Privacy Policy

1. Information We Collect

We collect information you provide directly (name, email, password), information from OAuth providers (Google, GitHub) when you sign in, and technical data about your usage of the Service (audit results, keywords, blog content).

2. How We Use Your Information

• To provide and improve the Service
• To send transactional emails (audit reports, blog drafts, billing)
• To analyze aggregate usage patterns for product improvements
• To process payments via Stripe (we do not store card details)

3. Google Search Console Data

If you connect Google Search Console, we access your keyword and traffic data in read-only mode. This data is stored securely and used only to provide keyword ranking features within your account. We never share or sell your GSC data.

4. GitHub Integration

If you connect a GitHub repository, we use your OAuth token to create Pull Requests with SEO fix code. We request only the minimum necessary permissions. Your token is stored encrypted and never shared.

5. Data Sharing

We do not sell your personal data. We share data only with trusted third-party service providers (Stripe for billing, Resend for email, Google APIs) as necessary to operate the Service, and only under appropriate data processing agreements.

6. Data Security

We use industry-standard security measures including encryption at rest and in transit (TLS/HTTPS), secure token storage, and bcrypt password hashing. We conduct regular security reviews and respond to vulnerabilities promptly.

7. Data Retention & Deletion

We retain your data as long as your account is active. You may request account deletion at any time through account settings or by contacting support. Upon deletion, your personal data is removed within 30 days.

8. Cookies

We use session cookies for authentication and prefer-based cookies for UI preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser, but some features may not work correctly.

9. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data, object to processing, or request data portability. Contact us to exercise these rights.

10. Contact

For privacy-related requests or questions, contact us through the platform or via our official support channels. We respond to all requests within 30 days.