Privacy Policy

We collect the following categories of information:

• Account information. Your email address and a hashed password. If you sign up via Google OAuth, we receive your email and name from Google.
• Billing information. Handled by Stripe. We store your Stripe customer ID, subscription status, and the last four digits of your card for reference. We do not store full card details.
• Your SEO data. Data you connect from Google Search Console, Analytics, Ahrefs, Moz, SEMrush, Majestic, and other integrations. This data is stored in a SQLite database isolated to your account.
• Usage data. AI agent runs, token consumption, and API call counts, used for metering and enforcing tier limits.
• Operational logs. Basic request logs (IP address, user agent, timestamp) retained for up to 30 days for security and debugging.

• To provide and maintain the Service
• To process payments and manage your subscription
• To enforce tier limits and prevent abuse
• To send transactional emails (password resets, alerts, invoices)
• To respond to support requests
• To improve the Service based on aggregated, de-identified usage patterns

We do not train AI models on your data. We do not sell your data.

We use the following third-party services, each with their own privacy practices:

• Stripe: payment processing
• Google: OAuth authentication, Search Console, Analytics, PageSpeed
• OpenAI / Anthropic: managed AI agent (only the content you explicitly send to the agent is transmitted to these providers)
• AWS SES, Resend, Postmark, or SMTP: transactional email (the specific provider depends on your account's configured email integration)
• Vultr: hosting infrastructure

When you connect your own API keys for services like Ahrefs, Moz, or SEMrush, we call those services on your behalf using your credentials. We do not share your SEO data with third parties outside the integrations you explicitly connect.

Each paying account gets its own SQLite database file. Requests are scoped to your account's database by session and cannot access other tenants' data. We use HTTPS for all traffic and encrypt sensitive credentials at rest.

No system is perfectly secure. We will notify affected users without undue delay if we become aware of a breach affecting personal data.

• Active accounts: data retained while your subscription is active.
• Cancelled accounts: data retained for 30 days after cancellation, then permanently deleted.
• Operational logs: up to 30 days.
• Billing records: retained for 7 years for tax and compliance.

You can:

• Access all data associated with your account from the dashboard
• Export your data at any time
• Delete your account, which permanently removes your data after 30 days
• Request access, correction, or deletion of personal data by emailing privacy@seodash.app

Residents of the EU, UK, and California have additional rights under GDPR and CCPA. Contact us to exercise them.

We use essential cookies for authentication (session cookies) and user preferences (theme, sidebar state). We do not use advertising or tracking cookies. We do not embed third-party analytics scripts on the dashboard or marketing pages.

The Service is not intended for users under 16. We do not knowingly collect data from children.

We may update this policy. Material changes will be communicated via email and via this page. Continued use after changes constitutes acceptance.

Jon C. Phillips
330 Avro, Pointe-Claire, QC, H9R 5W9, Canada
privacy@seodash.app