Willdou

Privacy Policy

Last updated: October 2, 2026

Willdou (“Willdou,” “we,” “us”) provides an SEO automation, social content, and AI assistant platform (the “Service”). This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

Account information. Name, email address, company name, and a securely hashed password when you register.

Connected website credentials. If you connect a WordPress, Shopify, SFTP or FTP site, or a Google account (Search Console, Analytics, Ads), the access tokens or login details you provide are encrypted (AES-256-GCM) before being stored and are never displayed back to you or anyone else after you enter them.

Content and usage data. Websites you add, audits run, keywords researched, chat messages, generated content, and the settings you choose (for example, whether automatic publishing is enabled).

Technical data. IP address and basic request metadata, used for rate-limiting and abuse prevention, not for tracking or advertising.

2. How we use information

  • To operate the Service: run the audits, keyword research, content generation and automations you request.
  • To authenticate you and keep your account secure.
  • To communicate with you about your account or the Service.
  • To prevent abuse (for example, rate limits on expensive or sensitive actions).

We do not sell your personal information, and we do not use your content to train any third-party AI model — the AI features in Willdou run on models we operate ourselves, not a third-party AI provider's shared service.

3. Third-party services

Where you explicitly connect them, Willdou communicates with Google APIs (Search Console, Analytics, Ads/Keyword Planner), and with WordPress, Shopify, or your SFTP/FTP server, strictly to perform the actions you request. Each of those providers has its own privacy policy governing the data it holds.

4. Data security

Credentials and OAuth refresh tokens are encrypted at rest. Every host your site connections talk to is validated to prevent the Service from being used to reach internal/private network addresses. We apply security patches to dependencies on an ongoing basis and run the Service behind an automatically-renewed HTTPS certificate.

5. Data retention

We retain your account and content data for as long as your account is active. Deleting a website or connection removes its stored credentials immediately; a history of changes already made to your site is kept so you can review what happened, until you delete the underlying website.

6. Your rights

You can access, correct, export, or delete your data by using the Service's own settings, or by contacting us at support@willdou.com. Disconnecting a WordPress, Shopify, Google, SFTP or FTP connection immediately deletes its stored credentials.

7. Children's privacy

The Service is not directed at children under 16, and we do not knowingly collect personal information from them.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

9. Contact

Questions about this policy: support@willdou.com.