Privacy Policy

Only what the product needs to run:

• Your account: name, email address, and a password stored as a one way hash. We never hold the password itself.
• Your plan: which plan you are on, when a trial ends, and when you last signed in.
• The sites you add: the domains you enter as projects, together with the audits run against them and the results kept as history.
• Support requests: the name, email address and message you send us, filed as a ticket in our helpdesk so an agent can reply to you.
• Interface preferences: small settings such as the site you were last working on and whether the sidebar is collapsed.
• Server logs: our web server records the usual access log entries, including IP address, browser and the page requested, which we use for security and troubleshooting.

We do not buy personal data from anyone, and we do not build advertising profiles.

Connecting Google is optional. The product works without it. When you do connect, you approve the request on Google’s own consent screen and we ask for read only access to these three scopes:

• Search Console, read only (webmasters.readonly): to show your clicks, impressions, average position and the queries your pages already rank for.
• Analytics, read only (analytics.readonly): to list the Analytics properties on your account and report sessions and traffic for the property you pick.
• Your Google email address (userinfo.email): so the dashboard can show which Google account is connected.

We store the access token, the refresh token and the connected Google email address so the connection survives past the hour Google allows, and so you are not asked to sign in again every visit. Search Console and Analytics figures are requested when you open a report and shown to you. Nothing is written back: we never modify, add to or delete anything in your Search Console or Analytics account.

SEOScanPro’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, data we receive from Google APIs is:

• never sold, and never shared with a data broker or an advertising network,
• never used to serve advertising of any kind,
• never used to train, fine tune or evaluate any artificial intelligence or machine learning model,
• never read by a person at NewSunSEO except where you have asked us to help with a specific problem, or where the law requires it,
• used only to produce the reports you see in your own dashboard.

You can disconnect at any time on the Settings page in the app. Disconnecting deletes the stored tokens and the connected email address from our database immediately. You can also revoke our access from your Google account at myaccount.google.com/permissions.

• To run the product: crawl and score the sites you add, and show you the results.
• To send the few emails the account needs: a verification code when you register, a password reset when you ask for one, and replies to support tickets. We do not add you to a marketing list without asking.
• To keep the service secure: rate limits, lock out after repeated failed sign in attempts, and investigating abuse.
• To understand which parts of the product get used, in aggregate.

The app shows small banners for other NewSunSEO products in the left navigation. We count how often each one is shown and clicked so we know which are worth keeping, and a click carries a click identifier in the link so we can tell whether it led to a signup on that other site. Views by our own staff are recorded separately and excluded from the numbers. These banners are ours. There is no third party ad network involved and no advertiser receives anything about you.

We do not sell personal information, and we do not rent or trade mailing lists. Your data is handled by us and by a small number of services that exist to make the product work:

• Our own servers, which host the application and the database.
• Our mail provider, which delivers verification codes, password resets and support replies.
• Our helpdesk, where support tickets are stored so we can answer them.
• Google, when you have connected your Google account and we request your own Search Console or Analytics figures on your behalf.

We will also disclose information if the law genuinely requires it, or to protect the service and its users from abuse. If the business is ever sold or merged, your data may transfer with it, and this policy travels with the data.

Signing in does not use a cookie. The full detail, including the Google Analytics cookies on the public pages and what is kept in your browser’s local storage, is on the cookie policy.

Account details and audit history stay while your account exists, because the history is the point: a score means little without the earlier scores to compare it against. Google tokens are deleted the moment you disconnect. Support tickets are kept so we have the thread if you write in again. Server access logs rotate on a short cycle.

Ask us to delete your account and we will remove it, and the projects and audits attached to it, within 30 days. Write to [email protected] from the address on the account.

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct something that is wrong, or ask us to delete it. If you are in the European Economic Area or the United Kingdom you also have the right to object to processing, to ask us to restrict it, and to complain to your data protection authority. If you are in California you have the right to know what we collect and to ask for deletion, and we do not sell or share personal information as those terms are used in California law.

Email [email protected] and we will handle it. There is no charge.

Passwords are stored only as hashes. The site is served over HTTPS. API access uses a signed token, and Google tokens are held server side and never exposed to the browser. Repeated failed sign in attempts lock an account. No system is perfect, so if we ever discover a breach affecting your data, we will tell you.

SEOScanPro is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.

Our servers are in the United States. If you use the product from elsewhere, your data is processed in the United States.

When the product changes what it collects, this page changes in the same pass and the date at the top moves. If a change is significant, we will say so by email rather than quietly editing the page.

SEOScanPro is operated by NewSunSEO. Write to [email protected] for anything in this policy, including a request to see or delete your data.