Privacy Policy

1. Who controls your data

SEOKit.biz provides SEO analysis tools. Data controller: Alexander Yarovenko. Contact: [email protected].

2. Data we use

• Google profile: identifier, name, email and profile image.
• Search Console: accessible properties and aggregated page/query metrics such as clicks, impressions, CTR and position.
• Google Analytics 4, only after separate authorization: properties and aggregated traffic and conversion metrics.
• Data you enter into tools and technical security/error logs.

3. Why Google data is used

Data is used only to provide the report you request: CTR opportunities, period comparisons, page/query analysis, GSC–GA4 matching and recommendations. We do not sell it or use it for advertising, credit profiling, or training our own AI models.

4. AI generation and sharing

AI runs only when you request it and provide explicit consent. Depending on your selected model, Gemini (Google) or Groq receives the page URL, current title/description, up to 10 relevant GSC queries and, if supplied, public competitor metadata. OAuth tokens, email and full GSC exports are not sent to the AI provider. Provider processing is governed by its own terms and privacy policy.

5. Who we share, transfer or disclose Google user data to

We share, transfer or disclose Google user data only to the following recipients and only for the stated purposes:

• Google, to complete OAuth authorization and the user-requested Google Search Console and Google Analytics API calls.
• Our cloud hosting provider, Render, as an infrastructure processor needed to operate the application and store OAuth credentials in encrypted server-side form.
• Google Gemini or Groq, only when the user separately starts an AI feature and gives explicit consent, and only for the limited fields listed in Section 4.
• Government authorities or courts, only when disclosure is required by applicable law or a valid legal order, or is necessary to protect rights, safety and prevent abuse.

6. Storage and sensitive-data protection mechanisms

We apply administrative, technical and organizational safeguards appropriate to the nature of the data:

• HTTPS/TLS encrypts data in transit between the browser, SEOKit and API providers.
• OAuth tokens are encrypted at rest on the server using authenticated Fernet symmetric encryption; unencrypted tokens are not stored in the browser cookie.
• The browser receives only a random session identifier in a Secure, HttpOnly and SameSite cookie; application secrets are kept separately in protected server configuration.
• Access follows least privilege: GSC and GA4 are requested for reading, and only when the corresponding feature is opened; write access to Search Console is a separate permission requested only for the actions that need it.
• Production infrastructure access is restricted to the authorized operator; dependencies and security settings are maintained, and logs are used only for security and diagnostics.

Credentials remain until logout, account deletion, access revocation or operational cleanup. Reports are saved only where a tool clearly offers that feature. No transmission or storage method can guarantee absolute security, but we review these safeguards and address identified risks.

7. Google API Services User Data Policy

SEOKit.biz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your choices and deletion

You can sign out, revoke access in your Google Account security settings, or contact us to delete stored credentials and reports. We will complete a verified request within 30 days unless law requires otherwise. Local SEOKit Courses progress can be erased with the app's reset progress action.

9. Updates and contact

The date above will change when this policy is materially updated. Questions and deletion requests: [email protected]. See also our Terms of Service.