Privacy Policy

1. Scope

This Privacy Policy applies to the privateSEO desktop application, the website at privateseo.app, licensing and update services, and optional integrations you connect. “privateSEO,” “we,” and “us” refer to the privateSEO service.

The app does not require an account to run local page and website scans. Where information is processed only on your device, you control that information directly and privateSEO does not receive it.

2. Data kept locally

The app stores its core project data on your computer. This may include:

• page scans, website scans, SEO findings, discovered URLs, fetched page information, and comparisons;
• project names, scan settings, report history, and locally cached integration snapshots;
• app preferences and privacy-redacted diagnostic logs; and
• PDF, CSV, or JSON files that you choose to export.

privateSEO does not automatically upload scanned page content or reports to a privateSEO cloud account. You decide whether to export, copy, back up, or share files created by the app.

3. Website scans and PrivateSEOBot

When you start a website scan, requests are sent directly from your computer to the website and related public resources needed for the audit. The operators of those websites can receive ordinary request information such as your IP address, the requested URL, time, and the crawler user-agent.

Scans are intended for public resources and do not support authenticated crawling. privateSEO blocks private-network targets as a safety measure. You are responsible for scanning only websites you own or are authorized to audit.

4. Optional Google integrations

If you choose to connect Google Search Console or Google Analytics, privateSEO opens Google’s authorization flow in your system browser and requests read-only access. A temporary loopback callback on your device completes the connection.

Data the app can access

• Search Console: verified properties and performance data such as clicks, impressions, click-through rate, average position, queries, and landing pages.
• Google Analytics 4: accounts and properties plus reporting data such as sessions, users, views, engaged sessions, engagement rate, average session duration, pages, acquisition channels, and countries.

How Google data is used and stored

Google data is used only to display the integration and reporting features you request. OAuth tokens are handled by the desktop app’s main process and stored in protected operating-system app storage where available. Tokens are not exposed to page content. Selected property mappings and report snapshots are stored locally with your privateSEO project.

You can disconnect either integration in Scan Settings. Disconnecting stops future access and removes the stored connection tokens. Data already saved into local reports may remain until you delete those reports or remove the app’s local data.

5. Licensing, updates, and diagnostics

License activation

Paid checkout and subscription billing are provided by Lemon Squeezy, which acts as merchant of record and processes the purchase information needed to complete an order, collect applicable taxes, issue receipts, and manage the subscription under its own terms and privacy policy.

If you activate a paid license, the app sends the license key, a randomly generated installation identifier, and information needed to confirm the purchased product and billing variant directly to Lemon Squeezy's License API. Lemon Squeezy and its infrastructure may also receive ordinary network metadata such as IP address, request time, app version, and platform. Scanned page content and reports are not part of license validation.

Updates

The app may contact the privateSEO update service to check for new versions. These requests can include the current app version, platform, and standard network metadata.

Diagnostics

The app creates limited, rotating diagnostic logs locally to help troubleshoot technical problems. Logs are designed to redact sensitive values and are not uploaded automatically. They leave your device only if you choose to export or share them.

6. Data from this website

The public privateSEO website does not currently use advertising trackers or web analytics and does not require an account. It saves your light, dark, or system theme choice in browser local storage.

If you join the launch waitlist, we store the email address you provide, your selected plan interest, your detected or selected operating system, the time you consented, and the most recent update time. We use this information only for privateSEO launch and essential availability updates. The form includes a hidden anti-spam field, but it does not use third-party tracking.

Like most websites, the hosting infrastructure may process standard server-log information such as IP address, browser or user-agent, requested page, response status, and time. This information is used to deliver and secure the website, diagnose failures, and prevent abuse.

7. When information is shared

We do not sell personal information. Limited service information may be processed by providers that help operate website hosting, licensing, payments, updates, or security, subject to their service obligations. Lemon Squeezy processes purchases, subscriptions, receipts, and license validation. Google processes information when you choose to connect a Google service under Google’s own terms and privacy policy.

We may disclose information if reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transaction such as a merger or acquisition. Where legally required, we will provide notice or obtain consent.

8. Retention

Local projects and reports remain on your device until you delete them in the app or remove its local application data. Exported files remain wherever you save them. Integration tokens remain until you disconnect the service, revoke access through Google, or remove the relevant app data.

Purchase, subscription, and license records are retained by Lemon Squeezy as needed to administer entitlements, provide customer billing records, prevent misuse, comply with legal obligations, and resolve disputes. Waitlist information is retained until launch communications are complete, you ask us to remove it, or it is no longer needed. Website and infrastructure logs are retained for a limited operational period appropriate to security and reliability needs, then deleted or anonymized unless a longer period is required by law.

9. Security

privateSEO limits Google permissions to read-only scopes, isolates integration tokens from page content, uses operating-system protected storage where available, blocks private-network scan targets, and keeps core scan data local. No system can guarantee absolute security, so you should also protect your device, operating-system account, backups, license key, and exported reports.

10. Your choices and privacy rights

You can ask us to remove your waitlist email at any time, delete local reports, remove exported files, disconnect Google services, revoke privateSEO access from your Google account, and clear local app data. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or objection for personal information held by the privateSEO service, and to complain to your local data-protection authority.

Because core scan data normally remains only on your device, privateSEO cannot retrieve or delete that local data for you. Requests relating to service-side information should include enough detail to identify the relevant license or interaction.

Children

privateSEO is a professional website-auditing tool and is not directed to children under 13 or the minimum age required to consent to online services where they live. We do not knowingly collect personal information from children.

11. Changes and contact

We may update this policy as privateSEO changes. The date at the top identifies the latest version. Material changes will be presented through the website, app, or another appropriate channel before they take effect where required.