Privacy policy

Who we are

Climber (climberseo.com and app.climberseo.com) is an AI assistant for SEO research and writing, operated by Excelence Labs LLC. We are the controller of the personal data described here.

For any privacy question or request, email hello@climberseo.com.

What we collect

• Account data: your email address and, if you sign in with Google, your name and profile picture as provided by Google Sign-In. Team members' email addresses when the account owner invites them.
• Sites you add: the website address, target country, and the profile Climber builds from public search data and your public web pages (what you sell, who you serve, your tone of voice).
• Chats and content: your questions, Climber's answers, the research data fetched to answer them, saved keywords, tasks, and articles you write or edit in the editor (including images you upload).
• Connected accounts (optional): if you connect Google Search Console, Google Analytics or WordPress, the access tokens or application password needed to use them, stored encrypted (AES-256-GCM).
• Billing data: your plan and subscription status. Card details are entered on our payment processor's page and never reach our servers.
• Technical data: IP addresses and request logs, used for security, rate limiting and troubleshooting.

How we use it

• To provide Climber: run the research you ask for, answer your questions, write and edit content, and save drafts to WordPress when you ask.
• To manage your account, subscription, credits and team.
• To keep the service secure and working, and to understand and control our costs.
• To contact you about your account (for example sign-in links, billing and important service notices).

Google user data

Climber's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect a Google account, Climber asks for read-only access to two Google services. Climber cannot change anything in your Google accounts.

• Google Search Console (webmasters.readonly): we read the list of your Search Console properties so you can pick the one for each site, and that property's search performance data (queries, pages, clicks, impressions, click-through rate and average position). Climber uses it to answer your questions about your own site, find your striking-distance keywords, detect pages competing for the same query, and track your rankings week to week.
• Google Analytics (analytics.readonly): we read the list of your Analytics 4 properties and, for the property you pick, landing-page sessions, engaged sessions and key events. Climber uses it to answer your questions about which pages bring visitors and conversions.
• Google Sign-In (openid, email): used only to identify the Google account you connected or signed in with.

What we never do with Google user data

• We never sell Google user data.
• We never use it for advertising, including retargeting, personalised or interest-based ads.
• We never use it to train or improve general AI or machine-learning models, ours or anyone else's.
• We only send it to our AI model provider to answer your own questions in your own chats, and only the part needed for that answer. It is not shared with other users or other third parties, except the processors listed below acting on our instructions, or where the law requires it.
• Humans at Climber don't read your Google data, except with your permission (for example to help with a support request), for security reasons, or where the law requires it.

Service providers (processors)

We use the following categories of providers to run Climber. Each receives only the data it needs for its job and processes it on our instructions.

• Cloud hosting and database provider: runs the application and stores your account, sites, chats, articles and encrypted credentials; also handles sign-in and sign-in emails.
• AI model provider: generates Climber's answers and articles from your questions and the research data for each chat, including your Google data when you ask about it.
• Search and SEO data provider: supplies keyword, ranking and search-result data; it receives the keywords, domains and web pages being researched.
• Payment processor: handles subscriptions, card payments, invoices and the billing portal.
• Email delivery provider: sends service emails such as account notices and alerts.
• A list of our processors is available on request at hello@climberseo.com.

How long we keep data

• Account, sites, chats, articles and tasks: for as long as your account is open. When your account is deleted, they are deleted within 30 days.
• Google and WordPress credentials: until you disconnect the account (deleted immediately) or delete your Climber account.
• Cached Google data (Search Console and Analytics reports): up to 24 hours, so repeated questions don't call Google again.
• Cached public search data and public web pages: up to 30 days.
• Billing records: as long as tax and accounting law requires (generally up to 7 years), kept by us and our payment processor.
• Security and request logs: up to 30 days.

Revoking Google access

You can disconnect Google at any time: in Climber, open Settings → Connections and click Disconnect next to your Google account. This revokes Climber's access at Google and deletes the stored tokens immediately.

You can also revoke access from your Google account at myaccount.google.com/permissions. Data Climber already cached from Google expires within 24 hours.

Deleting your account

• If you have a paid plan, cancel it first in Billing → Manage billing.
• You can remove individual sites in Settings → Sites.
• To delete your whole account and all its data, email hello@climberseo.com from the email address you sign in with. We confirm the request and delete everything within 30 days (except billing records the law requires us to keep).
• To get a copy of your data, email hello@climberseo.com.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict some processing. Email hello@climberseo.com and we'll respond within 30 days. You can also complain to your local data protection authority.

Security

Data is sent over encrypted connections (HTTPS). Connected-account credentials are encrypted at rest. Access to data is limited to your account and its members, enforced in the application and in the database.

Children

Climber is a business tool and isn't meant for anyone under 16. We don't knowingly collect data from children.

Changes

When this policy changes we update the date at the top of this page, and we email account holders about material changes before they take effect.