Privacy Policy

This Privacy Policy explains how Programmatic SEO B.V. (a private limited company, besloten vennootschap, incorporated in the Netherlands), referred to in this policy as Programmatic SEO B.V., we, us or our, processes personal data in connection with PSEO Builder, our self-serve software as a service (SaaS) platform. PSEO Builder enables users to import structured data and content and to generate web pages at scale from templates.

This policy applies to the PSEO Builder marketing pages at https://www.pseo.nl/builder and to the PSEO Builder application available at https://app.pseo.nl, together with all related features, accounts, support channels and communications that reference or link to this policy. It describes the personal data we collect, the purposes for which we use it, the lawful bases on which we rely, the parties with whom we share it, the safeguards we apply and the rights you have under applicable data protection law.

Programmatic SEO B.V. also operates a separate brand, PSEO Agency (programmatic SEO services), and maintains a general marketing site. Where you interact with those services or with our wider website outside the PSEO Builder application, a separate privacy notice may apply. This policy is specific to PSEO Builder. It does not cover the privacy practices of third-party websites, services or destinations that you may connect to, publish to or link from when using the platform, which are governed by their own privacy notices.

Throughout this policy we distinguish two distinct roles. For data relating to your account, your relationship with us and your use of the platform, Programmatic SEO B.V. acts as a data controller. For the data and content that you, as a customer, import or upload into PSEO Builder in order to generate pages, Programmatic SEO B.V. generally acts as a data processor acting on your instructions. Section 7 explains this distinction in more detail.

We collect personal data that you provide to us directly, data that is generated automatically when you use PSEO Builder, and, in limited circumstances, data we receive from third parties such as our payment processor. The categories of personal data we process are set out below.

Account registration data. When you create a PSEO Builder account we collect information needed to set up and secure that account, including:

• your name;
• your email address;
• your company or organisation name, where provided;
• your job role or function, where you choose to provide it;
• authentication credentials, including a password that we store only in a hashed (irreversible) form, and, where you enable it, settings related to two-factor or multi-factor authentication;
• account preferences and configuration settings, such as language, notification and workspace settings.

Billing and subscription data. If you purchase a paid subscription, we and our payment processor collect information necessary to process payments and administer your subscription, including your billing name, billing address, company VAT or tax identification number where applicable, the subscription plan and billing cycle you have selected, invoices and payment history, and the status of payments. Card numbers and other full payment instrument details are collected and processed directly by our payment processor in a secure environment. We do not store complete card numbers on our own systems; we typically retain only limited information such as the payment method type, the last digits of the card or a payment token, and the transaction outcome.

Customer content (data you import or upload). To generate pages, you import or upload data and content into PSEO Builder, which may include spreadsheets, datasets, structured records, templates, text, media, brand assets and other materials. This customer content may contain personal data if you choose to include it, for example names, contact details or other identifiers within your datasets. We process customer content on your behalf and in accordance with your instructions as described in Section 7. You are responsible for ensuring that you have a lawful basis to include any personal data in the content you import or upload.

Usage, log and device data. When you access and use the platform, we automatically collect technical and usage information, including:

• Internet Protocol (IP) address and approximate location derived from it;
• device and browser type, operating system, screen and language settings;
• log data such as access times, pages and features viewed, actions taken, requests made to the application, error reports and crash data;
• diagnostic and performance metrics relating to page generation jobs, imports, exports and other operations;
• session identifiers and similar technical identifiers used to keep you signed in and to operate the service.

Cookies and similar technologies. We use cookies and similar technologies in the PSEO Builder application and on the related marketing pages. These are described in Section 6.

Support and other communications. When you contact us for support, send us feedback, report a problem or otherwise communicate with us, we collect the content of those communications together with related metadata such as your contact details, the date and time of the communication and any attachments or screenshots you provide. We also keep records of service and administrative messages we send to you.

Under the EU General Data Protection Regulation (GDPR) and the Dutch implementing law (the Uitvoeringswet Algemene verordening gegevensbescherming, or UAVG), we must have a lawful basis for each processing activity. Depending on the activity, we rely on one or more of the following bases:

• Performance of a contract (Article 6(1)(b) GDPR): to create and administer your account, provide and operate PSEO Builder, authenticate you, process your subscription and payments, provide support and deliver the service you have requested.
• Legitimate interests (Article 6(1)(f) GDPR): to secure and improve the platform, prevent fraud and abuse, ensure the stability and reliability of the service, understand how the platform is used, send service-related communications and, where appropriate, communicate with business customers about relevant features and offerings. Where we rely on legitimate interests, we balance those interests against your rights and freedoms.
• Consent (Article 6(1)(a) GDPR): for certain cookies and similar technologies that are not strictly necessary, and for any optional marketing communications by electronic means where consent is required. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Compliance with a legal obligation (Article 6(1)(c) GDPR): to meet our legal and regulatory obligations, including tax, accounting and bookkeeping requirements, and to respond to lawful requests from competent authorities.
• Where we process customer content on your behalf as a processor, the lawful basis for that processing is determined by you as the controller of that content; you are responsible for ensuring an appropriate basis exists.

We use the personal data described above for the following purposes:

• Providing and operating the platform: to make PSEO Builder available, to run imports, template processing and page generation jobs, to store your projects and to deliver the features you use.
• Account management and authentication: to create, maintain and secure your account, to verify your identity when you sign in, and to manage access, roles and permissions within your workspace.
• Billing and subscription administration: to process payments through our payment processor, manage renewals, issue invoices, handle refunds and chargebacks and maintain financial records.
• Support: to respond to your enquiries, troubleshoot issues, provide technical assistance and manage support tickets.
• Product improvement and analytics: to understand how the platform is used, to diagnose and fix problems, to measure and improve performance, reliability and usability, and to develop new features.
• Security and abuse prevention: to protect the platform, our users and Programmatic SEO B.V. against fraud, unauthorised access, malicious activity, misuse of resources and other security threats, including monitoring, logging and rate limiting.
• Service communications: to send you administrative and transactional messages such as account notifications, security alerts, billing notices, changes to terms or policies, and information about scheduled maintenance or service incidents.
• Legal and compliance: to comply with applicable laws, enforce our terms, establish, exercise or defend legal claims and respond to lawful requests from authorities.

We do not sell personal data. Where we use analytics or measurement, we aim to rely on aggregated or pseudonymised information wherever this is sufficient for the purpose.

Because PSEO Builder allows you to import data and generate pages at scale, you are responsible for the content you submit and the pages you create. When using the platform you must not import, upload, process or publish content that:

• you do not have the legal right to use, including content that infringes the intellectual property, privacy or other rights of third parties;
• contains personal data for which you lack a valid lawful basis or the necessary permissions;
• is unlawful, deceptive, defamatory, or designed to mislead search engines or users in violation of applicable rules or third-party platform policies;
• contains malware, malicious code or material intended to compromise the security of any system;
• includes special categories of personal data (such as data revealing health, racial or ethnic origin, political opinions, religious beliefs, or data concerning a person's sex life or sexual orientation) unless you have ensured that all conditions required by law for processing such data are met.

We may suspend processing, restrict access or remove content where we reasonably believe it breaches these requirements, our terms or applicable law, or where necessary to protect the platform and its users.

We use cookies and similar technologies, such as local storage and similar identifiers, both on the PSEO Builder marketing pages and within the application. Cookies are small files placed on your device that allow us to recognise your browser or device and to store information about your session and preferences.

We use the following broad categories:

• Strictly necessary cookies and technologies: required to operate the platform, keep you signed in, maintain session security, balance load and remember essential settings. These cannot be switched off through our consent tools because the service cannot function without them.
• Functional cookies: used to remember your preferences and choices and to enhance functionality, such as language or interface settings.
• Analytics and performance cookies: used to understand how visitors and users interact with our marketing pages and the application so that we can measure and improve them.
• Where applicable, cookies set to support our communications and the measurement of campaigns.

Where required by law, we set non-essential cookies only after you have given consent, and we provide a mechanism to accept, refuse or manage your preferences. You can also control cookies through your browser settings, although disabling certain cookies may affect the functionality of PSEO Builder. Strictly necessary cookies are set on the basis of our legitimate interest in providing a secure and functional service.

Programmatic SEO B.V. acts as a data controller in respect of the personal data for which we determine the purposes and means of processing. This includes account registration data, billing and subscription data, usage, log and device data, cookie data, and support communications. For these categories we are responsible for the processing described in this policy.

In respect of the data and content that you import or upload into PSEO Builder in order to generate pages (customer content), Programmatic SEO B.V. generally acts as a data processor. This means that, to the extent such content contains personal data, you (or the organisation you represent) act as the controller and determine the purposes and means of processing, while we process that content on your behalf and in accordance with your documented instructions, including your use of the platform's features.

Where we act as your processor, we will process customer content only as needed to provide the platform and as instructed by you, we will apply appropriate technical and organisational security measures, we will engage sub-processors subject to appropriate obligations, we will assist you (taking into account the nature of the processing) in responding to data subject requests and in meeting your security, breach notification and impact assessment obligations, and we will delete or return customer content in accordance with this policy and your instructions on termination of the service.

These commitments are set out in more detail in our data processing terms. A data processing agreement (DPA) that incorporates the requirements of Article 28 GDPR is available to customers on request through the contact details in Section 17. Where you have entered into such terms with us, they govern our processing of customer content.

We share personal data only as necessary to operate PSEO Builder and to fulfil the purposes described in this policy. We use carefully selected third parties (sub-processors) that process personal data on our behalf under contracts that require them to protect the data and to process it only in accordance with our instructions. The categories of recipients are:

• Cloud hosting and infrastructure providers: to host the application and databases, store data, provide computing and storage capacity and deliver content.
• Payment processing providers: to process subscription payments, manage billing and handle related financial operations.
• Web analytics providers: to help us understand usage of our marketing pages and the application and to measure and improve performance.
• Email, communications and CRM tools: to send service and account messages, operate support channels and manage our communications with customers and prospects.

We may also disclose personal data to our professional advisers (such as accountants, auditors and lawyers) where necessary, to competent authorities, courts or regulators where required by law or to establish, exercise or defend legal claims, and to a successor entity or acquirer in connection with a merger, acquisition, reorganisation or sale of assets, subject to appropriate confidentiality and data protection commitments.

We maintain a current list of the sub-processors we engage for PSEO Builder. This list is available to customers on request through the contact details in Section 17. We will not share customer content with third parties except as necessary to provide the service, as instructed by you, or as required by law.

We aim to host and process personal data within the European Economic Area (EEA) wherever feasible. However, some of our sub-processors may process personal data, or operate support functions, in countries outside the EEA.

Where personal data is transferred outside the EEA, we ensure that an appropriate safeguard recognised under the GDPR is in place. This may include transfers to countries that the European Commission has determined provide an adequate level of protection (an adequacy decision), or, in the absence of such a decision, the use of the European Commission's Standard Contractual Clauses together with any supplementary technical and organisational measures that may be required following an assessment of the transfer.

You may request further information about the safeguards we apply to international transfers, and a copy of the relevant transfer mechanism (with confidential or commercially sensitive information redacted as appropriate), by contacting us using the details in Section 17.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide the platform, to comply with our legal, accounting and reporting obligations, to resolve disputes and to enforce our agreements. The applicable retention period depends on the type of data and the reason for processing.

• Account registration data is retained for the duration of your account and for a limited period thereafter to manage account closure, handle any follow-up requests and meet our legal obligations.
• Billing and subscription data, including invoices, is retained for the period required by applicable tax and accounting law in the Netherlands, which generally requires financial records to be kept for seven years.
• Customer content is retained for as long as it is stored in your account during your use of the service. On termination of your account, customer content is deleted or returned in accordance with this policy and our data processing terms, subject to a short retention window for routine backups.
• Usage, log and device data is retained for a limited period appropriate to security, troubleshooting and analytics purposes, after which it is deleted or aggregated.
• Support communications are retained for as long as needed to handle your request and for a reasonable period afterwards for quality, record-keeping and legal purposes.

After account closure, we will delete or anonymise personal data that we no longer have a lawful reason to keep. Data held in routine backups is overwritten in the ordinary course of our backup cycle. We may retain certain information for longer where required to comply with a legal obligation or to establish, exercise or defend legal claims.

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing. These measures include:

• encryption of data in transit using current transport layer security, and encryption of data at rest where appropriate;
• storage of account passwords using strong, salted one-way hashing, and support for two-factor or multi-factor authentication;
• access controls and the principle of least privilege, so that access to personal data is limited to authorised personnel who need it for their role;
• network protections, logging, monitoring and rate limiting to detect and mitigate threats;
• regular backups and tested procedures for restoration and business continuity;
• contractual confidentiality and security obligations on our personnel and sub-processors, and ongoing security reviews of the platform.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected individuals in accordance with the GDPR. Where we act as a processor, we will notify the relevant controller without undue delay after becoming aware of a personal data breach affecting their data.

Subject to the conditions and exceptions set out in the GDPR and the UAVG, you have the following rights in relation to your personal data:

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to rectification: to have inaccurate personal data corrected and incomplete data completed.
• Right to erasure: to request deletion of your personal data in certain circumstances (the right to be forgotten).
• Right to restriction of processing: to request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: to receive personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Right to object: to object to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes.
• Rights related to automated decision-making: not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details in Section 17. We will respond within the timeframes required by law, normally within one month, and we may need to verify your identity before acting on a request. Exercising these rights is free of charge in most cases, although we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

If your request concerns personal data contained within customer content for which we act as a processor, we will direct the request to the relevant customer (the controller) or assist that customer in responding, as appropriate.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can find its contact details at https://www.autoriteitpersoonsgegevens.nl. We would, however, appreciate the opportunity to address your concerns directly before you approach the authority.

PSEO Builder is a business tool intended for use by professionals and organisations. It is not directed at children, and we do not knowingly create accounts for, or knowingly collect personal data from, children. The platform is intended to be used only by individuals who are at least 16 years old, or older where required by applicable law for a person to provide valid consent.

If you believe that a child has provided us with personal data, or that personal data of a child has been included in customer content without an appropriate basis, please contact us using the details in Section 17 so that we can take appropriate action.

PSEO Builder is provided on a reasonable-efforts basis. We work to keep the platform available, reliable and secure, but we do not warrant that the service will be uninterrupted, error-free, or available at any particular level of uptime unless a specific service level commitment has been agreed with you separately in writing. Access may be affected by scheduled maintenance, emergency maintenance, updates, factors outside our reasonable control, or the performance of third-party hosting, infrastructure and connectivity providers.

PSEO Builder is a tool that helps you generate and publish web pages at scale. It is not a guarantee of any particular search engine ranking, indexation, traffic, conversion, revenue or other commercial result. Search engine behaviour, ranking algorithms, indexing decisions and third-party platform policies are determined by those third parties and are outside our control and may change at any time. Any examples, benchmarks, estimates or projections we provide are illustrative only and do not constitute a promise of comparable outcomes. You are responsible for the configuration of your templates, the quality and lawfulness of the data and content you import, and the pages you choose to generate and publish.

Nothing in this policy excludes or limits any liability that cannot be excluded or limited under applicable Dutch or EU law, including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or under your mandatory rights as a data subject under the GDPR and the UAVG.

Subject to the paragraph above, and to the fullest extent permitted by applicable law: Programmatic SEO B.V. is not liable for any indirect, incidental, special or consequential loss, or for any loss of profits, revenue, goodwill, anticipated savings, business opportunity, search engine rankings, traffic, or loss or corruption of data, arising out of or in connection with your use of, or inability to use, PSEO Builder; and our total aggregate liability arising out of or in connection with the platform, whether in contract, tort (including negligence) or otherwise, is limited to the amount you paid to us for the platform in the twelve months immediately preceding the event giving rise to the liability.

This section governs liability in connection with this policy and your use of the platform. Where you have entered into a separate written agreement with us, such as our subscription terms or a data processing agreement, any specific liability provisions in that agreement apply to the matters they cover. Your statutory rights under applicable data protection and consumer law are not affected.

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or legal and regulatory requirements. When we make changes, we will revise the date shown below and, where appropriate, publish the updated policy on our website.

If the changes are material, we will provide more prominent notice, for example by email to the address associated with your account or through a notice within the application, before the changes take effect. We encourage you to review this policy periodically. Your continued use of PSEO Builder after an updated policy takes effect indicates that you are aware of the current version.

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to request our data processing agreement or current sub-processor list, you can contact us using the details below:

• Data controller: Programmatic SEO B.V.
• Registered office: Brouwerijstraat 1, 7523 XC Enschede, The Netherlands
• Email: info@programmaticseo.agency
• Phone: +31 (0) 85 060 1065
• VAT number: NL866274558B01
• KvK number: 93094299

This Privacy Policy is governed by the laws of the Netherlands. The competent Dutch courts have exclusive jurisdiction over any dispute arising out of or in connection with this policy, without prejudice to any mandatory rights you may have under applicable consumer or data protection law, including the right to lodge a complaint with the Autoriteit Persoonsgegevens.

Effective date and last updated: 29 June 2026.