalf | The agency's instructions, under our data processing agreement (Article 28) |
4. Who we share it with
Only the service providers that run Digital Adept for us, under contract, and only what each needs:
- Amazon Web Services (hosting in London, email sending, and Claude on Amazon Bedrock for AI features, with no data kept)
- Stripe (payments)
- Microsoft (our support mailbox)
- Google (only when you connect Search Console, Analytics or Business Profile), and Google PageSpeed Insights, which receives the addresses of pages we test
- DataForSEO (rank tracking, keyword research and backlinks): it receives keywords and website addresses, never personal information
- Microsoft Bing, only when you add your Bing Webmaster key; and IndexNow (used by Bing and other search engines), which receives the addresses of changed pages
- Google Ads, Meta, Microsoft Advertising, LinkedIn, TikTok and X, only for the ad and social accounts you connect
- OpenAI, Perplexity and Anthropic, if AI search checks with them are switched on: they receive only the questions you track, never personal information
We'd also share information if the law required it. Some providers are outside the UK; where they are, transfers are covered by adequacy regulations or standard contractual clauses.
5. How long we keep it
- While your agency has an account. When the account holder closes it, everything is deleted straight away, except invoices, which we keep for 6 years for tax.
- Deleted reports, briefs and articles go at once; their usage counts stay for the month's allowance.
- Backups are kept for up to 35 days (copies in London and Ireland) and then overwritten.
- Our own staff's admin log (which account an admin acted on, and when) is kept for 6 years, like invoices, in case of a dispute.
- Web server logs are kept for 30 days, then deleted; the daily visitor totals made from them have no personal information.
6. Your rights
You can ask to see, correct, delete, restrict or move your information, or object to how we use it, by emailing support@digitaladept.io. We reply within one month. If your information was added by an agency, we'll pass your request to them. You can also complain to the Information Commissioner's Office (ico.org.uk).
7. Security
Every account signs in with an emailed code, plus an authenticator app once it's turned on (our own staff always use one). Data is encrypted in transit and at rest, access is limited to the few staff who need it, and admin actions are logged. If something goes wrong that affects your information, we'll tell you and the ICO as the law requires.
8. Changes
If we change this policy in a way that matters, we'll email account holders before it takes effect.