Back to home

Privacy Policy

Last updated: 10 October 2026

This explains what OnlyAI Matters (“we”, “us”) collects when you use the OnlyAI SEO website, the OnlyAI Cloud service and the WordPress plugin, why, who helps us handle it, and what you can ask us to do. We have kept it plain on purpose.

The short version

Who is responsible

OnlyAI Matters, based in Bangalore, India, runs OnlyAI SEO and decides how the personal data described here is used. For the text that passes through an AI request on your behalf (see below) we act on your instructions, as your processor.

What we collect, and why

Your account

Your email address and a hash of your password (we cannot read the password). We use them to sign you in, send password reset and service emails, and tell you apart from other accounts. Basis: running the service you asked for.

API keys and connected sites

For each key: a hash we use to check it, its first characters so you can recognise it, the label and site address you gave it, when it was made and last used. We also keep an encrypted copy of each key so that you can copy it again from your dashboard. Basis: running the service.

Usage records

Each AI request leaves a row: your account, the key, the site address, which feature asked (for example “1-click SEO”), which AI model answered, token counts, how long it took, whether it worked (and a short error message if it did not), and the time. It does not include the text you sent or the answer you got. We use it to apply your daily limit, show you where your requests went, find faults and spot abuse. Basis: running the service, and our interest in keeping it secure and fair.

Billing records

Your plan, the customer and subscription references Dodo Payments gives us, and for each payment its amount, currency, status and date. We do not receive or store card numbers. Basis: contract and legal duties to keep accounting records.

Technical data

Your IP address appears in our hosting and network logs and is used briefly to limit sign-in attempts and other abuse. Basis: security.

When you write to us

We keep the emails you send to [email protected] and our replies so we can help you and remember what we said.

What happens to the text of an AI request

When you press an AI button in the plugin, it sends only what that request needs (for example a post title, an excerpt, a keyword) with your key to OnlyAI Cloud. We pass it to an AI model to produce the answer and return the answer to your site. We do not store the text or the answer, and we do not use it to train any model. The AI providers we use process it to answer the request; they are listed below.

Nothing is sent unless you have connected a key and used an AI feature. The plugin does not send your visitors’ data. Analysis, scoring and settings stay on your WordPress site.

Cookies

When you sign in we set one cookie that keeps you signed in. It is needed for the site to work and is removed when you sign out or it expires. We use no advertising, tracking or analytics cookies, so there is no cookie banner.

Who else handles your data

We use these services to run OnlyAI SEO. Each only gets what it needs for its job.

We do not sell your data and we do not share it with anyone else, except where the law requires it or to protect the service from abuse. If we ever change one of these providers in a way that matters, we will update this page.

Where data is processed

We are based in India and our providers run in several countries, including outside the European Economic Area and the UK. Where the law requires it we rely on approved safeguards, such as the standard contractual clauses, for those transfers.

How long we keep it

Your rights

Depending on where you live (for example under the GDPR or UK GDPR) you can ask us to: tell you what we hold about you, correct it, delete it, give you a copy in a usable format, restrict or stop certain processing, or tell us you object to it. Write to the address below from the email on your account and we will act within one month. You can also complain to your local data protection authority.

Security

Passwords are stored only as hashes. API keys are hashed for checking and encrypted where we keep a copy. Everything travels over HTTPS, sign-in and key use are rate limited, and access to the database is restricted. No system is perfectly safe: if something happens that affects your data, we will tell you without undue delay.

Children

OnlyAI SEO is for people running websites. It is not meant for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will change the date at the top and, for changes that affect your rights, email account holders.

Contact

Questions about this page, or a request about your data: [email protected]. We answer within a few working days.

OnlyAI Matters, Bangalore, India.

Privacy · Terms · Refunds · Data protection · License