Privacy Policy

Account information. When you sign up, we collect your email address so we can send you a secure magic sign-in link. SEO OS does not use passwords.

Projects and website data. When you add a project, we store the website domain you provide and the data SEO OS gathers about that site: pages crawled during audits, issues found, checks passed, monitoring results (uptime, response times, page speed scores, SSL certificate status, security headers, and accessibility scores), tasks, notes, and reports you generate.

Client requests. If you share a project's request link, the people who use it send us their name, contact details, and request message so the request can appear in your inbox. That information belongs to your project and is visible to your workspace.

Google user data. Covered in its own section below.

Technical information. Our hosting and database providers automatically record basic technical logs (such as IP address, browser type, and timestamps) to run and secure the service.

SEO OS offers an optional feature that connects a project to Google Analytics and Google Search Console. This connection is read-only, and it only happens if you choose to connect a Google account and then select a specific Analytics property and Search Console site.

What we access. Aggregate performance data for the property and site you selected: from Google Analytics, metrics such as sessions, users, conversions, engaged sessions, average session duration, and page views; from Google Search Console, clicks, impressions, click-through rate, average position, and top search queries. SEO OS never accesses Google properties or sites you did not select, and it cannot change anything in your Google accounts.

Why we access it. SEO OS saves a daily snapshot of these metrics so traffic and search trends can be shown on your project page and included in the client reports you generate.

How it is stored. To take daily snapshots without asking you to sign in every day, SEO OS stores a Google refresh token on our servers. Tokens are stored in a restricted database table, are never displayed in the app, and are never sent to your browser. The snapshots themselves are stored with your project.

Disconnecting. You can disconnect Google from a project at any time. Disconnecting deletes the stored refresh token immediately and stops all further collection from Google for that project.

No sale or sharing. Google user data is never sold, never shared with third parties for their own purposes, and never used for advertising.

SEO OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The free audit page does not require an account. When you submit a URL, we fetch that public page and a few related files (such as robots.txt and the sitemap) and store the URL, the check results, and a hash of your IP address. The hash is used only to limit how often the same network can run the audit. Anyone with the result link can view that result. We do not sell this information, and we do not use it for advertising.

We use the information described above only to run SEO OS: to sign you in, crawl and monitor the sites in your projects, take scheduled snapshots, generate your reports, deliver your share and request links, respond to support questions, and keep the service secure. We do not sell personal information, and we do not use your data, or your clients' data, to advertise to anyone.

SEO OS uses cookies only to keep you signed in to your account. We do not use advertising cookies, and we do not run third-party analytics trackers on the app. If you block these cookies, the sign-in session cannot be maintained.

Your workspace data is private to you and the workspace members you invite. We rely on a small set of infrastructure providers to run the service, including hosting, database, and email delivery providers, who process data only on our behalf. Shared report links and request links show only the specific report or request information tied to that link.

We keep your account and project data while your account is active so the service can work. Google refresh tokens are deleted the moment you disconnect, as described above. If you ask us to delete your account, we will delete your personal information and project data, except where short-term backup copies or legal obligations require us to keep something briefly, after which it is removed.

You can ask us at any time to show you the personal information we hold about you, correct it, export it, or delete it. Email justin@sobojinskisolutions.com and we will respond promptly. You can also remove data yourself at any time by deleting projects or your account from inside SEO OS, and you can revoke SEO OS's access to your Google account from your Google account's security settings.

If we change this policy in a way that matters, we will update this page and change the date at the top. For significant changes affecting Google user data, we will also notify account holders by email before the change takes effect.

Sobojinski Solutions LLC, operator of SEO OS. Questions about this policy or your data: justin@sobojinskisolutions.com.