Privacy Policy
Last updated: September 17, 2026
This Privacy Policy explains how SEOFlux (“we”, “us”) collects, uses, and protects information when you use the SEOFlux platform (the “Service”). By signing in, you agree to the practices described here.
1. Information we collect
To provide the Service, we collect and process the following information:
- Google account profile. Your name, email address, and profile picture, obtained through Google Sign-In when you authenticate.
- Search Console data. Aggregated metrics for the properties you connect — pages, queries, clicks, impressions, click-through rate (CTR), and average position.
- Google Analytics 4 data. Aggregated metrics such as sessions, page views, users, bounce rate, and session duration for the GA4 properties associated with your domains.
- Automatic technical data. IP address and browser/device type, collected automatically when you use the Service (for example, to keep your session active and for basic security).
- Operational data. Activity and audit logs needed to run and secure the Service.
2. How we connect to your Google data
SEOFlux connects to your Google account using OAuth 2.0 with read-only scopes only:
webmasters.readonly— read your Search Console data.analytics.readonly— read your GA4 data.
We never request write access. SEOFlux cannot modify your Search Console properties, your GA4 configuration, or any other Google resource on your behalf.
3. Authentication tokens
When you sign in, Google issues access and refresh tokens that let SEOFlux fetch your data on a schedule. These tokens are stored on our server and encrypted at rest. You can revoke SEOFlux's access at any time from your Google account permissions page, which immediately disables further access.
4. How we use your information
- To display dashboards, trends, and comparisons across the sites you connect.
- To detect SEO opportunities, ranking changes, and potential issues such as keyword cannibalization.
- To generate on-demand AI reports that analyse a page and suggest improvements.
- To operate, monitor, and protect the Service.
5. AI features and third-party processors
When you request an AI report, relevant page data from your connected properties is sent to Google Gemini to generate suggestions (for example, title, meta, and content structure). The generated report is stored for your later reference. Beyond Google (for authentication, data retrieval, and AI), we do not share your data with advertising networks or third-party analytics providers.
6. Data retention
We retain daily snapshots of your Search Console and GA4 data for as long as your account is active, so that trend and comparison features keep working. On-demand AI reports are retained for a limited period. When you delete your account or disconnect a property, the associated data is removed from the active dataset.
7. Cookies and local storage
The Service uses a standard session cookie to keep you signed in and to provide core functionality. We do not use advertising or cross-site tracking cookies.
8. Security
We apply reasonable technical and organisational measures to protect your data, including encryption of OAuth tokens at rest and restricted access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. You can exercise most of these rights directly from within the Service or by contacting us. You can also revoke access at any time through your Google account.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.
11. Contact
If you have questions about this policy or your data, please open an issue on the project repository or contact the maintainer directly.
This document is provided as a starting point. Before going live in a specific jurisdiction, have it reviewed by a qualified legal professional.