Privacy Policy

We take your privacy seriously. This policy applies to everyone who visits seoaudit.agency or uses our services, including the free SEO audit tool and the client portal. It should be read together with our terms of service. If you do not agree with this policy, please do not use our services.

Who we are

SEO Agency Inc ("we", "us") runs the website seoaudit.agency and provides SEO services to businesses. We decide how and why personal data collected through this website is used.

Our software, client portal and free SEO audit tool run on SEO Audit Software (seoaudit.software), our affiliated company. When you use the audit tool or the client portal at app.seoaudit.agency, your data is processed on that platform under the same rules as this policy.

New York office: Suite 277, 51 Macdougal St, New York, NY 10012
Bangladesh office: Suite F2, Floor 6, House 4, Road 10, Sector 10, Uttara, Dhaka 1230

For any question about your personal data, or to use your rights, write to us through our contact page.

What personal data we collect

We collect personal data from four sources.

1. Information you give us on this website

Contact form: your name, business email address, phone number, website address and your message.
Free SEO audit tool: the website address you want checked, your business email address and your company name. The report opens on the page and we send a PDF copy to that email address.
Calls, email and WhatsApp: the contact details and information you choose to share with us.

2. Information you give us as a client or software user

Account information: your name and email address, needed to create your login for the client portal.
Payment information: billing name, billing address, tax details and transaction details such as the service, amount, date and payment method. We never store full card details.
Identity verification: in some cases we may ask for billing details or an identity document to verify who you are, to provide paid services and to comply with the law.
Extra profile information: job title, company name and phone number, only if you choose to give them.
Support requests: your contact details, a description of the problem and anything else you send to help us solve it.

3. Data from accounts you connect

Some tools need access to your accounts on other platforms, such as Google Search Console, Google Analytics and Google Business Profile. We ask for your permission before any connection is made, and you can withdraw it at any time. See Data from Google accounts below.

4. Information collected automatically

Device and connection: IP address, browser type, operating system, connection type, time zone and language settings.
Use of the website and services: the pages you visit and how you use them.
Cookies, tracking pixels and conversion tags: see Cookies below.
Third-party widgets: some pages carry features from other companies, such as maps or social media buttons. They may collect your IP address and the page you are on, and may set cookies. Their own privacy policies apply.

Cookies

Cookies are small text files that a website stores in your browser. We also use similar technologies such as tracking pixels and conversion tags.

Functional cookies make the website and the secure parts of our services work, and remember your settings, such as language.
Analytics cookies show us how many people visit, which pages they use most and which errors they see, so we can improve the website.
Marketing and advertising cookies are used to show relevant offers, to limit how often you see an advertisement, and to detect fraud.
Third-party cookies are set by other companies whose features we use. We do not control them.

We do not use cookies to collect personally identifiable or sensitive information without your permission, and we do not use them to pass personally identifiable data to third parties.

You can block or delete cookies in the settings of your browser. If you do, some parts of the website may not load or work as expected.

How we use your information

To provide and improve our services: to answer your enquiry, run the audit you asked for, send you its report, give you access to the client portal, give technical support, and send service updates and security notices.
To keep our services safe: to detect and prevent fraud, spam and security incidents, to verify information you give us, to settle disputes and to enforce our terms.
For marketing, with your consent: to send you offers and information that may interest you, and to make our advertising more relevant. You can object to this at any time.
To provide paid services: to process payments and keep them secure.
To meet legal obligations, such as tax and anti-money-laundering rules.

We do not make decisions about you based only on automated processing, including profiling, that have a legal or similarly significant effect on you (Article 22(1) GDPR).

Affiliated companies: SEO Audit Software and our other affiliated companies. Only the employees who need the data for their work can access it, and they are bound by confidentiality.
Service providers: companies that work for us, for example on payments, fraud prevention, hosting, maintenance and analysis. They receive only the data they need, and they are bound by a written agreement to protect it.
Advertising platforms: where the law allows, we may share limited data, such as a hashed email address, with platforms such as Facebook or Google to promote our services. You can ask us to stop this through our contact page.
Other third parties, where required: tax and other authorities, banks and insurers, external advisors, and business partners in the case of a merger or a similar transaction.

We do not sell your personal data.

Data from Google accounts (Google API Services)

If you connect a Google account in the software or the client portal, we ask Google only for the access that the feature you chose needs:

Sign in with Google: your name, email address and profile picture, to create your account and sign you in.
Google Search Console (read-only): search performance (clicks, impressions, average position, queries and pages) for the sites you choose.
Google Analytics 4 (read-only): traffic and engagement reports for the properties you choose.
Google Business Profile: performance, search keywords and reviews for the locations you choose. We only read this data. We do not post, reply or change anything in your Business Profile.

How we use it: only to show this data to you in your dashboard and in the client reports that are created, scheduled or sent. For the optional AI summary in a client report, the report figures are sent to Google Gemini to write that summary.

What we never do with Google user data: we do not sell it, we do not use it for advertising, and we do not use it to develop, improve or train generalised AI or machine learning models. We do not transfer it to others, except as needed to provide the features above, to comply with the law, or as part of a merger or acquisition with notice to you. Our staff do not read it unless you ask us to for support, or it is needed for security or to comply with the law.

Storage and deletion: the access token Google gives us is stored encrypted. When you disconnect a Google account, we delete the stored token and ask Google to revoke it. You can also remove our access at any time in your Google Account, under Security, in the list of third-party apps with account access. If you delete your account, your connected data is deleted with it.

Our use of information received from Google APIs, and any transfer of it to another app, follows the Google API Services User Data Policy, including the Limited Use requirements.

How we review communications

We may review, scan or analyse messages sent through our services to prevent fraud, assess risk, comply with the law, investigate problems, give customer support and improve our services. We use automated methods where we reasonably can, and review by hand when needed, for example in a fraud investigation or a support request. We do not review your communications in order to send you third-party marketing, and we do not sell reviews or analyses of them.

How long we keep your data

We delete your personal data when it is no longer needed for the purposes described in this policy. Some data must be kept longer, until a retention period set by law has ended, or for as long as it may be needed to establish, exercise or defend legal claims. After that it is erased.

Your rights

Under data protection laws, in particular the General Data Protection Regulation (GDPR), you have the right to:

ask for access to your personal data and for information about how it is processed;
have inaccurate or incomplete data corrected;
receive your data and move it to another controller (data portability);
have your data deleted;
object to the processing of your data, or have it restricted;
object at any time to the use of your data for direct marketing;
withdraw your consent at any time, where processing is based on consent. Withdrawal does not affect processing done before it.

Some conditions and limits apply to these rights, depending on the case. To use them, write to us through our contact page. We normally act on a request within one month. If we need more time, we tell you within that month.

How we protect your data

We use administrative, technical and physical measures to protect your information against unauthorised access, loss, destruction or change, and we keep them up to date. They include:

limited access to the production database, at network level and at user level;
a password policy for database access, and internal rules for changing passwords;
encryption of data in transfer, and encryption of login credentials in the database;
a web application firewall (WAF);
logging of actions and analysis of the logs;
antivirus software on administrator workstations.

If you believe your personal data has been lost, misused or accessed without permission, please tell us at once through our contact page.

Children

Our services are not directed at anyone under 18. If you are under 18, please do not register or send us personal information. If we learn that someone under 18 has registered without the consent of a parent, we delete the information as soon as possible. If you know that a child has given us personal information, please contact us.

Changes to this policy

We may change this privacy policy at any time. When we do, we publish the updated policy on this page and show the date of the update.

Contact us

For any question about this privacy policy or about your personal data, write to us through our contact page.