Privacy Policy
Last updated: 10 August 2026
1.Who we are
Fasta Blogging is a done-for-you SEO blogging service operated by Creative SEO Coach (“we”, “us”), based in Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can contact us about anything in this policy at hello@creativeseocoach.com.
2.What we collect
- Application form: your name, email address and website URL when you apply for a spot on our homepage.
- Site analytics: we use Google Analytics on our public website (not the client dashboard or portal) to understand traffic, using cookies to distinguish visitors.
- Advertising and remarketing: we use the Meta Pixel on our public website (not the client dashboard or portal) to measure how our Facebook and Instagram ads perform and to show ads to people who have visited the site. It uses cookies and similar technologies, and it tells Meta which of our pages you viewed and whether you submitted our contact form or requested a Blog Score report.
- Client accounts: if you become a client, your login email and the essential authentication cookies needed to keep you signed in. Your client dashboard and portal activity is not tracked by analytics.
- Business and content material: information clients share with us to deliver the service — for example brand details, website access, content preferences and uploaded images.
- Voice input: some pages let you dictate instead of typing. This is optional and typing always works. Your browser does the speech recognition, not us — Chrome sends the audio to Google and Safari sends it to Apple to turn it into text. We receive only the resulting text; we never receive, record or store the audio itself.
- Payments: processed by Stripe. We never see or store your card number; we keep only a record that a payment occurred.
3.How we use it
We use your information to assess applications, deliver the service, communicate with you about your engagement, and keep required business records. We do not sell personal information and we do not add you to marketing lists without your consent.
Advertising audiences are separate from our email lists. Visiting our public website may place you in an ad audience through the Meta Pixel described in section 2, which means you may be shown our ads on Facebook or Instagram. It does not add you to any mailing list, and we do not upload email addresses to Meta.
4.Who we share it with
We use a small set of service providers to run Fasta Blogging. These providers store data on our behalf, primarily in the United States, which is a cross-border disclosure under Australian Privacy Principle 8:
- Supabase — database, authentication and file storage.
- Vercel — application hosting.
- Resend — transactional email delivery (for example, the notification when you submit an application).
- Stripe — payment processing for clients.
- OpenAI — AI-assisted content generation for the service; client business material may be included in generation requests. If you dictate a note and then use the tidy-up action, that text is included too — the audio never is.
- Google and Apple — speech recognition, only if you choose to dictate. Your browser sends the audio directly to Google (in Chrome) or Apple (in Safari) and returns text to us. This happens in your browser rather than on our servers, so the audio never passes through Fasta Blogging, and their handling of it is governed by their own privacy terms.
- Meta Platforms — advertising measurement and remarketing for our public website, through the Meta Pixel. Meta receives the pages you viewed on our public site and whether you submitted our contact form or requested a Blog Score report, along with the technical information your browser sends. Meta acts as its own controller of that information under its own privacy terms, and you can review or change what it does with it in your Facebook or Instagram ad preferences.
Beyond these providers, we disclose personal information only where the law requires it.
5.Retention
We keep application details while your application is open and for a reasonable period afterwards, and client information for the length of the engagement plus any period required for legal and tax record-keeping. Access to personal information is limited to the operator, and our providers protect data with encryption in transit and at rest.
6.Information security and data breaches
We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.
Depending on the information and systems involved, these measures may include:
- Encryption in transit and encryption at rest where supported by our service providers.
- Authentication and access controls.
- Restrictions on staff and contractor access.
- Secure hosting and database providers.
- Logging, monitoring and security reviews.
- Software updates and vulnerability management.
- Procedures for responding to suspected data breaches.
- Deleting or de-identifying personal information when it is no longer reasonably required, subject to legal and business record-keeping obligations.
No online service, storage system or transmission method is completely secure. We cannot guarantee that unauthorised access, cyberattacks, data loss or other security incidents will never occur.
If we become aware of a suspected data breach, we will take reasonable steps to contain and assess the incident, reduce possible harm and review the circumstances.
Where required by applicable law, we will notify affected individuals and the relevant regulator. The timing and content of any notification will depend on the nature of the incident, the information involved and the risk of harm.
You should protect your account credentials, use secure passwords and notify us promptly if you believe your Fasta Blogging account or connected services have been accessed without authorisation.
7.Referral program and referral tracking
Fasta Blogging operates a referral program that allows customers and other registered participants to recommend Fasta Blogging using a unique referral link or referral code.
When a referral link is used, we collect and process information needed to attribute and administer the referral. This may include:
- The referral code and the account associated with that code.
- The date and time the referral link was clicked.
- Cookie, browser, device and technical information used for attribution and fraud prevention.
- The referred person’s account creation date.
- Whether the referred person starts an eligible subscription.
- Subscription status, successful payment status, refunds, disputes, cancellations and chargebacks that affect reward eligibility.
- Referral rewards that have been earned, redeemed, cancelled or expired.
We use this information to operate the referral program, attribute eligible referrals, issue subscription credits, investigate disputes and maintain financial and security records.
Our referral attribution cookie lasts for 30 days unless it is deleted earlier through the user’s browser or cookie settings. It is set when someone follows a referral link, and it is what makes a referral attributable.
Visitors who block or clear that cookie may be able to enter a referral code manually during signup instead.
We do not give referrers access to the referred person’s email address, payment information or private account information. Referral dashboards may show limited information such as the referral date and whether a referral is pending, qualified, cancelled or expired.
We may share referral information with service providers that help us operate our website, subscription billing, analytics, fraud prevention, email systems and referral program. These providers may only process the information for the services they provide to us.
Referral and reward records are retained for as long as reasonably necessary to administer the program, resolve disputes, prevent fraud and meet accounting, tax and legal obligations.
We show a notice about cookies on our public website, but it is an informational notice rather than a consent control: analytics, advertising and referral cookies are set when you visit, whether or not you dismiss it. You can block or delete them in your browser or device settings, and you can limit ad personalisation in your Facebook or Instagram ad preferences and through Google’s ads settings. Section 9 lists every cookie we set. You may also contact us at hello@creativeseocoach.com to ask about your personal information or your referral account.
8.Google Analytics and Google Search Console connections
Clients may choose to connect their Google Analytics and Google Search Console accounts to Fasta Blogging. These connections use Google OAuth and provide Fasta Blogging with read-only access to the Google accounts, websites and properties selected by the client.
Google data we access
Depending on the services connected and the permissions granted, we may access:
- Basic Google account information, such as your email address and account identifier.
- Google Analytics account and property names, identifiers and website information.
- Google Analytics reporting data, including traffic, acquisition, engagement, page performance, events, conversions, countries, devices and date-based reporting information.
- Google Search Console property names, identifiers and verification status.
- Google Search Console performance data, including search queries, pages, clicks, impressions, click-through rates, average positions, countries, devices and dates.
- OAuth access tokens and refresh tokens needed to maintain the connection.
Fasta Blogging does not request permission to modify your Google Analytics or Google Search Console accounts.
How we use Google data
We use connected Google data to provide and improve client-facing Fasta Blogging features, including:
- Connecting the correct website and reporting properties to your Fasta Blogging account.
- Reviewing website, search and content performance.
- Identifying keywords, content gaps and blogging opportunities.
- Prioritising and recommending blog topics.
- Preparing content audits, strategies, outlines and reports.
- Creating and improving content for the connected client’s business.
- Monitoring the performance of content created through Fasta Blogging.
We do not use Google user data for advertising, retargeting, credit decisions, lending, data brokerage or the creation of unrelated databases.
Google user data obtained through Google APIs is not used to train general-purpose or non-personalised artificial intelligence or machine-learning models.
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Human and AI-assisted processing
Fasta Blogging is a managed, AI-assisted blogging service. Authorised Fasta Blogging personnel, including SEO specialists providing the service, may review connected Google data when reasonably necessary to deliver the client’s requested strategy, analysis and content services.
Selected Google data or information derived from it may be processed by service providers, including OpenAI, where this is necessary to create client-specific analysis, recommendations, briefs or content. These providers act on our behalf and may only process the information for the service being provided.
We obtain the client’s affirmative consent before connected Google data is made available for human review or AI-assisted processing.
Storage and security
OAuth credentials and imported Google data are stored using service providers identified in this Privacy Policy. Access tokens and refresh tokens are restricted to systems and personnel that need them to operate the connection.
We use reasonable technical and organisational measures to protect connected Google data, including encryption in transit, access controls and encrypted storage where supported by our infrastructure providers.
We do not ask clients to give us their Google password.
Retention, disconnection and deletion
We retain OAuth credentials for as long as the Google connection remains active.
Imported Google data, derived reports and records used to provide the service may be retained while the client’s account or engagement remains active and for a reasonable period afterwards where needed to complete the service, maintain business records, resolve disputes, prevent fraud or comply with legal obligations.
Clients can disconnect their Google account through the Fasta Blogging account settings. Disconnecting stops future API access and we will revoke or delete the stored OAuth credentials associated with that connection.
Disconnecting does not necessarily delete previously imported reports, analysis or derived content. Clients may request deletion of their imported Google data by contacting hello@creativeseocoach.com. We will delete or de-identify eligible data within a reasonable period, except where retention is required by law or is necessary for legitimate security, dispute or record-keeping purposes.
Clients can also manage or revoke third-party access through their Google Account security settings.
Sharing Google data
We do not sell Google user data.
We only disclose or transfer Google user data:
- To service providers that process it on our behalf to provide the visible Fasta Blogging features requested by the client.
- Where reasonably necessary to protect the security and integrity of the service.
- Where required by law.
- As part of a business sale or restructuring where appropriate notice and consent are provided as required.
Our service providers must handle Google user data consistently with this Privacy Policy and the Google API Services User Data Policy.
10.Your rights
You can ask us at any time to access or correct the personal information we hold about you, or to delete your application. If you have a privacy concern, contact us first at hello@creativeseocoach.com and we will respond promptly. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
11.Contact
Creative SEO Coach — hello@creativeseocoach.com. We may update this policy from time to time; the current version is always published on this page.