Privacy Policy

Digital Priority OÜ ("we", "us", "Digital Priority", "102") is an Estonian private limited company, registry code 16644892, VAT number EE102571880, registered at Pärnu mnt 139e/2, 11317 Tallinn, Estonia.

We are the data controller for the personal data described in this policy. You can reach us at [email protected].

Account and site data — your email address, your login credential (hashed password or OAuth identifier), and the WordPress site domain(s) you connect to 102.

Google user data, only if you choose to connect your Google account, and only with read-only access:

• Google Search Console — Search Analytics data for the properties you authorize: queries, clicks, impressions, and average position, used to detect keyword cannibalization, content decay, and pruning candidates.
• Google Analytics 4 — your GA4 property list and report data (traffic, engagement, conversions) for the properties you select.
• Google Ads — campaign, keyword, and spend data for the accounts you connect.

We request only the minimum scopes each feature needs, and we never request write access to your Search Console, GA4, or Ads data — 102 only reads.

Content data — the drafts, keywords, prompts, and images you submit for AI generation, editing, or alt-text.

Billing data — your plan, credit balance, and transaction history. Card details are handled directly by Stripe; they never reach our servers.

Usage and technical data — log data, IP address, browser/device information, and cookies (see Section 8).

We use the data above to:

• Generate and edit content, run keyword and rank research, build Search Console and GA4 insights, and run AI-visibility (AEO) tracking — all scoped to the WordPress site and Google properties you connect.
• Meter your credit usage and bill your account.
• Operate, secure, and improve the service, including fraud and abuse prevention.

Google user data is used exclusively to power the insight features you request for your own site or Google properties. We never use it for advertising, never sell it, and never combine it into a profile unrelated to the service you asked for.

Third-party credentials — including Google refresh tokens — are stored server-side in our gateway's secret store only. They are never shipped to the WordPress plugin, never exposed to your site's visitors, and never accessible to any other 102 customer.

We process personal data under the following legal bases (GDPR Article 6):

• Contract (Art. 6(1)(b)) — to provide the service you sign up for.
• Legitimate interest (Art. 6(1)(f)) — fraud prevention, service security, and product analytics, balanced against your rights and carried out with safeguards.
• Consent (Art. 6(1)(a)) — optional analytics and marketing cookies, and connecting your Google account, which you grant on Google's own consent screen and can revoke at any time.

You can withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal (see Sections 7 and 8).

We share data with the following subprocessors, each bound by a data processing agreement:

• Anthropic, PBC (Claude) — processes the content, prompts, and images you submit for AI generation and editing.
• DataForSEO — processes keyword and rank-tracking queries to return search volume, competition, and SERP data.
• Google LLC — provides the Search Console, GA4, and Ads APIs we read under your authorization, and processes the account data described in Section 2 as part of that.
• Stripe, Inc. — processes payment and billing data. We never store your card number.
• OpenAI, L.L.C., Google LLC (again — this time via its Gemini model), and Perplexity AI, Inc. — power AI-visibility (AEO) tracking. When you use this feature, we send the query prompts you configure to these providers' AI answer engines and read back their responses, to record whether your brand gets cited. This sends only the prompt text you set up for tracking — never your connected Search Console, GA4, or Ads data.

Google API Services User Data Policy. 102's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

International transfers. Anthropic, Stripe, OpenAI, and Perplexity are US-based; where a subprocessor is located outside the EU/EEA, the transfer relies on the EU-US Data Privacy Framework or Standard Contractual Clauses as the transfer mechanism.

• Google user data is retained only as long as needed to provide the feature you requested, and no longer than your integration stays connected. If you disconnect a Google account or delete your 102 account, we delete the associated cached Google data within 30 days, except where it has already been aggregated or anonymized for product analytics.
• Account and billing data is retained while your account is active, plus the period required by Estonian accounting law after closure.
• Content you generate is retained until you delete it or close your account.

You have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate data;
• request erasure ("right to be forgotten");
• request restriction of processing;
• receive your data in a portable format;
• object to processing based on legitimate interest;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email [email protected]. We respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority in your own EU member state.

Strictly necessary cookies (security, your language choice, and your cookie preference) are always on and cannot be switched off.

Analytics and marketing cookies run only with your consent, set through the cookie banner. You can change your choice at any time via "Cookie settings" in the footer. We use Google Consent Mode v2, so no Google measurement cookie fires until you consent.

Digital Priority OÜ, Pärnu mnt 139e/2, 11317 Tallinn, Estonia. Email: [email protected].

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the data protection authority in your own EU member state.