Privacy Policy
Effective date: September 1, 2026
This Privacy Policy explains how Sales Monsters ("Sales Monsters," "we," "us," or "our") collects, uses, shares, and protects information when you use SEOMonster, the content production platform available at salesmonsters.net and its subdomains (the "Service"). Sales Monsters is a marketing agency based in Los Angeles, California.
The Service is a private, invitation-only workspace for Sales Monsters clients, staff, and contractors. It is not a consumer product and is not open for public registration. Our agency website at salesmonsters.com has its own privacy policy; this policy covers the Service only.
1. Information we collect
Account information
When an account is created for you, we store your name, email address, a hashed password, your role in the Service (for example client, editor, or administrator), and the client company or companies you are associated with. Passwords are stored as one-way hashes and are never stored in plain text.
Content you create or upload
The Service stores the content that you and your team produce or upload while using it. This includes article drafts, outlines, keyword lists, content plans, brand and voice profiles, case studies, uploaded documents and PDFs, comments, checklists, and the settings you configure for a client company.
Information from Google, if you connect a Google account
Some features let a Sales Monsters administrator connect a Google account so the Service can read search and analytics data and create documents on your behalf. When a Google account is connected, the Service requests only the scopes it needs, which may include:
- Search Console (read-only): query, page, click, impression, and ranking data for the websites you have verified in Google Search Console.
- Google Analytics (read-only): traffic and engagement data for the properties you choose to connect.
- Google Drive, Docs, and Sheets: to create, read, and update the Google Docs and Sheets that hold article drafts and reports, and to file them in the Drive folders set up for your company.
- Basic profile: the email address and name of the connected Google account, so we can show which account is connected.
We store the OAuth tokens needed to keep this connection working. Tokens are encrypted at rest. You can revoke the Service's access at any time from your Google Account permissions page, and we will stop accessing the data as soon as access is revoked.
SEOMonster's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except with your permission, for security purposes, to comply with law, or for internal operations where the data has been aggregated or anonymized.
Information collected automatically
Like most web applications, the Service records standard server logs when you use it: IP address, browser type, pages requested, timestamps, and error details. Our hosting provider retains these logs for a limited period for security and troubleshooting. We use a session cookie to keep you signed in and a small number of functional cookies or browser storage entries to remember interface preferences such as board layout or filters. We do not use advertising cookies or third-party tracking pixels on the Service.
2. How we use information
We use the information described above to:
- Provide, operate, and secure the Service and your account.
- Produce the deliverables Sales Monsters has been engaged to create for your company, including SEO research, outlines, articles, reports, and content plans.
- Generate and improve drafts using artificial intelligence models, as described in section 3.
- Send transactional email, such as password resets and review notifications.
- Sync content and tasks to the collaboration tools your engagement uses.
- Diagnose problems, monitor performance, and prevent abuse.
- Comply with legal obligations and enforce our agreements.
We do not sell personal information, and we do not use the content or data in the Service to serve advertising.
3. Artificial intelligence
The Service uses third-party large language models to help research topics, draft and edit content, and score quality. To do this, it sends relevant material to those providers, which may include your company's brand profile, knowledge base excerpts, keyword data, and draft text. We use these providers under commercial API terms that prohibit them from training their models on the data we send. Personal information about individual people is not intentionally included in these requests.
4. How we share information
We share information only with the service providers that help us run the Service, with the tools your engagement has chosen to connect, and when the law requires it. Our current categories of providers are:
- Hosting and infrastructure: Vercel (application hosting) and Supabase (database, authentication, and file storage).
- AI providers: Anthropic, OpenAI, and Perplexity, for content generation, editing, and research.
- Google: Search Console, Analytics, Drive, Docs, and Sheets, when a Google account is connected.
- Research and crawling: Firecrawl and DataForSEO, which fetch public web pages and keyword data. Only publicly available website content and search terms are sent to these services.
- Collaboration tools connected to your engagement: for example Trello, HubSpot, Airtable, Slack, or Beehiiv, when Sales Monsters has been asked to publish drafts or sync tasks to those systems. Data is only sent to a tool that has been connected for your company.
- Email delivery: Resend, for transactional email.
Each provider is permitted to use the data only to provide its service to us. We may also disclose information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Sales Monsters, our clients, or others. If Sales Monsters is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
5. Data isolation between clients
The Service is multi-tenant. Every record is tagged with the client company it belongs to, and access is enforced by role and company membership so that one client cannot see another client's data. Sales Monsters staff and contractors can access client workspaces only as needed to deliver the engagement.
6. Data retention
We keep account information and content for as long as your company has an active engagement with Sales Monsters and for a reasonable period afterward so that work product can be handed over or restored. Google OAuth tokens are deleted when the connection is removed or revoked. Server logs are retained by our hosting provider for a limited period. You can ask us to delete your account or your company's data at any time using the contact information below, subject to any retention required by law or by our agreement with your company.
7. Security
We use industry-standard measures to protect information, including encryption in transit (TLS), encryption at rest for stored data and OAuth tokens, hashed passwords, role-based access controls, and row-level security in our database. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable steps to protect the information you entrust to us and will notify affected clients of a security incident as required by law.
8. Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, or to object to or restrict certain processing. You can exercise these rights by emailing us at the address below. We will respond within the time required by applicable law. California residents may also request details about the categories of personal information we have collected and disclosed. We do not sell or share personal information for cross-context behavioral advertising, and we do not discriminate against anyone for exercising their privacy rights.
You can revoke the Service's access to a connected Google account at any time from your Google Account permissions page.
9. International users
The Service is operated from the United States and information is stored on servers in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
10. Children
The Service is a business tool intended for adults. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date above and, for material changes, notify account holders by email or through a notice in the Service. Your continued use of the Service after a change means you accept the updated policy.
12. Contact us
If you have questions about this policy or want to exercise your privacy rights, please email aaron@salesmonsters.com. Please also see our Terms of Service.
