Privacy Policy

1. Who we are

SEO Toolz operates https://seotoolz.app (“the Service”). We provide competitor keyword research and SEO analytics tools for digital agencies and freelancers. If you have questions about this policy, contact us at hello@seotoolz.app.

2. What data we collect

We collect the following categories of personal data:

• Account data: Your email address, name (if provided), and password (stored hashed via Supabase Auth).
• Billing data: Payment is handled by Stripe. We store your Stripe customer ID and subscription status. We never see or store card numbers.
• Project data: Websites, keywords, and competitor data you add to your projects.
• Google Search Console data: If you connect your GSC account, we store search analytics data (queries, clicks, impressions, positions) pulled from your verified properties. We access this data using the read-only webmasters.readonly scope.
• Usage data: Standard server logs including IP address, browser type, and pages visited. We do not use third-party analytics trackers.

3. How we use your data

• To provide and maintain the Service.
• To process your subscription and send transactional emails (receipts, password resets).
• To display your GSC search analytics within the Service dashboard.
• To send product update emails (you can unsubscribe at any time).
• To investigate abuse and ensure platform security.

We do not sell your personal data. We do not use your data to train AI models. We do not share your data with third parties except as described in section 4.

4. Third-party services

5. Google user data

SEO Toolz’s use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request the webmasters.readonly scope only, which grants read-only access to your Search Console properties.
• We use GSC data solely to display search analytics within your SEO Toolz dashboard. We do not transfer, share, or use this data for any other purpose.
• You can revoke our access at any time via your Google account permissions page or by disconnecting in your SEO Toolz settings.
• We do not use Google data to serve advertising or for AI/ML training.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, your data is deleted within 30 days. GSC metrics are retained for up to 90 days of history. Crawl data and keywords are retained until you delete them or close your account.

7. Your rights (GDPR)

If you are located in the UK or European Economic Area, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Request deletion of your account and associated data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email hello@seotoolz.app. We will respond within 30 days.

8. Cookies

We use only essential session cookies required for authentication (managed by Supabase). We do not use advertising cookies or third-party tracking cookies.

9. Security

We use industry-standard security measures including TLS encryption in transit, hashed passwords, and row-level security on our database. Access to production data is restricted to authorised personnel only.

10. Changes to this policy

We may update this policy from time to time. We will notify active users by email of any material changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email hello@seotoolz.app.