Privacy Policy | Blue Kite SEO

1. What this policy covers

We aim to handle personal information in accordance with applicable Australian privacy law, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply.

This policy applies to information handled through:

your Blue Kite SEO account;
your Business Profile;
your Strategy Intake;
website analysis and website evidence;
SEO Strategy generation and updates;
Monthly Plan generation;
existing-page and article review;
page and article generation;
revisions and generation history;
uploaded business media;
WordPress connections and publishing;
optional Google Search Console and Google Analytics reporting connections;
subscriptions and billing;
customer support; and
security and normal operation of the Service.

Although Blue Kite SEO is a business service, business information may still be personal information where it identifies or relates to an individual.

2. Information we collect

Depending on how you use Blue Kite SEO, we may collect the following kinds of information.

Account information

This may include your:

name;
email address;
account and authentication information;
login and session information;
email-confirmation and account-recovery activity; and
records showing acceptance of our Terms and Privacy Policy.

Support requests

When you contact support from your account, we may keep your subject and messages, the request status and replies, and relevant account, business, page, task or error details needed to investigate the issue. We use your account email to send support updates.

Business information

Your Business Profile, Strategy Intake and related account information may include:

business name and website;
ABN if you provide it;
public contact details;
business address if provided;
services and service areas;
opening hours and availability;
customers and audiences;
business goals and priorities;
current business circumstances relevant to SEO planning;
pricing or offer information;
licences, certifications, warranties and insurance information;
reviews and reviewer names;
images and brand material; and
other information you choose to provide for SEO planning and content generation.

Blue Kite SEO may continue to use approved Business Profile information across future Strategies, Monthly Plans and generated work until you update it.

Website information

If you provide a website, Blue Kite SEO may analyse publicly accessible information from that website.

Website information may include:

URLs;
page titles and headings;
metadata;
publicly visible page content;
internal links;
website structure;
page and publication status;
content summaries;
technical identifiers or fingerprints used to recognise whether content has changed; and
other evidence relevant to understanding the website and making SEO decisions.

Some publicly accessible website pages may contain personal information, such as names, business contact details, testimonials or other information already displayed on the website.

Blue Kite SEO may retain website evidence so it can understand what has already been reviewed, recognise changes and avoid unnecessarily analysing unchanged content from the beginning each time.

Not every known page is necessarily reviewed to the same depth at the same time.

SEO Strategy and Monthly Plan information

We may store information associated with:

SEO Strategies;
Strategy updates and review history;
Monthly Plans;
planned website and content work;
existing-page and article review decisions;
recommendations to keep, improve, consolidate or otherwise review existing content;
owner, developer or specialist actions identified by a plan;
dependencies and limitations;
planning history; and
information needed to maintain continuity between planning periods.

Generated content and AI information

We may store information associated with:

generated page and article drafts;
Content Item Briefs and other generation instructions;
relevant input context;
revisions;
review and approval status;
publishing status; and
generation history reasonably required to provide, support and troubleshoot the Service.

Optional Google reporting (added 8 October 2026)

If you connect Search Console or Google Analytics, Blue Kite SEO requests read-only access to the relevant Google reporting service. We access property and web-stream details so you can choose your website, then import aggregate search-performance or website-visit figures and counts for contact events you explicitly select. We do not access visitor names, contact-form contents or individual Google user profiles through these connections, and we do not change your website tags or Analytics configuration.

Reporting credentials are encrypted and held on the server. Report data is stored in our hosted application database to display your reports and reporting history. We use Google reporting data only for these reporting features; it is not sent to OpenAI, used for advertising or sold to third parties.

You can disconnect a source from Reports to remove its active credentials. Saved report history remains until your account is deleted under our account-deletion process. Disconnecting in Blue Kite does not remove other permissions you have granted to Google applications; you can also revoke Google access through your Google Account settings.

Blue Kite SEO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

WordPress information

If you connect WordPress, we may handle information needed to maintain the connection and carry out publishing actions, such as:

website details;
connection credentials or tokens;
publishing status;
post and media references; and
URLs associated with content sent to your website.

Billing information

Stripe processes payments for Blue Kite SEO.

We may receive and store billing information such as:

customer and subscription references;
transaction references;
plan and subscription status;
billing dates;
amounts and currency;
payment status; and
cancellation information.

Blue Kite SEO does not store your full payment-card number or CVV.

Operational and security information

We may collect limited technical and operational information needed to:

secure accounts;
prevent bots, fraud and abuse;
operate the Service;
manage website-analysis activity;
diagnose problems;
manage usage and plan entitlements;
prevent duplicate or unauthorised processing;
record AI-generation and system status; and
maintain appropriate business, security and audit records.

This may include technical identifiers, request information, timestamps, status records, usage information and information about visits to the public Blue Kite SEO website.

3. Information Blue Kite SEO does not currently collect

Blue Kite SEO does not currently collect or manage enquiries submitted by visitors to your WordPress website.

Forms shown inside a Blue Kite SEO Preview are currently previews rather than live Blue Kite SEO-hosted lead forms.

If a form or shortcode is published to your WordPress website, enquiries are handled by your website and the relevant WordPress, hosting or form providers.

If Blue Kite SEO introduces its own lead-capture service in the future, we will update this Privacy Policy to explain that processing.

Blue Kite SEO is also not intended to be used as a customer, patient, employee or client-record management system.

4. How we collect information

We may collect information:

directly from you;
when you create or use an account;
when you complete or update your Business Profile;
when you complete a Strategy Intake;
when you review or update a Strategy or Monthly Plan;
when you upload material;
from your publicly accessible website;
from a connected WordPress website;
from Stripe and other providers involved in delivering the Service;
automatically through authentication, security and ordinary technical operation of Blue Kite SEO; and
through analytics used on the public Production website.

Website information may be collected again or compared with previously stored evidence where reasonably necessary to identify changes, refresh stale information or support later SEO decisions.

5. Why we use information

We use information where reasonably necessary to:

create and secure your account;
confirm your email and recover account access;
process subscriptions and payments;
build and maintain your Business Profile;
record current Strategy priorities;
analyse your publicly accessible website;
maintain an understanding of website content and changes over time;
generate and update SEO Strategies;
generate Monthly Plans;
review relevant existing pages and articles;
identify potentially overlapping, outdated or missing content;
prepare page and article briefs;
generate and revise pages and articles;
maintain planning and content continuity;
avoid unnecessarily repeating completed work;
publish customer-selected content to WordPress;
provide support;
diagnose failed or incorrect analysis, generation or publishing;
prevent fraud, bots, unauthorised crawling and misuse;
maintain security and reliability;
understand how visitors find and use the public Blue Kite SEO website;
improve public website content, navigation and performance;
enforce usage and introductory-offer rules;
investigate billing disputes; and
comply with legal, accounting and regulatory obligations.

We do not sell your personal information to advertisers.

6. Artificial intelligence and OpenAI

Blue Kite SEO uses OpenAI to provide AI-assisted Strategy, planning, website-review and content-generation functions.

The information sent for AI processing depends on the task being performed.

Relevant information may include:

approved Business Profile information;
Strategy Intake answers;
SEO Strategy information;
Monthly Plan context;
selected public website information and website evidence;
existing page or article content where closer review is required;
previous planning or review information where continuity is relevant;
Content Item Briefs;
draft content needed for generation or revision; and
source information needed to help the AI distinguish approved business facts from website observations or other context.

Not every AI request receives all information held in your account. Blue Kite SEO supplies information relevant to the particular analysis, planning, review or generation task.

You should not place unnecessary sensitive or confidential personal information into AI-facing fields.

OpenAI currently states that inputs and outputs submitted through its API and business products are not used to train or improve its models by default unless the customer expressly opts in.

OpenAI's handling, security and retention of API information is subject to its current data controls, contractual terms and legal obligations.

Blue Kite SEO does not promise that AI processing occurs only in Australia.

7. Website analysis and existing-content review

Blue Kite SEO may retain information about publicly accessible website pages so that it can:

understand the website as a whole;
recognise content that already exists;
identify when previously reviewed content changes;
support later Strategy and Monthly Plan decisions;
avoid repeatedly analysing unchanged content from the beginning; and
review selected existing pages or articles more closely when they become relevant.

Blue Kite SEO may record when an existing page or article was reviewed and information needed to determine when it may deserve another review.

A stored website record or previous AI recommendation does not necessarily mean that the content will be changed or republished.

Website evidence may be incomplete where content cannot be accessed, has changed, is blocked from retrieval or is otherwise unavailable.

8. WordPress

If you connect WordPress, Blue Kite SEO uses the information necessary to maintain that connection and carry out publishing actions you choose.

Connection credentials are protected and access is restricted.

Information sent to your WordPress website is then also handled by your website, hosting provider and any relevant plugins or services.

Deleting your Blue Kite SEO account does not automatically remove material already published to your external website.

9. Payments

Blue Kite SEO uses Stripe for payment processing and subscription management.

Stripe handles payment-card information under its own privacy and security practices.

We receive only the information reasonably needed to identify and administer your Blue Kite SEO payment and subscription.

10. Transactional email

Blue Kite SEO uses Postmark for transactional account and service emails, including authentication and account-related messages.

Blue Kite SEO does not currently use the application to send marketing newsletters or behavioural marketing email.

If we introduce marketing communications in the future, we will provide appropriate consent and unsubscribe options as required by law.

11. Cookies and similar technologies

Blue Kite SEO uses technologies needed for:

authentication;
sessions;
account confirmation;
account recovery; and
security.

On the public Production website, Blue Kite SEO also uses Google Tag Manager to manage Google Analytics.

Google Analytics helps us understand information such as which public pages are visited, how visitors reach the website, general device and browser information, and how visitors interact with public website content.

Google Analytics may use cookies or similar technologies and may process technical information such as an IP address in accordance with Google's own terms and privacy practices.

The Blue Kite SEO implementation does not load Google Tag Manager on Staging or preview deployments, authentication routes, customer dashboard pages, or admin pages.

We do not currently use:

advertising pixels;
behavioural advertising; or
session-replay tools.

Third-party services involved in payment, authentication or security may use their own necessary cookies or similar technologies.

If we introduce advertising or other tracking technologies, this policy will be updated and any legally required consent controls will be implemented.

12. Service providers and overseas processing

We use third-party providers to help operate Blue Kite SEO.

These may include providers for:

artificial intelligence;
payment processing;
cloud hosting and storage;
authentication;
transactional email;
security;
backups; and
website publishing.

Material customer-facing providers currently include OpenAI, Stripe, Postmark and Google.

Some information is processed in Australia, while some may be disclosed to or processed by providers or their subprocessors outside Australia.

The United States and Ireland are among the main overseas locations currently reasonably identifiable in connection with material service providers.

Some providers operate globally and may use affiliates or subprocessors in additional locations for activities such as infrastructure, routing, security or support.

We will update this policy where another overseas country becomes a reasonably likely material disclosure location that should be identified.

13. Security

We use reasonable technical and organisational safeguards designed to protect personal information from misuse, loss, unauthorised access, modification and disclosure.

These safeguards include measures such as:

encryption;
access controls;
authentication protections;
security and abuse controls;
monitoring; and
protected backups.

Only authorised personnel may access restricted account information where reasonably required for support, billing, security, troubleshooting, incident response, administration or legal compliance.

No online service can guarantee absolute security.

14. How long we keep information

We keep personal information only for as long as reasonably needed for the purposes for which it is held or as required by law.

Active accounts

Account, Business Profile, Strategy Intake, website-analysis, Strategy, Monthly Plan, review, generated-content and support-request information may be retained while your account remains active and while reasonably necessary to:

provide the Service;
maintain planning and website continuity;
avoid unnecessary repeated processing;
support your account; and
maintain appropriate security and business records.

Account deletion

When permanent account deletion is completed, your account and associated product information are removed from active Blue Kite SEO systems in accordance with our deletion process.

Protected backups

A temporary copy may remain in isolated protected backups for up to approximately 35 days before expiry.

Deleted account information is not available for normal use from those backups.

Recovery safeguards

A limited non-content deletion safeguard may be retained for up to 90 days to help ensure previously deleted account information does not return to active use if recovery systems are used.

It does not contain your Business Profile or generated content.

Billing, consent and deletion records

Limited billing, transaction, consent and deletion records may generally be retained for up to seven years, or longer where reasonably required for an unresolved dispute, refund, fraud investigation, legal hold or other legal obligation.

Introductory-offer protection

A non-readable email fingerprint used only to enforce paid-trial eligibility may be retained for up to 12 months from trial redemption.

It then expires automatically and does not contain your readable email, Business Profile or generated content.

15. Permanent account deletion

You can permanently delete your Blue Kite SEO account using the available account-deletion process.

Permanent deletion:

ends account access;
cancels an active recurring subscription;
removes the account from active Blue Kite SEO systems; and
removes active Business Profile, Strategy, Monthly Plan, generated work, uploaded Blue Kite SEO media and WordPress connection information in accordance with our deletion process.

Externally published WordPress material remains on the external website until removed separately.

More information is available in our Account Deletion and Data Retention Policy.

16. Accessing and correcting your information

You may update information available through your account.

You may also ask us to:

provide access to personal information we hold about you; or
correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before responding.

Where Australian privacy law permits or requires us to refuse a request, we will provide the explanation required by law.

17. Privacy complaints

If you believe Blue Kite SEO has mishandled your personal information, email support@bluekiteseo.com.au or use our Contact page and identify your enquiry as a privacy complaint.

We will:

acknowledge or record the complaint;
investigate the issue;
request further information where reasonably necessary; and
provide a response within a reasonable period.

Where the Privacy Act applies and you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.

18. Data breaches

We maintain processes for responding to suspected data breaches.

Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and relevant authorities as required.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our Service, information handling, providers or legal obligations change.

The current version and effective date will be published on the Blue Kite SEO website.

Where a change materially affects how we handle personal information, we will take reasonable steps to provide additional notice where appropriate.

20. Contact

Blue Kite SEO is a service operated by:

Mobiweb Pty Ltd
ABN 27 652 299 842

For privacy, account or support enquiries, email support@bluekiteseo.com.au or use the Contact page.