Privacy policy
Last updated November 10, 2026
The short version: we collect only what we need to run your dashboard. We don’t sell your information, we don’t use advertising trackers, and you can ask us to delete your account at any time.
What we collect
- Account details: your name, email address, business name, website address and a securely hashed password.
- Scan results: facts about your website’s public pages, such as titles, headings and response times.
- Connections you choose to set up: your WordPress connection key and, when available, a read-only Google Search Console access token. Both are stored encrypted.
- Connected website and Google reports: the Search Console queries, pages, countries and search metrics, and Google Analytics session and key-event summaries you choose to connect. These help us research your website and measure results.
- Publishing connections: relevant repository or store details and approved content and metadata changes when you connect GitHub or Shopify.
- Requests and support messages: the business information, goals and instructions you give us, promotion requests, questions you send through chat, and the email address, conversation and notes you choose to send to our support team.
- Payments: handled by Stripe. We receive confirmation of your payment, but we never see or store your full card details.
- Basic usage and security logs: such as sign-in times and IP addresses, used to keep accounts secure and the service working.
How we use it
To run your dashboard, scan your website, make the changes you approve, prepare the promotion kits and services you request, take payments, reply to you, and keep the service secure. The app uses a sign-in cookie, and our website’s support chat uses local storage for its greeting and session storage for the conversation in your tab. We do not use advertising or analytics cookies on this marketing website. Our Cookies & Browser Storage Policy explains the purposes, storage periods and your choices.
Who we share it with
Only the services that help us run Your SEO Squad: our hosting provider, Stripe for payments, Google when you connect Search Console or Analytics, OpenAI for AI processing, Emailit for messages to you, LinkCheck for guest-post research and orders, Serpstat for search and competitor research, and GitHub or Shopify when you connect them to publish approved changes. We don’t sell or rent your information.
OpenAI. Your SEO Squad uses OpenAI, through Codex, to analyse websites, draft and review proposed changes, prepare promotion materials and answer support questions. Depending on the task, OpenAI may receive relevant website content and metadata, scan findings, the business information and instructions you give us, reports from Search Console or Google Analytics if you connect them, and support messages with limited account and website status. This processing happens on our servers: the WordPress plugin only talks to Your SEO Squad, never to OpenAI directly.
LinkCheck. Guest-post research sends LinkCheck the relevant business profile, offerings, goals, audiences, preferences, budget and target pages, plus connected Search Console queries, pages, countries and search metrics and Google Analytics session and key-event summaries. LinkCheck uses this context to suggest placements; selected placements and order details are also sent to arrange and track guest posts.
Other connected services. Serpstat receives website and competitor addresses and selected research searches, which may come from your profile or Search Console data, to research search opportunities. GitHub receives approved changes, repository details and pull-request text when connected; Shopify and your website host receive approved content and metadata changes through their connections. Emailit receives recipient addresses and message contents, including relevant report, support or account information, to send service messages.
How long we keep it
Detailed scan results are kept for 180 days. Your account, change history and requests are kept while your account is open. Payment records are kept as long as the law requires.
In your browser, the chat greeting flag has no automatic expiry set by our chat code. Chat conversation storage normally lasts for the tab’s session, subject to your browser’s session-restore behaviour. See our Cookies & Browser Storage Policy for details. Clearing browser storage does not delete support messages already sent to us; you can request account deletion below.
Your choices
- Disconnect WordPress or Google at any time from Settings & plan.
- Ask for a copy of your information, a correction, or deletion of your account using our privacy and support request form. No sign-in is needed. You can also use the “Get expert help” page in your dashboard.
- You can also revoke Google access from your Google account settings.
Changes
If we change this policy in a way that matters, we’ll update the date above and tell paying customers by email or in the dashboard.