Privacy Policy
Last updated: July 7, 2026
SEOcompass (“SEOcompass,” “we,” “us”) helps you improve your website’s performance in search and AI answer engines. Trust is foundational to a product that asks you to connect your Search Console, so we keep this policy plain.
Information we collect
- Account data: your name, email, and authentication identifiers when you sign up or sign in (including via Google).
- Site data you provide: URLs you submit for audits and the sites you connect.
- Google Search Console data: with your explicit authorization, read-only performance data (queries, pages, impressions, clicks, CTR, position) used to power your audits, opportunity scoring, and tracking.
- Free audit tool: when you use our free audit at /tools and provide an email, we store that email and the audited URL to send your report and to follow up about SEOcompass. You can unsubscribe or request deletion at privacy@seocompass.co.
- Usage data: standard logs and, with your consent, product analytics to operate and improve the service.
How we use your data
- To run audits, score opportunities, generate content drafts, and track changes over time.
- AI features: to generate your recommendations and drafts, we send the relevant parts of your site’s data (for example the queries and pages being analyzed) to our AI provider, Anthropic, as prompt inputs. This is done solely to provide the feature to you; under our agreement it is not used to train their models.
- To provide, secure, and improve the service and support you.
- To improve the product itself we use only aggregated, anonymized patterns — never your identifiable data, and never to inform another customer’s strategy with your identifiable information.
Cookies & analytics
We use PostHog, a privacy-friendly product-analytics tool, to understand how the site and app are used. Analytics do not run and no analytics cookies are set until you accept via our consent banner; you can decline, and only strictly-necessary storage (your consent choice and your login session) is used regardless. We do not sell your data or use it for cross-site advertising.
Google API Services — Limited Use
SEOcompass’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Search Console data only to provide and improve user-facing features within SEOcompass (including sending the queries and pages being analyzed to our AI provider to generate your recommendations). We do not sell this data, use it for advertising, or allow humans to read it except where required for security, to comply with law, or with your explicit consent. Your Google refresh tokens are stored encrypted (AES-256-GCM) and are never shared or exposed.
Subprocessors
We do not sell your personal data. These providers process data on our behalf to run the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database and authentication | Account, Search Console data, app data |
| Vercel | Hosting and request logs | Request metadata |
| Dodo Payments | Billing (merchant of record) | Payment and billing details |
| Resend | Transactional and audit-summary email | Email addresses |
| Anthropic (Claude) | AI recommendation and content generation | Your site's queries/pages sent as prompts (see Limited Use) |
| SE Ranking | Keyword, audit, and AI-visibility data | Domains, keywords |
| DataForSEO | Keyword, domain, and backlink data | Domains, keywords |
| Serper.dev | Live Google results (discussion threads) | Keywords |
| Hunter.io | Outreach contact discovery | Target domains; returned contact emails |
| Pexels | Blog images | None (image fetch only) |
| PostHog | Product analytics (consent-gated) | Usage events |
We update this list as our processors change; contact privacy@seocompass.co for the current version.
Data retention
- Account data and site data: kept for the life of your account, then deleted within 30 days of account deletion or post-cancellation cleanup.
- Search Console snapshots: kept for the life of the connected site so tracking and history work; removed with the site or account.
- Free-audit leads (email + audited URL from /tools): up to 24 months, or deleted earlier on request.
- Outreach contact data (third-party emails the Backlinks feature finds for you): up to 12 months.
- Analytics: PostHog’s standard retention, consent-gated as described above.
Your rights & controls
You can exercise these yourself, in the product, at any time:
- Export your data: Settings → Privacy & data → “Export my data” downloads a machine-readable JSON copy of everything your account owns.
- Delete your account: Settings → Privacy & data → “Delete account” permanently erases your account and all associated data.
- Disconnect Google: Settings → Connections → “Disconnect Google Search Console” revokes our access with Google and deletes our copy of your tokens.
You can also request access, correction, export, or deletion by emailing privacy@seocompass.co.
Security
We use industry-standard measures including encryption in transit, encryption at rest for sensitive credentials (your Google tokens and any connected mailbox password are AES-256-GCM encrypted), access controls, and row-level data isolation between accounts. No system is perfectly secure, but protecting your data is a priority.
Contact
Questions about this policy? privacy@seocompass.co