Privacy Policy

1. Introduction

Stackvian LLC ("we," "us," "our"), a Wyoming LLC located at 30 N Gould St Ste N, Sheridan, WY 82801, USA, operates the AutoSEO platform at https://autoseo.it.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

2.1 Information You Provide: Name, email address, billing information, company name, website URLs, and any content you submit through the Service.

2.2 Information Collected Automatically: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referral URLs, and cookies/similar technologies.

2.3 Payment Information: Payment card details are collected and processed directly by our payment processor, Stripe, Inc. We do not store your full credit card number on our servers. Please refer to Stripe's Privacy Policy for details.

2.4 Third-Party Authentication: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google password.

3. Google User Data, Limited Use & API Services

When you choose to connect your Google account, AutoSEO accesses a limited set of Google user data through Google APIs, strictly to provide features you request. We request only the scopes below, and only after you grant explicit consent on Google's OAuth screen:

3.1 Scopes we request and why:

• Sign-In (email, profile) — userinfo.email, userinfo.profile: to create and secure your AutoSEO account and display your name and profile picture.
• Google Search Console (read-only) — webmasters.readonly: to read your verified sites' search-performance data (clicks, impressions, queries, pages, average position) and indexing status, which we display in your AutoSEO dashboard and use to generate SEO recommendations. This access is read-only; we never modify your Search Console settings.
• Web Search Indexing — indexing: to submit URL-update notifications for content you publish on your own verified properties, so newly published or updated pages are discovered by Google faster. We only submit URLs that belong to sites you own and have connected.

3.2 How we use and display this data: Google user data is fetched on your behalf, stored only as needed to render your dashboard and historical reports, and shown only to you (the authenticated account owner) and authorized members of your team. We use it solely to provide and improve the user-facing SEO analytics, recommendations, and publishing features of AutoSEO.

3.3 Limited Use disclosure: AutoSEO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not use Google user data for serving advertisements.
• We do not sell Google user data, and we do not transfer it to third parties except as necessary to provide or improve user-facing features that are prominent in AutoSEO, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with prior notice to you.
• We do not allow humans to read Google user data unless (a) you give explicit consent for specific data, (b) it is necessary for security purposes (e.g., investigating abuse), (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized for internal operations.

3.4 Retention and revocation: You can disconnect Google integrations at any time from your AutoSEO settings, and revoke AutoSEO's access entirely at myaccount.google.com/permissions. On disconnection or account deletion, we delete cached Google user data within 90 days, except where retention is required by law.

4. How We Use Your Information

We use collected information to: (a) provide, maintain, and improve the Service; (b) process transactions and send billing communications; (c) respond to support requests; (d) send product updates and marketing communications (with opt-out); (e) analyze usage patterns to improve user experience; (f) detect, prevent, and address fraud and security issues; (g) comply with legal obligations.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal bases for processing include: (a) Contractual necessity — to provide the Service you requested; (b) Legitimate interests — to improve our Service, prevent fraud, and market our products; (c) Consent — for marketing emails and non-essential cookies; (d) Legal obligation — to comply with applicable laws.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data with: (a) Service providers — Stripe (payments), Google Cloud (hosting), Gemini AI (content generation); (b) Legal authorities — when required by law, subpoena, or court order; (c) Business transfers — in connection with a merger, acquisition, or sale of assets; (d) With your consent — for any purpose you explicitly authorize. Google user data is never sold and is shared only as described in Section 3 (Limited Use).

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 90 days for legal compliance and dispute resolution. Anonymized analytics data may be retained indefinitely.

8. Your Rights

Depending on your jurisdiction, you may have the right to: (a) Access your personal data; (b) Rectify inaccurate data; (c) Delete your data ("right to be forgotten"); (d) Restrict processing; (e) Port your data to another service; (f) Object to processing; (g) Withdraw consent at any time.

To exercise these rights, contact us at privacy@autoseo.it.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including: the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal data), and the right to non-discrimination for exercising your privacy rights.

10. Cookies and Tracking

We use cookies and similar technologies for essential functionality, analytics, and preferences. For detailed information, see our Cookie Policy. You can control cookies through your browser settings.

11. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256), secure authentication with HMAC-SHA256 signed sessions, regular security audits, access controls and least-privilege principles, and hosting on Google Cloud Platform with SOC 2 compliance.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. International Data Transfers

Your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards for international transfers in compliance with GDPR and applicable data protection laws.

13. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or notice on the Service. The "Last Updated" date reflects the most recent revision.

15. Contact Us