Legal documents

Privacy policy

Effective 6 October 2026.

This policy explains how SEO Signals collects, uses, stores and shares personal information, including the data you allow SEO Signals to read from your Google account. It applies to seo-signals.com, the SEO Signals dashboard and any free tools on the site.

Who we are

SEO Signals is run by Agent Smith, based in Southampton, United Kingdom. Agent Smith is the data controller for the personal information described in this policy. You can contact us at hello@seo-signals.com or through https://seo-signals.com/contact.

Information we collect

Account information. When you sign in with Google, we receive your name, email address and Google account identifier. If you register with email, we receive your email address and the password you choose, which is handled by our sign-in provider and is never stored in plain text.

Google Search Console data. With your permission, SEO Signals reads Search Console performance data for the properties you choose, such as queries, pages, clicks, impressions, click-through rate and average position, and indexing information Google reports for those properties.

Google Analytics 4 data. With your permission, SEO Signals reads Google Analytics 4 data for the properties you choose, such as landing pages, sessions, users, engagement and the key events you have set up.

Content you create. This includes the questions you ask in the dashboard, the answers generated for you, the fixes you track, the property you select and your settings, such as your preferred AI model.

Your own AI provider keys. If you choose to add your own OpenAI or Anthropic API key, we store it encrypted and use it only to send your requests to that provider.

Technical information. Like most websites, our hosting provider processes your IP address, browser type and request details to deliver the site, prevent abuse and apply rate limits. We keep only limited technical logs for security and reliability.

Free tools. When you use a free tool, such as a page check, we process the URL you submit to produce the result. We do not store the URL or the fetched page, and the result is shown only to you.

Google user data

SEO Signals asks Google for these permissions: your basic profile and email address (openid, email and profile) to create and secure your account; read-only access to Google Search Console (https://www.googleapis.com/auth/webmasters.readonly); and read-only access to Google Analytics (https://www.googleapis.com/auth/analytics.readonly).

SEO Signals uses Google user data only to provide and improve the features you use: showing your search and analytics data, finding up to three recommended SEO fixes, answering questions you ask about your own data, and tracking the fixes you work on. SEO Signals cannot edit, publish or delete anything in your Google account.

Limited Use. SEO Signals' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

In line with those requirements, we do not sell Google user data. We do not use it for advertising, including personalised, retargeted or interest-based advertising. We do not use it to determine credit-worthiness or for lending. We do not use it to develop, improve or train generalised AI or machine learning models. We only transfer it to others where needed to provide or improve features you use, to comply with the law, for security, or as part of a merger or acquisition with notice to you.

People do not read your Google user data unless you ask us to, for example in a support request, or where it is needed for security, to investigate abuse, or to comply with the law. Where possible, we use aggregated or anonymised data for internal operations.

How AI is used

SEO Signals uses large language models to explain your data in plain English and answer your questions. When you ask a question or request an explanation, SEO Signals sends your question and a summary of the relevant Search Console and Google Analytics data for the selected property to the AI provider you choose: Anthropic (Claude) or OpenAI. If you add your own API key, the request is sent under your own account with that provider.

These providers process the request to return an answer. We use their business API services, and both providers state that data sent through their APIs is not used to train their models by default. We do not send your Google account password, and we do not send data from properties you have not selected.

AI answers can be wrong. SEO Signals instructs the model to use only the data supplied and to state uncertainty, but you should check important decisions against the evidence shown in the dashboard.

How we use your information

We use personal information to create and secure your account; connect and read the Google properties you choose; generate your SEO priorities and answers; save your conversations, fixes and settings; respond to support requests; prevent fraud and abuse; and meet our legal obligations. We do not sell personal information.

Under UK data protection law, we rely on these lawful bases: performance of our contract with you, to provide the service you sign up for; your consent, for access to your Google data, which you can withdraw at any time; our legitimate interests, to keep the service secure and reliable; and legal obligation, where the law requires us to keep or share information.

Who we share information with

We use these service providers to run SEO Signals. They process data on our behalf and only as needed to provide their service: Cloudflare, for hosting, content delivery, security and encrypted storage of connection credentials; Supabase, for sign-in and the database that stores your account, settings, conversations and fixes; Google, to sign you in and to read the Search Console and Analytics data you authorise; and Anthropic and OpenAI, to generate AI answers as described above.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets. If that happens, we will tell you and this policy will continue to protect your information.

International transfers

Some of our service providers process data outside the United Kingdom, including in the United States. Where we transfer personal information outside the UK, we rely on the safeguards UK data protection law allows, such as adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep information

We keep your account information, connected property settings, conversations and tracked fixes for as long as your account is active, so the dashboard works when you return. Google access tokens are stored encrypted and are used only to read the data you authorised.

Demo sessions use sample data and are deleted automatically after one hour. Technical logs are kept for a short period for security and reliability.

You can ask us to delete your account and associated data at any time by emailing hello@seo-signals.com. We will delete it within 30 days, except where we must keep information to meet a legal obligation. You can also remove SEO Signals' access to your Google account at any time at https://myaccount.google.com/permissions. After that, SEO Signals can no longer read your Google data.

How we protect information

Access to Google data is read-only. Connection credentials and your own API keys are encrypted at rest. Data is sent over encrypted connections, and access to production systems is limited to people who need it to run the service.

Cookies and similar storage

SEO Signals does not use advertising or analytics cookies. The dashboard stores your sign-in session in your browser's local storage so you stay signed in. See our Cookie Policy at https://seo-signals.com/cookies for details.

Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal information, and to receive a copy of it in a portable format. Where we rely on your consent, you can withdraw it at any time, for example by removing SEO Signals' access in your Google account.

To exercise these rights, email hello@seo-signals.com. We will respond within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at https://ico.org.uk. We would appreciate the chance to address your concerns first.

Children

SEO Signals is not intended for anyone under 18, and we do not knowingly collect personal information from children.

Changes to this policy

We will update this policy when our practices change. If a change is material, for example a new type of Google data or a new service provider that receives it, we will tell you before it takes effect and, where required, ask for your consent again.

Contact

For any privacy question or request, contact Agent Smith, the operator of SEO Signals, at hello@seo-signals.com.

Contact SEO Signals: hello@seo-signals.com · Contact page