Privacy Policy

This page explains what SEGASEO collects and why. The workspace owner is the controller of the website and business data they add; SEGASEO processes it to provide the service.

Data we collect

• Account data: name, email, password hash (never the password), sign-in timestamps, optional two-factor settings.
• Website data: publicly available pages of websites you add — URLs, HTTP headers, HTML-derived SEO facts (titles, headings, links, images, structured data) and extracted main text. Private or password-protected content is never crawled without an authorised connector.
• Google data (only if you connect it): with your consent, read-only Search Console data for the properties you select (queries, pages, clicks, impressions, CTR, position, URL inspection results). OAuth refresh tokens are encrypted at rest and deleted when you disconnect.
• Business profile: facts you enter (products, services, locations) used to ground AI analysis.
• Usage and audit logs: actions performed in your workspace, kept for security and accountability.

AI processing

When AI features are used, relevant extracted facts (not entire websites, not customer personal data) are sent to the AI provider configured by the platform (OpenAI, Anthropic or Google). Workspace owners can turn AI processing off in Settings.

What we do not collect

SEO does not need your customers' personal data, orders or payment information; SEGASEO does not request it from connected platforms. We never store full payment-card data.

Retention, export and deletion

Detailed crawl data is kept for the most recent crawls per website; audit history and scores are kept for the plan's report retention period. Owners can export workspace data and request deletion in Settings.

Security

Data is isolated per workspace, transmitted over HTTPS and secrets are encrypted at rest. Administrative access is logged.

Questions: contact the platform operator at the support address shown in the app.