A-Stats Content← Back to home

Privacy Policy

Last updated: March 14, 2026

1. Who We Are

A-Stats (“we”, “us”, “our”) operates A-Stats Content, an AI-powered SEO content platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using A-Stats Content you agree to the terms described here.

2. Information We Collect

Account Data

When you register, we collect your name, email address, and password (stored as a one-way hash). If you connect third-party accounts (Google Search Console, social media platforms), we store the OAuth tokens required to access those services on your behalf.

Content You Create

Articles, outlines, images, keywords, and other content you generate or upload are stored to provide the service. You retain full ownership of your content.

Social Media Data

If you connect social media accounts (Facebook, Instagram, LinkedIn), we store encrypted OAuth access tokens and page tokens to publish content on your behalf. We also store your platform username, display name, and profile image URL for identification within the app. Post content, media URLs, scheduling data, and engagement metrics (likes, comments, shares, impressions) are stored to provide the social publishing and analytics features.

Usage Data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the service. We track feature usage (e.g. articles generated this month) to enforce plan limits.

Payment Data

Payments are processed by LemonSqueezy. We do not store your card details. We receive webhook notifications from LemonSqueezy confirming subscription status and store only non-sensitive subscription metadata (plan tier, billing cycle, expiry date).

3. How We Use Your Information

  • Provide, maintain, and improve the A-Stats Content platform
  • Process your subscription and manage plan limits
  • Send transactional emails (account verification, password reset, project invitations)
  • Respond to support requests
  • Monitor for abuse, fraud, and security incidents
  • Comply with legal obligations

We do not sell your personal data. We do not use your content to train AI models.

4. Third-Party Services

We share data with third parties only as necessary to operate the service:

  • Anthropic — Article content is generated via the Claude API. Anthropic's privacy policy governs their data handling.
  • Google (Gemini API) — SERP research and keyword analysis are processed via Google's Gemini API.
  • OpenAI — Content outlines are generated via the GPT API.
  • Replicate — Image generation requests are processed via Replicate's hosted models.
  • Facebook / Instagram (Meta) — When you connect a Facebook or Instagram account, we use Meta's APIs to publish posts and retrieve engagement metrics on your behalf.
  • LinkedIn — When you connect a LinkedIn account, we use LinkedIn's API to publish posts on your behalf.
  • LemonSqueezy — Payment processing and subscription management.
  • Resend — Transactional and journey email delivery.
  • PostHog — Product analytics hosted in the EU (Frankfurt, Germany). We collect anonymous feature usage data (page views, navigation patterns) under our legitimate interest to improve the product (GDPR Article 6(1)(f)). This data uses memory-only storage and does not involve cookies or IP collection. With your explicit consent (“Accept All” cookies), we additionally collect IP-based location data and persistent identifiers for cross-session analytics. You can manage your preferences via the cookie banner at any time.
  • Sentry — Error monitoring to detect and fix bugs. May capture technical context (e.g. stack traces) but not personal content.
  • Google Analytics 4 — Website analytics with anonymised IP. Only active if you consent to analytics cookies.
  • Railway / Vercel — Infrastructure hosting (database, backend, frontend).

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. billing records for up to 7 years).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Object to or restrict processing of your data
  • Receive a copy of your data in a portable format
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at privacy@astats.app.

7. Security

We implement industry-standard security measures including encryption at rest and in transit, hashed passwords, application passwords for third-party integrations, and regular security reviews. No system is perfectly secure; in the event of a breach we will notify affected users as required by applicable law.

8. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a prominent notice on the platform at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance of the updated policy.

Data Minimization — AEO Grader Tool

The free AEO & SEO Grader tool (/tools/aeo-grader) is available without an account and operates under a strict data-minimization policy.

What we collect

When you analyze a URL, we store: the URL you submitted, the optional target keyword, the computed AEO and SEO scores, individual metric results, and a rotating cryptographic hash of your IP address. Raw IP addresses are purposefully discarded in favor of a rotating cryptographic hash to protect user privacy — the hash cannot be reversed to identify you and is used solely for rate-limiting abuse.

Retention

Anonymous grader results are retained for 30 days, after which they are automatically deleted. Results are flagged with an is_public flag; if you wish to have a specific result removed before the 30-day window, contact us at privacy@astats.app.

Legal basis

IP hashing is processed on the basis of legitimate interest (GDPR Art. 6(1)(f)) for rate-limiting and abuse prevention. No other personal data is collected by this tool.

No tracking

The AEO Grader tool page does not set cookies, does not load analytics scripts, and does not track your usage in any way beyond the anonymous rate-limit hash described above.

10. Contact

For privacy-related questions or requests, contact us at privacy@astats.app.