Privacy Policy

1. Information We Collect

Account Information

When you create an account we collect your email address and authentication credentials. If you sign in via a third-party provider (e.g., Google, GitHub) we receive the profile information that provider shares.

Site & SEO Data

We store the website URLs you add, keyword data, audit results, content drafts, and any configuration you create within the platform (e.g., topic clusters, content calendars, redirect rules).

Usage & Device Data

We automatically collect IP address, browser type, operating system, referral URLs, pages visited, and feature-usage patterns to improve the Service.

2. Cookies & Tracking Technologies

SEO Booster uses the following types of cookies:

• Essential cookies — required for authentication and session management.
• Analytics cookies — help us understand how the Service is used (e.g., page views, feature adoption). We may use privacy-friendly analytics providers.
• Preference cookies — store your theme, locale, and dashboard settings.

You can disable non-essential cookies in your browser settings. Disabling essential cookies may prevent you from using the Service.

3. How We Use Your Information

• Provide, maintain, and improve the Service.
• Run SEO audits, keyword analysis, content generation, and ranking tracking on your behalf.
• Send transactional emails (e.g., account verification, usage alerts).
• Monitor for abuse, fraud, and security incidents.
• Generate aggregate, anonymised statistics for internal research.

We do not sell your personal data to third parties.

4. Third-Party Services

The Service relies on the following third-party providers, each with their own privacy policies:

• Supabase — database, authentication, and storage (hosted on AWS).
• Vercel — application hosting, serverless functions, and edge delivery.
• Google Search Console — if you connect your GSC account, we read search performance data (queries, impressions, clicks) via the Google API. We do not modify your GSC settings.
• AI Providers — content generation requests are sent to third-party AI APIs (e.g., Anthropic Claude). Prompts may include your site data; refer to the provider's data-use policy for details.
• Keyword & SERP Data — we may use DataForSEO, SerpAPI, or similar services to fetch keyword metrics and search-engine results.

5. Data Storage & Security

All data is encrypted in transit (TLS 1.2+) and at rest. Our database enforces row-level security (RLS) so that each user can only access their own data. We follow industry-standard practices for access control, secret management, and vulnerability monitoring.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data and project data is permanently removed within 30 days. Anonymised, aggregate analytics may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing activities.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at the address below or use the data-management options in your account settings.

8. Children's Privacy

SEO Booster is not intended for individuals under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at privacy@sgeo.it.com.