At ZevSEO ("we", "our", or "us"), accessible via zevseo.com, we respect your privacy and are committed to protecting the personal and analytical data you entrust to us. This Privacy Policy details how we collect, store, process, and safeguard your information.
1. Information We Collect
We strictly limit the data we collect to what is necessary to operate our rank tracking and technical audit services:
- Account Information: When you register for an account, we collect your name, email address, password hash (encrypted via bcrypt/Argon2), and workspace profile settings.
- SEO Project Configuration: Tracked domains, target keywords, target search locations, device types (Desktop vs Mobile), and local timezone preferences (e.g.,
America/New_York). - Google Search Console (GSC) Data: If you voluntarily integrate Google Search Console, we receive read-only OAuth tokens to access search analytics data (queries, clicks, impressions, CTR, average position). We do not request or possess write access to your Google account.
- Payment & Billing Data: Payment processing is handled by our Merchant of Record, Lemon Squeezy. We never store, transmit, or have access to your full credit card numbers, CVVs, or bank credentials.
2. How We Use Your Data
We process your data strictly for legitimate operational purposes:
- To schedule automated daily SERP crawlers at 02:00 AM in your project's designated timezone.
- To compile and dispatch rolling 30-day macro digests (Weekly Monday digests and Monthly summary reports).
- To detect on-page technical issues such as broken 404 links, redirect loops, and canonical mismatches.
- To provide customer support and service updates regarding platform performance.
3. Data Isolation & Multi-Tenancy
Your tracked keywords, competitor lists, and Search Console intelligence are strictly isolated within your organization workspace. We do not sell, rent, monetize, or aggregate your proprietary keyword sets to third parties or data brokers.
4. Third-Party Service Providers
We partner only with vetted sub-processors compliant with modern security standards:
| Partner | Purpose | Data Handled |
|---|---|---|
| Lemon Squeezy | Merchant of Record, billing & tax compliance | Billing details, email, subscription status |
| Cloudflare | DDoS mitigation, CDN, and DNS security | IP address, browser headers, request telemetry |
| Postmark / Resend | Transactional emails & 30-day digests | Recipient email address, report summary HTML |
5. Google API Limited Use Disclosure
ZevSEO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We strictly use your Google Search Console read-only access to compute CTR gaps and surface striking-distance queries inside your private dashboard.
6. Data Retention & Erasure (GDPR / CCPA)
You hold full sovereignty over your data. Under GDPR and CCPA regulations, you maintain the following rights:
- Right to Access: Request a full copy of your historical ranking logs and tracked queries in CSV format.
- Right to Rectification: Modify your project domains, target timezones, and account details at any time.
- Right to Erasure ("Right to Be Forgotten"): When you delete a workspace or terminate your account, all associated keyword records, ranking caches, and GSC OAuth tokens are permanently purged from our active databases within 14 days.
7. Cookies & Local Storage
We use minimal, strictly necessary cookies to manage authentication sessions and remember your UI preferences (e.g., annual vs monthly billing toggle or active workspace ID). We do not deploy intrusive third-party cross-site advertising trackers.
8. Contact Our Data Protection Team
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our privacy officer directly:
ZevSEO Privacy Team
Email: [email protected]
General Support: [email protected]