Privacy Policy

1. Information We Collect

We may collect information you provide directly, including your name, email address, account credentials, website details, submitted URLs, and other information needed to provide reports and account access.

2. How We Use Information

We use collected information to create and manage your account, provide audit and reporting features, respond to support requests, improve service quality, protect platform security, and communicate important product or account updates.

3. Cookies and Technical Data

We may use cookies, session data, logs, and other technical information to keep you signed in, maintain performance, analyze usage patterns, and support security and fraud prevention.

4. Google Account Data (Search Console Integration)

If you choose to connect a Google account to link a website's Google Search Console property, we use Google's OAuth sign-in to request your Google account email address and read-only access to Google Search Console (https://www.googleapis.com/auth/webmasters.readonly). We never request write or delete access to your Search Console data, and we never request access to your Gmail, Drive, or any other Google product.

With your authorization, we read: the list of Search Console properties verified to your Google account, sitemap submission and indexing counts, Search Analytics performance data, and URL Inspection (indexing/coverage) status for pages on the connected website. This data is used solely to power SEO audit checks — such as index coverage and Search Console issue detection — shown to you in your own SearchVitals dashboard.

Access and refresh tokens are encrypted at rest and stored only for the website you connected them to. We do not sell Google user data, do not use it for advertising, and do not share it with third parties except as needed to provide the service to you or as required by law. You can disconnect a Google account at any time from your website settings, which deletes the stored tokens from our systems, or revoke access directly at myaccount.google.com/permissions.

SearchVitals's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing

We do not sell your personal information. We may share information with trusted service providers and infrastructure partners when necessary to operate the platform, comply with legal obligations, enforce our terms, or protect the safety and security of users and the service.

When you subscribe to a paid plan, we share the information necessary to process your payment — including your name, email address, and billing details — with our payment processing partner, who acts as the merchant of record for these transactions and handles billing, invoicing, and payment card data on our behalf. Their use of this information is governed by their own privacy policy.

6. Data Retention

We retain information for as long as needed to provide the service, meet legal and operational obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the purpose for which it was collected.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

8. Your Rights and Choices

You may update your account details, request account-related support, or opt out of non-essential communications at any time from your account settings.

Deleting your account and data

You can ask us to delete your account together with the personal data attached to it — the websites you added, your audit history, keyword tracking data, saved reports, and any Google Search Console authorisation you granted. Email service@searchvitals.com from the address on your account, with “Data deletion request” as the subject. We will acknowledge your request and complete the deletion within 30 days.

Deletion is permanent and cannot be undone — we keep no archived copy you could be restored from. If you have an active paid subscription, cancel it first, or say so in the same email and we will cancel it before deleting your account so that billing stops.

Other rights

Depending on where you live — this applies in particular under the UK and EU GDPR — you may also ask for a copy of the personal data we hold about you, ask us to correct it, object to particular processing, or withdraw a consent you gave earlier. Cookie consent can be changed yourself at any time from Cookie settings; for anything else, write to the same address. We respond within 30 days, and there is no charge.

What remains after deletion

Payment and invoice records are held by Paddle, our merchant of record, which retains them for as long as tax and accounting law requires. That retention is Paddle's own legal obligation and is governed by the Paddle Privacy Policy, not by us. Server logs may briefly retain a technical record until they age out on their normal schedule; they are not used to identify you afterwards.

9. Third-Party Links and Services

Our website or reports may reference third-party websites or services. We are not responsible for the privacy practices of those third parties, and you should review their policies separately.

10. Policy Updates

We may update this Privacy Policy from time to time. Continued use of the service after changes take effect means you accept the revised policy.

11. Contact

If you have questions about this Privacy Policy or how your information is handled, please contact the SearchVitals team through the contact information published on the website.