Privacy Policy
Last updated: April 24, 2026
RankPilot Studio is now CocoSEO.
1. Information We Collect
When you create an account or use CocoSEO, we may collect the following information:
- Account Information: Email address and password (or Google account identifier if using Google Sign-In).
- Site Data: URLs you submit for content generation, including crawled page content used to generate articles.
- Usage Data: Interaction logs, feature usage, and analytics to improve our service.
- Payment Information: Billing details processed securely through our payment provider (Stripe/DodoPayments). We do not store full credit card numbers.
- Social Media Integration Data: When you connect a third-party social account (LinkedIn, Pinterest, or Instagram via Facebook Login), we receive and store: your user or account identifier, display name and handle, profile or page avatar, the list of Facebook Pages you administer, the linked Instagram Business/Creator account id, LinkedIn organization ids you administer, and OAuth access tokens (including page-scoped tokens and refresh tokens). We request only the minimum permissions needed to publish content you create in CocoSEO on your behalf.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve CocoSEO services.
- Generate SEO-optimized content based on the URLs and keywords you provide.
- Process payments and manage your subscription.
- Send transactional emails related to your account and service updates.
- Analyze usage patterns to improve features and user experience.
- Publish content to your connected social media accounts at the times you schedule, using the OAuth tokens you provided during the connection flow.
3. Data Sharing
We do not sell your personal data. We may share information with:
- Service Providers: Third-party APIs (OpenAI, Google Gemini, Replicate, AWS S3) used to generate content, images, and keyword research on your behalf.
- Social Media Platforms: When you choose to publish, we send your post content (captions, images, links) to LinkedIn, Pinterest, or Meta (Facebook / Instagram) on your behalf, using the OAuth tokens you authorized. Our use of information received from Meta APIs (Facebook Login, Instagram Graph API) follows the Meta Platform Terms and Developer Policies. Similarly, our use of data from LinkedIn APIs follows the LinkedIn API Terms of Use, and data from Pinterest APIs follows the Pinterest Developer Guidelines.
- Payment Processors: To handle billing and subscriptions.
- Legal Requirements: When required by law or to protect our rights.
4. Social Media Integrations
You may optionally connect third-party social media accounts (LinkedIn, Pinterest, Instagram via Facebook Login) to publish AI-generated content. For each integration:
- We only request the minimum OAuth scopes required to list your pages/accounts and publish content on your behalf (e.g.
w_member_social,w_organization_socialfor LinkedIn;instagram_content_publish,pages_show_listfor Meta;pins:writefor Pinterest). - Tokens are stored encrypted at rest and are used only to fulfill actions you initiate (immediate or scheduled posts).
- We do not read your private messages, comments, or inbox content. We do not scrape feeds.
- We do not sell, transfer, or use social-platform data for advertising or profiling.
- You can disconnect at any time from Settings → Social Media. Disconnecting deletes the stored tokens and account metadata from our systems. You can also revoke access directly from the platform (LinkedIn app permissions, Facebook Business Integrations, Pinterest connected apps).
5. Data Security
We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and secure token-based authentication. Access to production systems is restricted to authorized personnel.
6. Data Retention & Deletion
We retain your account data for as long as your account is active. Generated content (articles, images) is retained until you delete it or close your account. Social media OAuth tokens and connected-account metadata are retained until you disconnect the account or close your CocoSEO account, at which point they are deleted immediately.
You may request deletion of your data at any time. See our Data Deletion Instructions or email support@cocoseo.co.
7. Your Rights
You have the right to:
- Access and export your data.
- Request correction of inaccurate information.
- Request deletion of your account and associated data.
- Opt out of non-essential communications.
8. Cookies
We use local storage and session tokens for authentication. We may use analytics cookies to understand how our service is used. You can control cookie settings through your browser.
9. Children's Privacy
CocoSEO is not intended for use by children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.
11. Contact Us
If you have questions about this privacy policy, please contact us at support@cocoseo.co.