DEJAN SEO PTY LTD (ABN 77 151 340 420), 29/97 Creek Street, Brisbane City QLD 4000, Australia ("we", "us") runs DEJAN App at app.dejan.ai, formerly Auxy at app.auxy.com (the "Service"). We use your data only to run the Service for you. We never sell it, never use it for advertising, and never use it to train AI models.
This policy applies under the Australian Privacy Act 1988, the EU General Data Protection Regulation (GDPR) and the UK GDPR. We are the controller of your personal data.
| Data | Where it comes from |
|---|---|
| Your name, email address and profile picture | Your Google account, when you log in |
| Search Console data for the properties you connect | Google, with your permission (read-only access) |
| Websites, pages, content and settings you add to the Service | You |
| Output the Service generates for you | The Service |
| Records of the actions you run and the credits they use | The Service |
| Messages you send to Auxy, the in-app assistant | You |
| Purchase records | Stripe, when you buy credits. Stripe holds your card details. We do not see or store them. |
| IP address and browser details | Your browser, in server logs and error reports |
| Use | Legal basis under GDPR |
|---|---|
| Run the Service, including sending data to the providers in section 3 | Performance of our contract with you |
| Bill you and keep billing records | Legal obligation |
| Keep the Service secure, prevent abuse and fix errors | Our legitimate interest in a secure, working Service |
We share data only with the providers that run parts of the Service. Each one receives only the data it needs for the action you run.
| Provider | What it does |
|---|---|
| Hosting (Google Cloud), login, Search Console data and Gemini AI models | |
| OpenAI | AI models |
| Anthropic | AI models |
| Stripe | Payments |
| Postmark | Account and billing emails |
| DataForSEO | Search results data |
| Firecrawl | Fetching web pages |
| Browserbase | Fetching web pages in a browser |
We may also disclose data where the law requires it.
Our servers are in Google Cloud's US region (Iowa, USA). Some providers in section 3 also process data in the USA. For transfers of EU and UK personal data out of Europe, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.
| Data | Period |
|---|---|
| Account data, connected data, content and output | Until you ask us to delete it. We delete it within 30 days of your request. |
| Billing records | 5 years, as Australian tax law requires |
| Server logs | 14 days |
| Error reports | 90 days |
We use one cookie, a session cookie that keeps you logged in. The Service cannot work without it, so it does not need your consent. We do not use analytics, advertising or tracking cookies.
You can ask us to:
Email legal@dejan.ai. We reply within one month.
You can also complain to a data protection authority. In Australia this is the Office of the Australian Information Commissioner (oaic.gov.au). In the UK it is the Information Commissioner's Office (ico.org.uk). In the EU it is the authority in your country.
Data travels between your browser and the Service over HTTPS. Access to our servers and database is limited to staff who need it. If a data breach is likely to cause you serious harm, we will tell you and the relevant authority as the law requires.
EU representative under Article 27 GDPR: Aleksandar Petrovic, Croatia, eu@dejan.ai
UK representative under Article 27 UK GDPR: uk@dejan.ai
When we make a material change, we will show you the new version in the Service before it applies.
Privacy questions and requests: legal@dejan.ai