Legal
Privacy policy
Last updated: 15 October 2026
Applies from launch. Digital Adept isn't open to the public yet. Items in [square brackets] are filled in once the company's details are final.
The short version
- Digital Adept is SEO reporting software for agencies. We keep what an agency needs to run its account and its clients' work, and nothing more.
- For an agency's own account we are the controller. For the information agencies add about their clients, the agency is the controller and we process it for them (see the data processing agreement).
- We don't sell personal information, show adverts, or use anyone's data to train AI. Our AI runs on Amazon Bedrock in Europe with zero data retention.
- Everything is stored in the UK (AWS, London) and encrypted.
1. Who we are
Digital Adept is run by Cloud Adept Limited, a company registered in England and Wales (number 09216333), at Hazlemere, 70 Chorley New Road, Bolton, Lancashire, BL1 4BY(“we”, “us”). We're registered with the UK Information Commissioner's Office (registration ZC272649). Contact us about privacy at support@digitaladept.io.
2. What we collect
| What | Details | From |
|---|---|---|
| Account details | Work email address, agency name, role, and an authenticator app secret if you turn one on (encrypted). There are no passwords. | You |
| How you found us | When you sign up: the website that sent you to ours (its name only) and any campaign tags in the link, so we can see which of our marketing works. No cookies or tracking: it's in the link you followed | Your browser |
| Agency branding | Logo, brand colour, reply-to address and, if set, your own report address | You |
| Client work | Clients' names and websites, report recipients' emails, tasks, notes, reports, briefs and articles, and the questions tracked in AI search | You (as the agency) |
| Data from Google | Search Console, Analytics and Business Profile figures and reviews, for the properties you link | Google, with your permission |
| Client portal accounts | Email addresses of people at your clients you invite, their authenticator secret (encrypted), and their approvals | You and them |
| Leads | Name, email and website of people who use your lead widget | Your website's visitors |
| Payments | Plan, invoices and payment status. Card details go to Stripe, never to us | Stripe |
| Support | What you write to us, and your help assistant conversation if you send it with a request | You |
| Security | IP address, sign-in attempts and when you last used the app | Your device |
| Website visits | Our web server's logs: IP address, browser, rough location, the pages opened and the site you came from. We count visitors from them; only daily totals are kept, never who visited. No cookies | Your device |
Our crawler reads public web pages of the websites you audit; it doesn't collect personal information from them on purpose.
3. Why we use it, and the law that allows it
| Why | Legal basis (UK and EU GDPR) |
|---|---|
| To provide the service: accounts, audits, reports, the client portal, emails you ask for | Contract (Article 6(1)(b)) |
| To take payment and keep tax records | Contract; legal obligation (Article 6(1)(c)) |
| To keep the service secure and prevent abuse | Legitimate interests (Article 6(1)(f)) |
| To count visitors to our website and where they came from (daily totals only) | Legitimate interests |
| To answer support requests | Contract; legitimate interests |
| To process client data on an agency's behalf | The agency's instructions, under our data processing agreement (Article 28) |
4. Who we share it with
Only the service providers that run Digital Adept for us, under contract, and only what each needs:
- Amazon Web Services (hosting in London, email sending, and Claude on Amazon Bedrock for AI features, with no data kept)
- Stripe (payments)
- Microsoft (our support mailbox)
- Google (only when you connect Search Console, Analytics or Business Profile)
- OpenAI, Perplexity and Anthropic, if AI search checks with them are switched on: they receive only the questions you track, never personal information
We'd also share information if the law required it. Some providers are outside the UK; where they are, transfers are covered by adequacy regulations or standard contractual clauses.
5. How long we keep it
- While your agency has an account. When the account holder closes it, everything is deleted straight away, except invoices, which we keep for 6 years for tax.
- Deleted reports, briefs and articles go at once; their usage counts stay for the month's allowance.
- Backups are kept for up to 35 days and then overwritten.
- Web server logs are kept for 30 days, then deleted; the daily visitor totals made from them have no personal information.
6. Your rights
You can ask to see, correct, delete, restrict or move your information, or object to how we use it, by emailing support@digitaladept.io. We reply within one month. If your information was added by an agency, we'll pass your request to them. You can also complain to the Information Commissioner's Office (ico.org.uk).
7. Security
Every account signs in with an emailed code, plus an authenticator app once it's turned on (our own staff always use one). Data is encrypted in transit and at rest, access is limited to the few staff who need it, and admin actions are logged. If something goes wrong that affects your information, we'll tell you and the ICO as the law requires.
8. Changes
If we change this policy in a way that matters, we'll email account holders before it takes effect.