Privacy Policy

1. Overview

[Your Company Name] ("Company," "we," "us," or "our") operates the SEOPulse platform ("Service"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Process subscriptions, payments, and billing
• Perform SEO audits, crawls, and analyses on websites you authorize
• Send transactional emails: account confirmations, crawl notifications, billing receipts
• Send optional marketing emails (only with your consent; unsubscribe available)
• Improve and optimize the Service through analytics and usage patterns
• Respond to support requests and provide customer service
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Payment processors: Stripe processes your payment information securely under their own privacy policy.
• Infrastructure providers: Vercel (hosting), Supabase (database and authentication) process data on our behalf under data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or governmental regulation.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

5. Data Retention

We retain your account data for as long as your account is active. Crawl results, audit data, and analytics are retained for the duration of your subscription. Upon account deletion, all personal data and associated content will be permanently deleted within 30 days. Billing records may be retained for up to 7 years as required for tax and legal compliance.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Passwords hashed using bcrypt with salting
• Row-level security (RLS) policies on all database tables
• API keys hashed before storage
• Regular security audits and monitoring
• Access controls and least-privilege principles for internal systems

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management (Supabase auth cookies). These cannot be disabled.
• Functional cookies: Remember your preferences such as theme, dashboard layout, and notification settings.
• Analytics cookies: Help us understand how you use the Service to improve it. These are optional and can be disabled.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a machine-readable format.
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link or account settings.
• Restrict processing: Request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@seopulse.com. We will respond within 30 days.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases: contract performance (to provide the Service), legitimate interest (to improve the Service and prevent fraud), and consent (for optional marketing). You may withdraw consent at any time. For GDPR-related inquiries, contact us at privacy@seopulse.com.

10. CCPA Compliance (California Residents)

If you are a California resident, you have the right to: know what personal information we collect and how it is used, request deletion of your personal information, opt-out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your rights. To submit a request, contact us at privacy@seopulse.com.

11. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: