Privacy policy

This privacy policy explains what personal data SEO Tracker Pro collects, why, who we share it with and the choices you have. It covers this website (www.seotrackerpro.com), the web app (app.seotrackerpro.com), the Android and iOS apps, and our API (together, the "Service").

Items in [square brackets] are placeholders that must be completed before launch.

1. Who we are

The Service is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [COMPANY REGISTRATION NUMBER] ("we", "us"). We are the controller of the personal data described here. You can contact us about privacy at support@seotrackerpro.com. [If required: name and contact details of the EU/UK representative and data protection officer.]

2. Data we collect

Account data

Your name, email address, password (stored only as a one-way hash), language, country and time zone. If you are invited to a workspace, the inviter provides your email address.

Content you add

The websites (domains and URLs), keywords, search engines, locations, languages, devices, competitor domains and Google AI Mode questions you add to projects, and the results the Service records for them: ranking positions and history, AI Mode answers and citations, website audit results and PageSpeed results.

Billing data

• Google Play and the App Store: the store handles payment. We receive purchase tokens or transaction identifiers, the product bought and the subscription status, which we verify with the store.
• Web app: payments are processed by Stripe. We never see or store your full card number. We receive a customer identifier, the subscription status and invoice records.
• We keep a ledger of the credits added to and used from your account.

Device and session data

The devices you sign in on (a device identifier, platform, app version) and, if you turn on push notifications, a Firebase Cloud Messaging token used to deliver them.

Usage and diagnostics

The apps use Firebase Analytics (how features are used) and Firebase Crashlytics (crash reports with device model, operating system version and app state). These never include your keywords or websites. You can turn them off in the app under Account → Settings → Share anonymous usage analytics.

Support messages

What you send us when you contact support.

This marketing website

This website uses no analytics, advertising or tracking scripts and sets no cookies. Our hosting provider [HOSTING PROVIDER] processes standard server logs (IP address, user agent, requested page, time) to deliver and secure the site. See the cookie policy.

3. How we use data, and our legal bases

Purpose	Data	Legal basis (GDPR)
Provide the Service: accounts, projects, tracking, audits, reports, sync across devices	Account data, content, device data	Performance of a contract
Take payments, verify store purchases, manage credits and prevent fraud	Billing data	Contract; legal obligation (accounting)
Send push notifications and service emails you have turned on	Device data, email address	Contract; consent for push notifications
Understand usage and fix crashes	Usage and diagnostics	[Consent or legitimate interest — lawyer to confirm]
Keep the Service secure and prevent abuse	Account, device and log data	Legitimate interest
Answer support requests	Support messages	Contract; legitimate interest

We do not sell your personal data and we do not use it for advertising.

4. Service providers and data sources

We share data only as needed to run the Service:

• DataForSEO supplies search results, Google AI Mode answers and keyword data. We send the keyword or question, search engine, location, language and device. We do not send your name or email address.
• Google PageSpeed Insights API runs PageSpeed tests on the URLs you choose.
• Google Firebase (Analytics, Crashlytics, Cloud Messaging) for app analytics, crash reports and push notifications.
• Google Play and Apple App Store for in-app purchases, and Stripe for web payments.
• [Hosting and infrastructure provider, region], [email delivery provider] and [any other processors].

Our website audit crawler visits the public pages of the websites you add to a project. It identifies itself with the user agent SEOTrackerProBot and follows robots.txt.

Each provider processes data under its own terms and, where it acts on our behalf, under a data processing agreement. We may also disclose data when the law requires it.

5. International transfers

Some providers process data outside your country, including in the United States. [Describe the safeguards used, for example the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.]

6. How long we keep data

• Account data and content: while your account is active.
• When you delete your account: you are signed out of all devices at once. After a 7-day grace period your personal data is anonymised: name, email address, password and security settings are removed; devices, push tokens, workspace memberships, invitations, notifications and your projects, keywords and competitors are deleted. Signing in again during the grace period cancels the deletion. See delete your account.
• Financial records: the credit ledger, subscription and payment records are kept in anonymised form for [RETENTION PERIOD] because accounting and tax law require it.
• Diagnostics: according to Firebase retention settings ([RETENTION PERIOD]).
• Backups: deleted data leaves encrypted backups within [BACKUP RETENTION PERIOD].

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent at any time. To exercise these rights, email support@seotrackerpro.com from the address on your account.

• Export: paid plans can export keywords as CSV in the app. For a copy of all your personal data, email us.
• Deletion: delete your account in the app under Account → Delete account, or email us.

You can also complain to your local data protection authority.

8. Children

The Service is not intended for children under [16], and we do not knowingly collect their data.

9. Security

Data is encrypted in transit, passwords are hashed, access to production systems is restricted and administrator accounts require multi-factor authentication. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

10. Changes

We will post changes on this page and update the date at the top. For significant changes we will also notify you in the app or by email.

11. Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Email: support@seotrackerpro.com.