Privacy Policy
Last updated:
Who we are
searchengineoptimization.io (“we”, “us”) provides an SEO tool that tracks keyword rankings, audits websites, monitors backlinks and turns the results into a prioritised action plan. This policy covers the marketing site and the signed-in app.
What we collect
- Account details. Your email address, and a password if you set one. Authentication runs on Supabase, which we host on our own server rather than a managed provider.
- The sites you add. Domains you choose to track, your ownership-verification status, and everything the product records against them: action-plan progress, notes and evidence you log, crawl results, audit findings, tracked keywords and their ranking history.
- Google Search Console data, but only if you explicitly connect it. See the section below.
- Billing details. Handled entirely by Paddle, our payment provider. We receive a subscription status and plan; we never see or store your card number.
- Messages you send us through the contact form or by email — your name, address and whatever you write.
- Basic usage analytics on the marketing pages, to see which pages get visited. We do not build advertising profiles and we do not sell any of it.
Google Search Console data
Connecting Search Console is optional, and only ever happens when you click the button and approve it at Google. We request read-only access (webmasters.readonly) plus your account email address, which we use solely to record which Google account a site is linked to.
We use that access to read search performance for the sites you have added — page URLs, impressions, clicks and average position — and show it back to you inside your dashboard. We do not use it for advertising, we do not sell it, we do not transfer it to third parties except as needed to run the product, and we do not allow humans to read it except where you ask us to for support, or where security or the law requires it. This use complies with the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time from your Google Account permissions page, or by removing the site here — either revokes our access.
Why we process it
- To give you the service you signed up for — the whole product is your data, rendered back to you.
- To bill you, if you are on a paid plan.
- To send service email, such as sign-in links and the weekly summary.
- To answer you when you get in touch.
- To keep the service working and secure, including diagnosing errors.
Who else touches your data
We keep this list short deliberately. Each of these is a processor acting on our instructions, with its own privacy policy:
- Vercel — hosts the website and app, and provides page analytics.
- Supabase — the database and authentication software, running on our own server.
- Paddle — merchant of record; handles checkout, payment data, invoices and sales tax.
- Google — Search Console data, if you connect it.
- Resend — delivers our transactional email.
We do not sell personal data, and we do not share it for advertising.
How long we keep it
Account and site data stays until you delete it. Deleting a site from Settings removes it and everything recorded against it — plays, evidence, crawl history, audit findings, backlink data, tracked keywords and rank snapshots. That is immediate and cannot be undone. Ask us to close your account entirely and we will remove the rest. Backups roll off on a 14-day cycle, so deleted data can persist in a backup for up to two weeks.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a data protection authority. Write to us and we will action it — you do not need to invoke a statute to get a straight answer.
Security
Traffic is encrypted in transit. Access to production data is limited to the people who run the service. No system is perfectly secure, and we would rather say that plainly than imply otherwise.
Changes
If this policy changes materially we will update the date at the top and, for anything significant, tell account holders by email rather than relying on you to re-read it.
Contact
Questions, or a request about your data: get in touch or email hello@searchengineoptimization.io.
