Data Controller:
UltraScout AI Ltd
Company number: 17145129
ICO registration reference: ZC135511
Registered in England and Wales
5 Brayford Square, London, E1 0SG, United Kingdom
Email: [email protected]
This Privacy Policy explains how UltraScout AI Ltd ("we", "us", "our") collects, uses, stores, and shares your personal data when you use our website or SaaS platform, in accordance with the UK GDPR and Data Protection Act 2018.
We do not sell your personal data. We collect only what we need to provide and improve our services.
If you use our free AI SEO Score tool without creating an account, we collect:
Our tool analyses only publicly accessible technical elements of the submitted website (meta tags, robots.txt, schema markup, page structure, HTTP headers, etc.). We do not scrape, store, or process personal data found on the analysed website.
UltraScout AI Ltd also offers career coaching services under the yuliya.pro brand. If you engage with those services, your data is processed separately and governed by the yuliya.pro Privacy Policy. Coaching data is not processed through this website or the UltraScout AI platform.
| Purpose | Legal Basis (UK GDPR Art. 6) |
|---|---|
| Account management and service delivery | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments | Performance of a contract (Art. 6(1)(b)) |
| Transactional emails (confirmations, notifications, password resets) | Performance of a contract (Art. 6(1)(b)) |
| Customer support and enquiries | Legitimate interests (Art. 6(1)(f)) |
| Marketing communications (opted-in only) | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Platform improvement and usage analysis | Legitimate interests (Art. 6(1)(f)) |
| Fraud detection and security | Legitimate interests (Art. 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
| Delivering free AI Search Readiness Report by email | Performance of a contract (Art. 6(1)(b)) — you request the report and we deliver it |
| Follow-up marketing emails to free tool users | Consent (Art. 6(1)(a)) — provided at point of email submission; withdrawable at any time |
| Processing payment for AI Search Readiness Audit (£29) | Performance of a contract (Art. 6(1)(b)) |
| Follow-up marketing emails to paying report customers | Legitimate interests / PECR soft opt-in (Art. 6(1)(f)) — you have purchased a similar service from us |
We request your consent before loading analytics cookies. Strictly necessary cookies (session, security) are always active. See our Cookie Policy for full details and how to manage preferences.
We do not sell your data. We share it only with trusted processors where necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Cloud infrastructure (AWS, Google Cloud) | Platform hosting and data storage | EEA/UK/USA (IDTA/SCCs) |
| Payment processor (Stripe) | Subscription and report payment processing | USA — EU SCCs, UK IDTA, EU-U.S. Data Privacy Framework & UK Extension, CBPR certified |
| AWS SES (Amazon Web Services) | Transactional and marketing emails for platform account holders | USA (IDTA/SCCs) |
| Brevo (Sendinblue) | AI Search Readiness Report delivery and follow-up emails for AI SEO Score tool users | EEA (France) |
| Google Analytics (consent only) | Website usage analytics, IP anonymised | USA (IDTA/SCCs) |
| AI platforms (OpenAI, Google, Anthropic, Microsoft, Perplexity) | Running AI visibility queries (brand/company names only, not personal data) | USA (IDTA/SCCs) |
| Legal and regulatory authorities | Where required by law or court order | UK/as required |
All processors are bound by data processing agreements and may only act on our instructions. For Stripe specifically, you can find more details in Stripe's Privacy Centre and Privacy Policy.
Where we transfer data outside the UK, we use UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs). Contact us for details of specific safeguards.
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account, plus 2 years after closure |
| Analysis reports and results | Duration of account; deleted within 90 days of closure |
| Payment and billing records | 7 years (HMRC requirement) |
| Email and support communications | 2 years from last contact |
| Marketing consent records | Until withdrawn, plus 2 years |
| Website analytics (anonymised) | 26 months |
| Security and access logs | 90 days |
| Free tool email addresses (no purchase) | 12 months from submission, or until consent withdrawn |
| Free tool score results and URLs | 12 months from submission, or until consent withdrawn |
| AI Search Readiness Audit data (email, URL, report) | 2 years from purchase, or until erasure requested |
Email [email protected] to exercise any of these rights. We will respond within one calendar month.
If you are not satisfied, you may complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Website: ico.org.uk | Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Please contact us first — we would like the opportunity to resolve your concern.
We implement encryption in transit (TLS) and at rest, access controls, security monitoring, and contractual security requirements for all processors. In the event of a personal data breach likely to risk your rights, we will notify the ICO within 72 hours and affected individuals without undue delay.
Our services are for business users aged 18 and over. We do not knowingly collect data from anyone under 18. Contact us immediately if you believe we hold a child's data.
We will notify registered users by email of material changes at least 14 days before they take effect, and update the date at the top of this page.
UltraScout AI Ltd
Company number: 17145129
5 Brayford Square, London, E1 0SG, United Kingdom
Email: [email protected]