Privacy policy
Effective
This policy explains what personal data Seouch ("we", "us") collects when you use seouch.com, why, who helps us process it, how long we keep it and what you can ask us to do with it. We have tried to write it in plain language. If anything is unclear, email hello@seouch.com.
The short version
- You can run audits and use the free tools without giving us your name or email address.
- We store the URLs you audit and the results for 90 days, so report links keep working, then delete them.
- If you ask for the full report by email, we keep your email address to send it, plus one re-scan reminder. No newsletters or automated sales sequences.
- If you ask for an expert review, a strategist uses the details you give to contact you about it.
- We store IP addresses only as salted hashes, to enforce rate limits and prevent abuse.
- We do not sell personal data or use advertising cookies.
What we collect and why
When you run an audit or use a tool
We collect the URL you submit and the results of the audit: data our crawler, SeouchBot, fetched from that public page and from files such as robots.txt, the sitemap and llms.txt, along with scores and findings. We store this so the report has a stable link and so a repeat audit of the same page within 24 hours can reuse the result. If a public page you audit happens to contain personal data, such as a name in a heading, it may appear in the stored result.
We also store a salted hash of your IP address with the audit. A hash is a one-way fingerprint: we cannot turn it back into your IP address, but we can tell when the same connection runs many audits. See About SeouchBot for how our crawler treats the sites it visits.
When you request the full report
We collect your email address and, if you give it, your first name. We also record which audit the request is for, the time you asked (as a record of your request), the hashed IP address and any campaign parameters in the link you arrived from, such as utm_source. We use this to send the report, to send one reminder to re-scan your page later, and to tell our team that a report was requested.
When you ask for an expert review
We collect the details you enter in the request form: name, email address, company, website, role, monthly marketing budget range, main goal, phone number if you give it, and any notes. A strategist uses them to review your report and contact you personally about it. Nothing about the request is sent to anyone outside the processors listed below.
When you contact us
We collect your name, email address and message. The message is delivered to our inbox by email and is not stored in our database. If email delivery fails, the message is written to our server logs instead, so it is not lost.
Rate limiting and security
To stop abuse, each audit, report request and contact message counts against a limit tied to a salted hash of your IP address. These counters are deleted after about a day. Our host, Vercel, also keeps standard request logs, including IP address and browser user agent, for security and debugging, for a limited period under its own retention settings.
Analytics
We use Vercel Web Analytics to count page views. It does not use cookies. According to Vercel, visitors are identified by a hash created from the incoming request, which is discarded after 24 hours, and the data points recorded are the page, referrer, filtered query parameters, approximate location (country, region and city), browser, operating system and device type. We see aggregated statistics only.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
seouch_unlock | Remembers which full reports you have unlocked, so you do not need the email link again. It holds signed tokens, not your email address. Set as httpOnly, so page scripts cannot read it. | 180 days |
| Admin session cookie | Keeps our own team signed in to the internal admin area. It is never set for visitors. | Session |
We do not use advertising, tracking or third-party social media cookies, so there is no cookie banner.
Legal bases
Where data protection laws such as the GDPR apply, we rely on these legal bases:
- Your request: sending a report you asked for, replying to a message, and handling an expert-review request.
- Legitimate interests: running and securing the service, rate limiting, aggregate analytics, the single re-scan reminder after a report request, and keeping records of requests. You can object to these at any time.
Who processes data for us
We use the following service providers. Each receives only what it needs for its task.
| Provider | Purpose | Data it receives |
|---|---|---|
| Vercel | Hosting, serverless functions, request logs and Vercel Web Analytics. | Everything you send to the site passes through Vercel. |
| Google Analytics | Traffic measurement (page views and audit, tool and lead events). | Cookies and an anonymous client identifier; IP addresses are processed by Google under its own policy. |
| Neon | Postgres database. | Stored audits, report and expert-review requests, and the rate-limit ledger. |
| Resend | Email delivery. | Your email address, first name and report link when you request a report; contact and expert-review messages sent to us. |
| Google PageSpeed Insights API | Performance and Core Web Vitals data. | The URL being audited. Google fetches that page itself. |
| DataForSEO | Backlink and AI-mention data, when those features are used. | The domain name being checked. |
| Vercel AI Gateway and the model provider it routes to | Writing the fix list in plain language, when that feature is enabled. | Failed checks and page facts from the audit. No email addresses or names. |
Some of these providers process data in the United States and other countries. Where required, we rely on the safeguards in their data processing terms, such as standard contractual clauses.
What we do not do
- We do not sell, rent or trade personal data.
- We do not share your details with advertisers or data brokers.
- We do not send automated email sequences. After a report request you receive the report and, at most, one re-scan reminder. If you ask for an expert review, the follow-up comes from a person.
- We do not publish individual audit results or identify the sites people audit. We may publish aggregated statistics drawn from many audits, without identifying any site or person.
How long we keep data
| Data | Kept for |
|---|---|
| Audited URLs and audit results | 90 days, then deleted |
| Rate-limit counters | About one day |
| Report and expert-review requests | As long as we may still be in contact about your request, or until you ask us to delete them |
| Contact messages | In our inbox for as long as needed to deal with your message |
| Analytics visitor hash | 24 hours; aggregated statistics are kept longer |
seouch_unlock cookie | 180 days in your browser, or until you clear it |
Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy,
- correct data that is wrong,
- delete your data,
- stop using your data for a purpose you object to, such as the re-scan reminder,
- give you your data in a portable format.
To make a request, email hello@seouch.com from the address the request is about, or use the contact form. We may ask you to confirm the request from that address before acting on it. We reply within one month. You also have the right to complain to your local data protection authority.
To stop a reminder email, reply to it or write to us, and we will not send further emails.
Security
The site is served only over HTTPS. IP addresses are stored as salted hashes, report unlock tokens are cryptographically signed, and access to the database and admin area is restricted to our team.
Children
Seouch is a tool for site owners and marketers and is not directed at children under 16. We do not knowingly collect their personal data.
Changes to this policy
When we change this policy, we update the effective date at the top. If a change affects how we use data you have already given us, we will say so on this page before it takes effect.
Contact
Questions about this policy or your data: hello@seouch.com.